Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


greaneyr

52 posts

Master Geek


#289622 17-Sep-2021 17:15
Send private message

*Disclaimer* This guide is only intended for people who have purchased a router that was once owned by Nova. It is not intended to be used on routers leased from them while using Nova as an ISP.

 

 

 


I've read several posts here about Nova's policy of locking users out of the Netcomm NF18ACV router they supply with connections, but nothing further than that. A recent experience of mine necessitated me finding a solution, so I thought I would share, in case anyone ever needs to know.

 

I purchased a used NF18ACV, which had previously been supplied by Nova. I purchased it to use as a second access point in my garage, which I have only recently added network connectivity to. I wanted the router to be able to run the same firmware as I am running on my primary (internet-connected) router, as this provides functionality far superior to what the stock ISP-supplied routers do.

 

Upon receiving it, I promptly did a factory reset, only to find that the default username/password combo of 'admin/admin', despite being printed on the bottom of the router, did not work.

 

I use Nova myself as an ISP, so was already aware of their policy of locking customers out of their router. In fact, it was this decision that prompted me to buy my own NF18ACV earlier this year, so I didn't have to live with ringing them for the password any time I wanted to make changes to my network.

 

Despite a few attempts at guessing the password, I was not able to log on. So I phoned Nova. Eventually I was called by one of their support team who was able to help me. While they didn't have the initial default password on file, I was able to connect the router to the ONT and have it sync up with Nova, then download the latest config (and a known admin password). He then gave me the current admin password and I was able to log on.

 

When I've spoken to them about this in the past, they have always given me the password but added that at any point in the future, the password could change so I would need to call them again. This is because they use TR-069 to centrally manage routers on customer premises.

 

While on the phone with the Nova guy, I thought I would find out what might happen to my router in the future. Given I would be upgrading the firmware and removing the TR-069 entry to prevent it from finding its way back to Nova passwords in future, I wanted to make sure I wasn't setting myself up for a brick - a router with the unknown original password from Nova but no way of ever changing it. The guy I spoke to seemed to think it would be fine, but I was unconvinced. 

 

I then contacted Netcomm support to ask what would happen in this case. Here's a summary of what I've been able to establish, from my own experience and from Netcomm Support:

 

The custom admin password is contained in the Nova firmware image
The Nova firmware image also contains configuration to use their TR-069 server, providing them with the ability to rotate admin passwords on all willing routers
Even if you have admin access to the router, you cannot install a generic firmware image from Netcomm. BUT.....
You can upload a firmware image to the router using TFTP without any authentication. This will do two things
Put a generic firmware image onto your router
Reset the password to admin/admin after a factory reset.

 

If you join the dots, what this provides is the ability to reset a Nova locked router back to a generic state without needing to know the current admin password.

 

So, if you purchase a router that was originally supplied to Nova, fear not, because not only can you gain access to the router's admin interface, you can load a far nicer firmware image onto it as well.


Create new topic
gareth41
734 posts

Ultimate Geek


  #2781153 20-Sep-2021 14:39
Send private message

This sort of thing is becoming more of a common occurrence these days as vendors lock down their hardware to prevent use with other platforms and to avoid any "user complications".  As stuff also moves to the cloud, there's becoming more and more devices ending up in bin's because they can no longer be used, either the license has expired or they simply "aren't supported" any longer by the cloud provider.

 

I recently got hold of an old Meraki MR18 I wanted to use to extend my home wifi, quickly found out its a cloud device with no internal web console to configure it like you do with traditional routers, additionally its cloud license had log expired.  So after a bit of reading over at openwrt.com I ended up opening up the MR18 and using the JTAG header on pcb to flash openwrt onto it.


Create new topic





News and reviews »

Synology Introduces BeeStation
Posted 23-Feb-2024 14:14


New One UI 6.1 Update Brings Galaxy AI to More Galaxy Devices
Posted 23-Feb-2024 10:50


Amazon Echo Hub Available in New Zealand
Posted 23-Feb-2024 10:40


InternetNZ Releases Internet Insights 2023
Posted 20-Feb-2024 10:31


Seagate Adds 24TB IronWolf Pro Hard Drives for Multi-user Commercial and Enterprise RAID Storage Solutions
Posted 19-Feb-2024 16:54


Seagate Skyhawk AI 24TB Elevates Edge Security Capacity and Performance
Posted 9-Feb-2024 17:18


GoPro Releases Quik Desktop App for macOS and Introduces Premium+ Subscription Tier
Posted 9-Feb-2024 17:14


Ring Introduces New Ring Battery Video Doorbell Pro
Posted 9-Feb-2024 16:51


Galaxy AI Transforms the new Galaxy S24 Series
Posted 18-Jan-2024 07:00


D-Link launches AI-Powered Aquila Pro M30 Wi-Fi 6 Mesh Systems
Posted 17-Jan-2024 20:02


Newest LG 4K Lifestyle Projector Doubles as Art Objet
Posted 9-Jan-2024 15:50


More LG Smart TV Owners Set To Enjoy the Latest webOS Upgrade
Posted 9-Jan-2024 15:45


Panasonic Announces the Z95A and Z93A With Fire TV Built In
Posted 9-Jan-2024 15:30


Amazon Echo Pop Review
Posted 8-Jan-2024 14:22


Samsung Tab S9 FE Review
Posted 17-Dec-2023 08:26



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.