diff --git a/vd960DBN/BLE/OnlyUpdateApp_Peripheral/APP/net_srv.c b/vd960DBN/BLE/OnlyUpdateApp_Peripheral/APP/net_srv.c
index b15bbfe..5123f53 100644
--- a/vd960DBN/BLE/OnlyUpdateApp_Peripheral/APP/net_srv.c
+++ b/vd960DBN/BLE/OnlyUpdateApp_Peripheral/APP/net_srv.c
@@ -377,6 +377,74 @@ void reset_net_active_timeup(void)
     }
 }
 
+/* MQTT 数据接收处理 — IoT 模式 (ref: DBN101GA) */
+void mqtt_data_manage(uint8_t id)
+{
+    uint32_t len;
+    static uint8_t MyBuf[RECE_BUF_LEN];  // static: 避免栈溢出
+    unsigned char dup;
+    unsigned short packetid;
+    int qos;
+    unsigned char retained;
+    MQTTString topicName;
+    unsigned char *payload;
+    int payloadlen;
+
+    memset(MyBuf, 0, RECE_BUF_LEN);
+    len = WCHNET_SocketRecvLen(id, NULL);
+    WCHNET_SocketRecv(id, MyBuf, &len);
+    PRINT("MQTT recv sock=%d len=%d type=0x%02X\n", id, (int)len, MyBuf[0]);
+
+    switch (MyBuf[0] >> 4) {
+        case CONNACK:
+            PRINT("MQTT CONNACK\n");
+            dg_subscribe_display_topic();
+            dev_initialize_pub();
+            reset_net_active_timeup();
+            break;
+        case PUBLISH:
+            MQTTDeserialize_publish(&dup, &qos, &retained, &packetid,
+                                     &topicName, &payload, &payloadlen, MyBuf, len);
+            manage_mqtt_recv_message((char *)payload, payloadlen);
+            reset_net_active_timeup();
+            break;
+        case SUBACK:
+            PRINT("MQTT SUBACK\n");
+            break;
+        case PINGRESP:
+            PRINT("MQTT PINGRESP\n");
+            reset_net_active_timeup();
+            break;
+        default:
+            break;
+    }
+    g_net_state.flag = 4;
+}
+
+
+
+/*********************************************************************
+ * @fn      poll_mqtt
+ *
+ * @brief   MQTT 心跳轮询 — IoT 模式 (ref: DBN101GA)
+ *
+ * @return  none
+ */
+void poll_mqtt(void)
+{
+    if (g_net_state.flag < 2) return;
+
+    static uint8_t _ping_counter = 0;
+    _ping_counter++;
+
+    if (_ping_counter >= 90) {   // ~9s (roughly, based on loop period)
+        _ping_counter = 0;
+        MQTT_Pingreq();
+        PRINT("MQTT PINGREQ\n");
+    }
+}
+
+
 
 /*********************************************************************
  * @fn      WCHNET_DataManage
@@ -485,9 +553,27 @@ uint8_t i;
         return;
     }
     
-    // IoT MQTT mode -- route to MQTT handler
+    // IoT MQTT mode — inline MQTT handling (ref: DBN101GA)
     if (g_sub_code_enable.iot_enable) {
-        iot_mqtt_handle_sock_int(socketid, intstat);
+        if (intstat & SINT_STAT_RECV) {
+            mqtt_data_manage(socketid);
+        }
+        if (intstat & SINT_STAT_CONNECT) {
+#if KEEPLIVE_ENABLE
+            WCHNET_SocketSetKeepLive(socketid, ENABLE);
+#endif
+            WCHNET_ModifyRecvBuf(socketid, (uint32_t)SocketRecvBuf[socketid], RECE_BUF_LEN);
+            PRINT("TCP Connect Success (MQTT)\n");
+            mqtt_connect();
+        }
+        if (intstat & SINT_STAT_DISCONNECT) {
+            PRINT("TCP Disconnect (MQTT)\n");
+            g_net_state.flag = 1;
+        }
+        if (intstat & SINT_STAT_TIM_OUT) {
+            PRINT("TCP Timeout (MQTT)\n");
+            g_net_state.flag = 1;
+        }
         return;
     }
     
diff --git a/vd960DBN/BLE/OnlyUpdateApp_Peripheral/APP/peripheral_main.c b/vd960DBN/BLE/OnlyUpdateApp_Peripheral/APP/peripheral_main.c
index 2e85877..0e09359 100644
--- a/vd960DBN/BLE/OnlyUpdateApp_Peripheral/APP/peripheral_main.c
+++ b/vd960DBN/BLE/OnlyUpdateApp_Peripheral/APP/peripheral_main.c
@@ -271,7 +271,7 @@ void Main_Circulation(void)
 
         if (g_sub_code_enable.iot_enable) {
             iot_mqtt_publish_sensor();  // Push 0xC0 sensor data to MQTT broker
-            iot_mqtt_poll();            // IoT MQTT state machine + heartbeat
+            poll_mqtt();                // MQTT PINGREQ heartbeat (in net_srv.c)
         } else {
             tcp_json_push_sensor();     // Push 0xC0 sensor data to TCP JSON client
             tcp_json_poll();