Kitz Forum

Broadband Related => Broadband Hardware => Topic started by: roseway on March 24, 2011, 07:48:22 AM

Title: Alternative firmware for BT 2700HGV
Post by: roseway on March 24, 2011, 07:48:22 AM
For 2700HGV with v6.x firmware there is a functioning alternative which might be useful for some: Qwest firmware (http://bt2700hgv.tripod.com/085.htm)

I've successfully installed this firmware in one of my 2700HGVs, and it works well, but there are several points to note:

- this firmware contains none of the diagnostic features of the BT firmware.
- there's no means of changing the MTU from its default value of 1500.
- the timezone setting page only offers the 5 US timezones, so the router will always be on the wrong time if you're not on US time.
- the firmware has no VOIP capability (it's really for 2700HG, not HGV).
- Upgrading the firmware resets the router to its factory default settings, so you'll have to set it up again after the upgrade. The default IP address is 192.168.0.1, as opposed to the BT default which is 192.168.1.254; if you want to stick with the latter address, it can be changed but doing so is a bit fiddly.

On the plus side, the wireless power is adjustable (possibly beyond UK legal limits), the web interface isn't as sluggish as the BT firmware, and there's no longer any possibility of BT doing a remote firmware upgrade which might cause problems.
Title: Re: Alternative firmware for BT 2700HGV
Post by: waltergmw on March 24, 2011, 09:32:19 AM
Hi Eric,

That's most useful information. What a great pity from my viewpoint that there are no diagnostics available.

I've read elsewhere that it's impossible to downgrade from BT V 6 firmware. I wonder if installing Quest and then attempting a reinstallation of v 5 BT firmware would work?

Kind regards,
Walter
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on March 24, 2011, 09:53:00 AM
That's an interesting thought, Walter. I'll try to check it out later today.

(Later) ... and having done so with version 5-29-107-12 the downgrade didn't succeed - all I got was an unhelpful error message ("an error occurred").
Title: Re: Alternative firmware for BT 2700HGV
Post by: Barrie on March 24, 2011, 11:27:44 AM
Hi Eric,

Most interesting! Did you notice any change to Sync Rate when you installed the Qwest firmware?

Again, thanks for interesting info.

Barrie
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on March 24, 2011, 11:54:21 AM
No, the ADSL performance seems identical to how it was before the upgrade.
Title: Re: Alternative firmware for BT 2700HGV
Post by: Barrie on March 24, 2011, 12:15:39 PM
Now that is a pity :(
Title: Re: Alternative firmware for BT 2700HGV
Post by: Barrie on March 24, 2011, 05:00:06 PM
Hi Eric,

Would you do me a favour and check whether a VPI/VCI of 8/35 will work with your new Qwest firmware. I would be much obliged.

Barrie
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on March 24, 2011, 07:11:47 PM
Well, it accepts those values if I enter them, but of course I can't check if they work because I'm on a BT-based connection which uses 0/38.
Title: Re: Alternative firmware for BT 2700HGV
Post by: Barrie on March 25, 2011, 08:51:29 AM
Thanks Eric.
Title: Re: Alternative firmware for BT 2700HGV
Post by: iwish on April 06, 2011, 12:17:35 PM
Going to try this out, what is the default password when you install this firmware
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on April 06, 2011, 12:31:22 PM
I can't remember for certain, but I think it was probably blank. All the information I have is here: http://bt2700hgv.tripod.com/085.htm .
Title: Re: Alternative firmware for BT 2700HGV
Post by: Mick on April 07, 2011, 07:46:10 PM

- the timezone setting page only offers the 5 US timezones, so the router will always be on the wrong time if you're not on US time.


Have you tried editing the HTML source to increase the list?

This is an extract from mine with firmware 5.29.117.6:

Code: [Select]
                    <div class="roundnested"><div class="subtitle">Current Date and Time</div>Retrieving date and time settings from the Internet...<div class="dotted" style="height: 17px;"></div><div class="subtitle">Select Your Time Zone</div><p>The date and time are automatically set using time servers on the Internet. The local time is set correctly when you select your time zone. Select the time zone below and click SAVE.</p><select name="TZID" class="textmono"><option value="1;SST+11;SST+11">
          (GMT-11:00) Midway Island, Samoa</option><option value="2;HST+10;HST+10">
          (GMT-10:00) Hawaii</option><option value="3;YST+9;YDT+8">
          (GMT-09:00) Alaska</option><option value="4;PST+8;PDT+7">
          (GMT-08:00) Pacific Time (US & Canada); Tijuana</option><option value="5;MST+7;MST+7">
          (GMT-07:00) Arizona</option><option value="6;MST+7;MDT+6">
          (GMT-07:00) Mountain Time (US & Canada)</option><option value="7;CST+6;CST+6">
          (GMT-06:00) Central America</option><option value="8;CST+6;CDT+5">
          (GMT-06:00) Central Time (US & Canada)</option><option value="9;CST+6;CDT+5,M5.1.0,M9.5.0">
          (GMT-06:00) Guadalajara, Mexico City, Monterrey</option><option value="10;CST+6;CST+6">
          (GMT-06:00) Saskatchewan</option><option value="11;EST+5;EST+5">
          (GMT-05:00) Bogota, Lima, Quito</option><option value="12;EST+5;EDT+4">
          (GMT-05:00) Eastern Time, (US & Canada)</option><option value="13;EST+5;EST+5">
          (GMT-05:00) Indiana (East)</option><option value="14;AST+4;ADT+3">
          (GMT-04:00) Atlantic Time (Canada)</option><option value="15;AST+4;AST+4">
          (GMT-04:00) Caracas, La Paz</option><option value="16;NST+3:30;NDT+2:30">
          (GMT-03:00) Newfoundland</option><option value="17;BRT+3;BRDT+2,M10.2.0,M2.3.0">
          (GMT-03:00) Brasilia</option><option value="18;ART+3;ART+3">
          (GMT-03:00) Buenos Aires, Georgetown</option><option value="19;WGT+3;WGST+2,M3.5.0/1,M10.5.0/1">
          (GMT-03:00) Greenland</option><option value="20;MAT+2;MAST+1,M3.5.0/1,M10.5.0/1">
          (GMT-02:00) Mid-Atlantic</option><option value="21;AZOT+1;AZOST,M3.5.0/1,M10.5.0/1">
          (GMT-01:00) Azores</option><option value="22;EGT+1;EGT+1">
          (GMT-01:00) Cape Verde Is.</option><option value="23;WET+0;WET+0">
          (GMT) Casablanca, Monrovia</option><option value="24;GMT+0;BST-1,M3.5.0/1,M10.5.0/1" selected="selected">
          (GMT) Greenwich Mean Time, Dublin, Edinburgh, London</option><option value="25;CET-1;CEST-2,M3.5.0/1,M10.5.0/1">
          (GMT+01:00) Amsterdam, Berlin, Rome, Stockholm, Vienna</option><option value="26;CET-1;CEST-2,M3.5.0/1,M10.5.0/1">
          (GMT+01:00) Belgrade, Bratislava, Budapest, Prague</option><option value="27;CET-1;CEST-2,M3.5.0/1,M10.5.0/1">
          (GMT+01:00) Brussels, Copenhagen, Madrid, Paris</option><option value="28;CET-1;CEST-2,M3.5.0/1,M10.5.0/1">
          (GMT+01:00) Sarajevo, Skopje, Sofija, Warsaw, Zagreb</option><option value="29;WAT-1;WAT-1">
          (GMT+01:00) West Central Africa</option><option value="30;EET-2;EEST-3,M3.5.0/1,M10.5.0/1">
          (GMT+02:00) Athens, Istanbul, Minsk, Bucharest</option><option value="31;EET-2;EEST-3,M4.5.5/0,M9.5.4/23">
          (GMT+02:00) Cairo</option><option value="32;CAT-2;CAT-2">
          (GMT+02:00) Harare, Pretoria</option><option value="33;EET-2;EEST-3,M3.5.0/1,M10.5.0/1">
          (GMT+02:00) Helsinki, Riga, Tallinn</option><option value="34;IST-2;IST-2">
          (GMT+02:00) Jerusalem</option><option value="35;AST-3;AST-3">
          (GMT+03:00) Kuwait, Riyadh</option><option value="36;MSK-3;MSD-4,M3.5.0,M10.5.0">
          (GMT+03:00) Moscow, St. Petersburg, Volgograd</option><option value="37;EAT-3;EAT-3">
          (GMT+03:00) Nairobi</option><option value="38;GST-4;GST-4">
          (GMT+04:00) Abu Dhabi, Muscat</option><option value="39;AMT-4;AMST-5,M3.5.0,M10.5.0">
          (GMT+04:00) Baku, Tbilisi, Yerevan</option><option value="40;AFT-4:30;AFT-4:30">
          (GMT+04:30) Kabul</option><option value="41;YEKT-5;YEKST-6,M3.5.0,M10.5.0">
          (GMT+05:00) Ekaterinburg</option><option value="42;PKT-5;PKT-5">
          (GMT+05:00) Islamabad, Karachi, Tashkent</option><option value="43;IST-5:30;IST-5:30">
          (GMT+05:30) Chennai, Kolkata, Mumbai, New Delhi</option><option value="44;NPT-5:45;NPT-5:45">
          (GMT+05:45) Kathmandu</option><option value="45;ALMT-6;ALMST-7,M3.5.0,M10.5.0">
          (GMT+06:00) Almaty, Novosibirsk</option><option value="46;BDT-6;BDT-6">
          (GMT+06:00) Astana, Dhaka</option><option value="47;LKT-6;LKT-6">
          (GMT+06:00) Sri Jayawardenepura</option><option value="48;MMT-6:30;MMT-6:30">
          (GMT+06:30) Rangoon</option><option value="49;ICT-7;ICT-7">
          (GMT+07:00) Bangkok, Hanoi, Jakarta</option><option value="50;ICT-7;CHST-8,M3.5.0,M10.5.0">
          (GMT+07:00) Krasnoyarsk</option><option value="51;CHST-8;CHST-8">
          (GMT+08:00) Beijing, Chongqing, Hong Kong, Urumqi</option><option value="52;CHST-8;JST-9,M3.5.0,M10.5.0">
          (GMT+08:00) Irkutsk, Ulaan Bataar</option><option value="53;SGT-8;SGT-8">
          (GMT+08:00) Kuala Lumpur, Singapore</option><option value="54;WST-8;WST-8">
          (GMT+08:00) Perth</option><option value="55;CHST-8;CHST-8">
          (GMT+08:00) Taipei</option><option value="56;JST-9;JST-9">
          (GMT+09:00) Osaka, Sapporo, Tokyo</option><option value="57;KST-9;KST-9">
          (GMT+09:00) Seoul</option><option value="58;JST-9;EAST-10,M3.5.0,M10.5.0">
          (GMT+09:00) Yakutsk</option><option value="59;CAST-9:30;CAST-10:30,M10.5.0,M3.5.0">
          (GMT+09:30) Adelaide</option><option value="60;CAST-9:30;CAST-9:30">
          (GMT+09:30) Darwin</option><option value="61;EAST-10;EAST-10">
          (GMT+10:00) Brisbane</option><option value="62;EAST-10;EAST-11,M10.5.0,M3.5.0">
          (GMT+10:00) Canberra, Melbourne, Sydney</option><option value="63;ChST-10;ChST-10">
          (GMT+10:00) Guam, Port Moresby</option><option value="64;EAST-10;EAST-11,M10.1.0,M3.5.0">
          (GMT+10:00) Hobart</option><option value="65;ChST-10;SBT-11,M3.5.0,M10.5.0">
          (GMT+10:00) Vladivostok</option><option value="66;SBT-11;SBT-11">
          (GMT+11:00) Magadan, Solomon Is., New Caledonia</option><option value="67;NZST-12;NZDT-13,M10.1.0,M3.3.0">
          (GMT+12:00) Auckland, Wellington</option><option value="68;NZST-12;NZST-12">
          (GMT+12:00) Fiji, Kamchatka, Marshall Is.</option></select></div>
                  </div>
                  <div class="panelbuttons">
                    <script type="text/javascript">
      document.write('<div class="graybutton">');
      document.write('<input class="buttontext" type="button" onclick="javascript:location=\'/xslt?PAGE=A01&THISPAGE=A06&NEXTPAGE=A01\'\;" value="Cancel" />');
      document.write('</div>');
    </script>
                    <noscript>
                      <div class="graybuttonfake">
                        <a class="buttontext" href="/xslt?PAGE=A01&amp;THISPAGE=A06&amp;NEXTPAGE=A01">Cancel</a>
                      </div>
                    </noscript>
                    <script type="text/javascript">
      document.write('<div class="graybutton">');
      document.write('<input class="buttontext" type="submit" value="Save" />');
      document.write('</div>');
    </script>
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on April 07, 2011, 10:32:08 PM
Thanks for that, Mick. I hadn't thought of that.
Title: Re: Alternative firmware for BT 2700HGV
Post by: iwish on April 09, 2011, 05:12:35 PM
Took the plunge and now have that firmware on.
Must say its loads faster browsing the router and does indeed look better.
Let me know if you get the time zones
Title: Re: Alternative firmware for BT 2700HGV
Post by: GigabitEthernet on April 24, 2011, 08:22:57 AM
I have also recently flashed my 2700HGV with this firmware. So far it works great. But, I would just like to know if anybody knows how many mWs the "FULL" power option gives out, because I really wouldn't like to be breaking the law by sending out more power than is legal.
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on April 24, 2011, 09:53:39 AM
I don't know the answer to that question, but this page (http://bt2700hgv.tripod.com/033.htm) discusses the issue in relation to the v5 firmware. If you assume that the v6 firmware uses the same values, then level 4 equals 100 mW, the UK legal maximum. However, the page also suggests that levels above 4 make little difference with dual-SSID hubs.
Title: Re: Alternative firmware for BT 2700HGV
Post by: Mick on May 01, 2011, 11:20:41 AM

Let me know if you get the time zones


Use the Opera browser.  Login and go to the page with the time zones.  Right click on the page and select View Source.  Find the list of time zones in this source page and replace it with the list I provided in my previous message.  Click Apply.  Change tab to the HTML page that shows the router time zone and it should now include all these additional timezones in the drop down menu.  Select what you want and submit.  It should hopefully work ...
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on May 01, 2011, 11:41:22 AM
Use the Opera browser.  Login and go to the page with the time zones.  Right click on the page and select View Source.  Find the list of time zones in this source page and replace it with the list I provided in my previous message.  Click Apply.  Change tab to the HTML page that shows the router time zone and it should now include all these additional timezones in the drop down menu.  Select what you want and submit.  It should hopefully work ...

Yes, I've used that method for other similar jobs, so I expect it will work. I can't check it unfortunately, because I'm not using this firmware at the moment (I'm using an older v5.xxx version for its better diagnostic features).
Title: Re: Alternative firmware for BT 2700HGV
Post by: Mick on May 02, 2011, 12:03:13 AM
When you get a minute can you please confirm if the Qwest firmware shows the old detailed admin 'managment' page?

What do you get when you go to:

http://<ip_address>/xslt?PAGE=J02

Or

http://<ip_address>/managment

Or

http://<ip_address>/mdc


Finally, do you get a list of all the router stats if you head to:

http://<ip_address>/xslt?PAGE=J45

I'm asking because I've got a spare hub with the BT v6 firmware and unfortunately cannot access the above (which I need for monitoring with mrtg).  If Qwest shows these pages and allows me to switch off BT Openzone/Fusion and what have you, I'll need to consider it as a candidate.
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on May 02, 2011, 07:06:16 AM
Yes, I can hook up the router with the Qwest firmware to a spare PC and check if those pages exist. I'll try to find time this afternoon, otherwise tomorrow.
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on May 02, 2011, 02:59:24 PM
Sorry to disappoint, but all of those addresses give "Page not found".

Title: Re: Alternative firmware for BT 2700HGV
Post by: waltergmw on May 02, 2011, 03:25:11 PM
@ Eric,

Have you tried those commands after you've forced a log-in with the modem's password?
E.g. after attempting a modem reset.
With BT's firmware I sometimes find that pages are shown that weren't available beforehand.

Kind regards,
Walter

Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on May 02, 2011, 04:22:44 PM
I hadn't done that, but I have now - same negative result unfortunately.
Title: Re: Alternative firmware for BT 2700HGV
Post by: Mick on May 08, 2011, 12:17:20 PM
 :(

I take it that there's still no means of flashing a v6 firmwared router with v5.29.117.6 without a jtag?
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on May 08, 2011, 12:39:52 PM
Not that I'm aware of.
Title: Re: Alternative firmware for BT 2700HGV
Post by: Barrie on May 16, 2011, 09:11:02 AM


[/quote]

Have you tried editing the HTML source to increase the list?

[/quote]

Edited the code for just one option - changed the Hawaii option to give GMT. Initially it worked and showed the correct UK time but after a few minutes the code reverted to the original and so did the time. Am I doing something wrong Mick?

Barrie
Title: Re: Alternative firmware for BT 2700HGV
Post by: Mick on May 16, 2011, 12:20:18 PM
Do you get the same problem if you add a new timezone at the bottom, rather than changing an existing?

If yes, it may be that the firmware is quite smart and it won't save a configuration which does not align with existing parameters - so it will reject new timezones for example.
Title: Re: Alternative firmware for BT 2700HGV
Post by: Barrie on May 16, 2011, 01:35:43 PM
Do you get the same problem if you add a new timezone at the bottom, rather than changing an existing?

If yes, it may be that the firmware is quite smart and it won't save a configuration which does not align with existing parameters - so it will reject new timezones for example.

Same problem Mick - the only difference is it reverts to the original code/time zone almost immediately. Oh hum!
Title: Re: Alternative firmware for BT 2700HGV
Post by: GigabitEthernet on May 21, 2011, 06:10:09 PM
Hey guys. I have installed the Qwest firmware on my 2700HGV. I was wondering if it's possible to downgrade the firmware to the beta BT Business Hub firmware which I have downloaded? Will this brick the Hub?
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on May 21, 2011, 06:38:22 PM
What version is the BT firmware? I don't think that you can downgrade from Qwest to a 5.xxxx version, but you may be able to downgrade to an earlier 6.xxxx version. If you can't, it will probably say so before it starts, so it's unlikely that you'll brick the router (although I can't guarantee that of course).
Title: Re: Alternative firmware for BT 2700HGV
Post by: GigabitEthernet on May 21, 2011, 06:41:37 PM
It's 6.1.1.22
Title: Re: Alternative firmware for BT 2700HGV
Post by: GigabitEthernet on May 21, 2011, 06:43:17 PM
I don't suppose you could try it on one of your Hubs if I provide a download link?
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on May 21, 2011, 06:59:48 PM
Yes, I could do that.
Title: Re: Alternative firmware for BT 2700HGV
Post by: GigabitEthernet on May 21, 2011, 07:00:45 PM
Ok. Link is: http://www.sendspace.com/file/gf88v7
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on May 21, 2011, 07:41:38 PM
Yes, that regraded successfully, using 192.168.1.254/upgrade . The regrade took a surprisingly long time, but it got there in the end, after I'd begun to think that it had failed. Be aware that it resets the router to its factory defaults.
Title: Re: Alternative firmware for BT 2700HGV
Post by: GigabitEthernet on May 21, 2011, 07:44:53 PM
So it works from Qwest to that firmware?
Title: Re: Alternative firmware for BT 2700HGV
Post by: GigabitEthernet on May 21, 2011, 09:34:22 PM
I have done this and I can confirm it works!

So: anybody who wants to go back to BT firmware from the Qwest firmware can do so with the link posted above!
Title: Re: Alternative firmware for BT 2700HGV
Post by: BritBrat on May 22, 2011, 10:21:08 AM
Yes, that regraded successfully, using 192.168.1.254/upgrade . The regrade took a surprisingly long time, but it got there in the end, after I'd begun to think that it had failed. Be aware that it resets the router to its factory defaults.


Can you also go back to the Qwest firmware from v6 Bt firmware?
Title: Re: Alternative firmware for BT 2700HGV
Post by: roseway on May 22, 2011, 10:55:15 AM
Can you also go back to the Qwest firmware from v6 Bt firmware?

Yes you can.

I presume that this beta firmware is vulnerable to automatic update by BT to 6.1.1.48.
Title: Re: Alternative firmware for BT 2700HGV
Post by: GigabitEthernet on May 22, 2011, 12:02:38 PM
I would presume it is, but the good thing. is, that you can now switch between two different firmwares on the Business Hub. Somebody should write to the 2700HGV unlocking site and let them know!
Title: Re: Alternative firmware for BT 2700HGV
Post by: Mick on May 22, 2011, 12:09:58 PM
You may be able to flash the router to the 6.1.1.22 version, but what's the benefit of the 6.1.1.22 version?
Title: Re: Alternative firmware for BT 2700HGV
Post by: GigabitEthernet on May 22, 2011, 12:48:03 PM
Right guys!

Here's how to set the time to UK time.

1. Download Opera
2.  Go to the timezone page and right click and choose source
3. On the new page scroll down to the section with the time zones.
4. Above the highest time zone, paste this: <td>(GMT)</td>
<td>British Time</td>
<td><input type="radio" class="radio-btn" name="TZID" value="1;GMT+0;GMT-1"></td>
5. After that go back to the time zone page and click apply. That will set the time to the correct UK time.

Unfortunately, the daylight saving option has no effect so when the clocks go back you will have to manually change this again.
Title: Re: Alternative firmware for BT 2700HGV
Post by: GigabitEthernet on May 22, 2011, 12:49:08 PM
Woops!

That will set it to AM instead of PM. Bare with me whilst I sort this out.
Title: Re: Alternative firmware for BT 2700HGV
Post by: GigabitEthernet on May 22, 2011, 01:02:06 PM
That is now fixed. Use those steps and the time will be set correctly!
Title: Re: Alternative firmware for BT 2700HGV
Post by: Mick on May 22, 2011, 01:05:25 PM
Here's how to set the time to UK time.
[snip ...]

5. After that go back to the time zone page and click apply. That will set the time to the correct UK time.

You'll need to click Save first to save the changes you made to the source page, before you change tabs to the HTML timezone page.
Title: Re: Alternative firmware for BT 2700HGV
Post by: GigabitEthernet on July 14, 2011, 11:36:26 AM
Ok guys. My post was featured on bt2700hgv.tripod.com recently. I have been doing some more digging and here is how to set the correct time when the clocks go back.

Go to the time zone page. MAKE sure a time zone is selected, then uncheck day light saving and click apply. Then, follow the steps above and the time will be correct for when the clocks go back.
Title: Re: Alternative firmware for BT 2700HGV
Post by: itinker on August 25, 2011, 05:10:54 PM
Interesting!
Have flashed the router to Qwest 6.1.5.48 and tried to modify the time zone following your instructions without any joy.  I do see 'British Time' on the HTML tab, but then, no matter which procedure I follow, each time I hit the 'apply' button the configuration reverts, and I lose the 'British Time' input. Shame, 'cos I could do with the additional Wifi power uplift.  Any other suggestions?
Title: Re: Alternative firmware for BT 2700HGV
Post by: burakkucat on August 25, 2011, 06:08:50 PM
The "best" solution I can think up would be for someone to:

(1) confirm that once a 2700HGV is physically opened up, there are the headers to which a serial terminal can be attached
(2) that the existing firmware can be downloaded to a computer disk
(3) the firmware is then forensically examined
(4) if 2Wire are not forthcoming with the source code to the Linux-on-a-chip therein (they should be, the Linux kernel is GPLv2), reverse engineer the relevant sections
(5) build a totally new firmware, with sensible features available to those who require them
(6) upload and test the new firmware
(7) write up suitable documentation and make the new firmware available

Anyone up for the challenge? :-\
Title: Re: Alternative firmware for BT 2700HGV
Post by: Mick on August 25, 2011, 08:13:38 PM
The "best" solution I can think up would be for someone to:

(1) confirm that once a 2700HGV is physically opened up, there are the headers to which a serial terminal can be attached

There is no serial adaptor in it.  There are some soldered terminals to which a J-TAG can be connected.  To buy one of these we're talking about thousands of GBP.  The CPU is I believe a MIPS (http://www.mips.com/) and the JTAG is similar to this: http://www.mds.com/products/usb-jtag (can't find it on their website anymore).

(2) that the existing firmware can be downloaded to a computer disk
(3) the firmware is then forensically examined

I seem to recall that people who have looked at it said that it was some *BSD variant - not Linux.  If you google for it you may find the thread (can't recall the forum I saw this mentioned).

(4) if 2Wire are not forthcoming with the source code to the Linux-on-a-chip therein (they should be, the Linux kernel is GPLv2), reverse engineer the relevant sections

We're talking about VLIW (http://en.wikipedia.org/wiki/Very_long_instruction_word) set here.  Whoever is knowledgeable enough to code this would be probably gainfully employed by ... 2WIRE?  LOL!   ;D

(5) build a totally new firmware, with sensible features available to those who require them
(6) upload and test the new firmware
(7) write up suitable documentation and make the new firmware available

Anyone up for the challenge? :-\

Sure, if you can fund the development someone is bound to show up!  :)
Title: Re: Alternative firmware for BT 2700HGV
Post by: burakkucat on August 25, 2011, 08:45:02 PM
Hmm, I don't know if I can finance that, Mick.  :-\  Have you seen the price of cat-food, these days? ::)

Perhaps a fellow adventurer and owner of a silly-scope would be willing to give a good prod and poke to a 2700HGV . . .

My interest has been stirred up by the progress asbokid (http://forum.kitz.co.uk/index.php?action=profile;u=5879) has made with the Huawei HG612, a.k.a. the "hobbled" OR Modem, provided to FTTC customers.
Title: Re: Alternative firmware for BT 2700HGV
Post by: Mick on August 25, 2011, 10:12:50 PM
I will look for the thread when I get a minute.  Some guy shorted out the soldered terminals on the circuit board, placed it into bootstrap mode and was able to telnet into it and look at the filesystem.  However, there's hardly any commands he could run.  The firmware is locked down.
Title: Re: Alternative firmware for BT 2700HGV
Post by: burakkucat on August 25, 2011, 11:33:14 PM
Quote
I will look for the thread when I get a minute.

That would be appreciated, thank you.

Logically, I think there must be a way that the firmware can be loaded to / unloaded from a EEPROM (or other non-volatile storage device) on the PCB. ;)
Title: Re: Alternative firmware for BT 2700HGV
Post by: Mick on August 27, 2011, 10:08:33 AM
Quote
I will look for the thread when I get a minute.

That would be appreciated, thank you.

Here are some URLs which look familiar:

http://www.the-scream.co.uk/forums/showthread.php?s=b842ef2a78c6140312dfbf70699bdbd5&p=208077#post208077 (http://www.the-scream.co.uk/forums/showthread.php?s=b842ef2a78c6140312dfbf70699bdbd5&p=208077#post208077)

http://forums.whirlpool.net.au/archive/808533 (http://forums.whirlpool.net.au/archive/808533)

I'm sure google can reveal more.

Logically, I think there must be a way that the firmware can be loaded to / unloaded from a EEPROM (or other non-volatile storage device) on the PCB. ;)

You are logically correct.  However, to practically achieve this (or unbrick a bricked 2WIRE) you will need a very expensive JTAG.  :(

EDIT:  This guy seems to have made some inroads in determining the JTAG pin configuration, but the thread went cold:

http://open-wrt.ru/forum/viewtopic.php?id=22816
Title: Re: Alternative firmware for BT 2700HGV
Post by: burakkucat on August 27, 2011, 06:36:45 PM
Thank you for collating those URLs, Mick. I shall carefully scrutinise them once my 270xHG[V[-C]] ideas reach the top of my ever changing "ToDo" list.
Title: Re: Alternative firmware for BT 2700HGV
Post by: iwish on December 17, 2011, 02:34:40 PM
I can confirm that running Qwest firmware on my 2wire will not hold a connection for more than 5 mins on C&W LLU But running the bt firmware will