Unlocking BT 2Wire 2700HGV Business Hub (wireless router)

 

Contents > Telecom 2701HGV-W v6.1 firmware:

 

 

 


Unlocking Telecom 2701HGV-W with BT v6.1.1.22 Recovery Firmware

+ Unlock Telecom 2701HGV-W hub.

- Wireless Power output cannot be hacked when using BT v6.x firmware.  Cannot be used with 3rd party VOIP providers.  Be warned that this BT firmware contains a few bugs.  No Enhanced Services.

 

Last updated: 17 Jan 11 -     See also Qwest firmware for an alternative solution.



(Update 11 Nov 2011): Gnix reports that his two Singtel hubs with v6.1.1.22 can no longer connect to the home page or connect to the internet. He resolved the problem by adding static routes to block access to the BT provisioning servers.

 

 

I would not normally document hacking other 2wire 2700/2701 models, but I decided to include some information here simply because it made use of some untested BT v6.1.1.22-enh.tm firmware files I had been previously given.

Aaron from New Zealand wanted to use his Telecom 2701HGV-W hub with a different ISP.  The hub had Telecom v6.1.1.43-basic.tm firmware installed.

 

 

Please note this procedure has been tested on a Telecom 2701HGV-W hub which was already using Telecom v6.1.1.43-basic firmware.

If you are a Telecom NZ Buisness customer, we do not recommend that you attempt to change the firmware.  Telecom NZ may or could choose to block re-flashed hubs in the future which are connected to their network.

 

BT v6.1.1.22 firmware files

In spring 2009, 'Steve' was kind enough to email me a pair of firmware files which he discovered on a BT FTP server many months earlier.  They are believed to be for BT v6.1.1.22-enh.tm release.  It was probably a trial version of the firmware made available around May to Sep 2008.  I have not personally tested the files, and there are no instructions on how to use the pair of .2sp upgrade files and in which order they should be installed.

 

 

 


Telecom New Zealand

(1 Jul 09):  Aaron from New Zealand acquired a 2701HGV-W which has the new 'Telecom v6.1.1.43-basic.tm' firmware. (Assembly no. 4201-029000-000. Hardware version: 2701-100655-004).  He wanted to use the 2701HGV-W hub with another ISP.

 

WARNING:  Changing the firmware on your 2Wire hub is done so at your own risk.

 

The instructions provided below are for downgrading the Telecom v6.1.1.43 firmware in above mentioned Telecom 2701HGV-W hub to BT v6.1.1.22.

However, another reader, Ian F., has also successfully upgraded a BT 2700HGV Dual SSID hub from BT v5.29.107.12 to BT v6.1.1.22 as an experiment.  Please note that once the v6.x firmware is installed, it will not be possible to flash the hub with an older v5.x firmware.

 

 

His early attempts to unlock the hub were unsuccessful using the method described for BT v6.1.x firmware elsewhere.

 

He flashed his 2701HGV-W hub with one of the above mentioned BT v6.1.1.22 firmware files.  There are two files and he chose to install the larger of the two files, 'bt2700hgv_reinstall_enh.2sp'  (14Mb approx)

WARNING:  Install at your own risk.  It could brick your hub or the firmware may be incompatible with your ISP.  Please note there is no way of returning to any earlier v5 firmware or to the original firmware previously installed/supplied with your hub. 

Do NOT use this firmware to downgrade a 2700 or 2701 model running a version of firmware significantly higher than v6.1.1. There is a high probability of bricking the hub.

BT 2700/2701HGV models with v6.3.9.x can be successfully downgraded to v6.1.1.22.



Click here for the BT v6.1.1.22-enh.tm Recovery file used by Aaron to downgrade his hub from Telecom v6.1.1.43 to BT v6.1.1.22.

  

After downloading the file to your hard drive, you will need to extract (unzip) the contents of the zip file.

 

There is a 2nd upgrade file associated with this firmware package. Click here for the 2nd smaller file called 'bt-270x-pppoa_download_enh.2sp' (12Mb approx). We now believe this file is only used for updating a hub which was already running an earlier BT v6.1 test release. It does not appear to overwrite any existing hub settings and does not need to be installed.

 

To install the new firmware to a hub already running BT v6.x firmware, connect to the hub using an ethernet cable and use a web browser and navigate to     home/upgrade    webpage.  Follow the instructions to install the .2sp file.  The hub should automatically reboot when the upgrade is completed.  This will take a couple of minutes.

 

The 1st Recovery file entitled 'bt2700hgv_reinstall_enh.2sp'  successfully installed as you can see from the System Information page shown below:

 




Aaron then proceeded to edit the advanced ADSL settings in the  Settings > Broadband > Link Configuration   page.  As this is BT v6.x firmware, he used a fictitious BT ppp username to enable these advanced ADSL settings to be saved.  I believe these are the settings which are specific to his ISP in New Zealand:

PPP username

me@btbroadband.com

ATM Circuit Identifier

VPI: 0   VCI: 100

ATM Encapsulation

Routed VC-Mux

ATM PVC Search

Disabled

MTU

1492

 

The next step was to establish a connection with his ISP using the correct ppp username and password.  Aaron encountered a problem when he tried to enter his ppp username and password when using the following URL to directly access the PPP Authentication page:

http://192.168.1.254/xslt?PAGE=HURL13

After submitting his username and password, an error would appear.  He observed there was no prompt for entering the 'system password' with the BT v6.1.1.22-enh.tm firmware.  See screenshot below of what it should look like on BT v6.1.1.48-enh.tm firmware.  (Added 16 Feb 10: See my comments earlier about setting up a System password)

(Above picture reproduced from BT v6.1.1.48.1-enh.tm) 

 

He successfully used Opera web browser to modify the web page to re-instate the System password box. The details of the modifications can be found in the Quick Setup Instructions contained in the new dedicated BT v6.1.1.22 firmware page. There is also a new Opera-free method described on this new page too. (Updated Dec 11)



 

  


Test Results



The table has been moved to a new dedicated BT v6.1.1.22.x firmware information page.

           



 


Next Page:     Uncovering the VOIP Port

Use 'Back' button to return to previous page or click here to return to main menu