[Snap] Flash SNAP Fritzbox to Stock Firmware (Remove 'contains basic settings adjusted for your Internet service provider')

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › [Snap] Flash SNAP Fritzbox to Stock Firmware (Remove 'contains basic settings adjusted for your Internet service provider')

niallm90

123 posts

Master Geek

Trusted

#148507 21-Jun-2014 11:59

Background
Recently Snap appear to be configuring parameters on the Fritzbox that are persistent through factory resets.

This was annoying me and I believed it to be causing me problems so I found a way to reset the Fritzbox.

Warning
Unfortunately I did this a few months ago and I am only writing it up now from notes I made on the day. I am also unable to retry this as I don't have a Fritzbox I was setting one up for my parents. For this reason I would advise that you only follow this guide if you know what you are doing. I am not responsible if you brick your Fritz, although I would say there is a low risk of that.

This will also upgrade your Firtzbox firmware to the latest available. You may be able to downgrade after this but I am not sure.

Pretext
If you are familiar with Telnet and have your own tool you can skip step 2, see step 3 for IP address and Port settings.

If you are going to complete this guide I would appreciate if you could take some screenshots so I can add them to each step. Also please inform me of any errors you find.

Guide

Download the recovery tool for your Fritzbox. This can be found on the AVM FTP server ftp://ftp.avm.de/fritz.box/. Once on the AVM FTP you will need to navigate to the directory that relates to your fritzbox. For me this was fritzbox.fon_wlan_7360_v2. Now navigate to the x_misc folder. Next select the correct folder for your language. For me this was englisch, the type-o is on the FTP server. Finally you need to download the executable named FRITZ*.recover-image.exe where the * is the model of your Fritzbox, languages and firmware version. My full URL was ftp://ftp.avm.de/fritz.box/fritzbox.fon_wlan_7360_v2/x_misc/englisch/FRITZ.Box_Fon_WLAN_7360.en-de-es-it-fr.06.05.recover-image.exe
Skip this step if you have your own FTP tool and know what you are doing. Download PuTTY from http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html you only need putty.exe but you can download the installer if you prefer. If you get the installer go ahead and install it now.
Once you have both the tools you need to run the Fritzbox recovery tool and follow the instructions until you get to the point where it complains about the settings being set by a service provider. At this point you need to open PuTTY. On the right you will see an area for an IP Address, Port and Protocol. Set the Protocol to Telnet, enter the IP Address shown in the recovery tool and set the Port to 21.
Now, after setting up PuTTY, click the open button at the bottom of the screen. This will now open a black console window. Enter the following commands:
1. User adam2
2. Pass adam2
3. SetENV provider
4. Quit
Finally close PuTTY and the Fritzbox recovery tool. Then open the recovery tool, again following the instructions. This time you should not be presented with an error about the provider and the tool should flash the Fritzbox.

Sources
http://www.geekzone.co.nz/forums.asp?forumid=66&topicid=139374
http://wiki.openwrt.org/doc/techref/bootloader/adam2
http://ar7.wikispaces.com/ADAM2
http://forums.whirlpool.net.au/archive/1858361

freakngeek

356 posts

Ultimate Geek

#1209280 6-Jan-2015 15:00

I'm about to give this a whirl later today.
I've searched hi and lo for an answer to my SNAP broken VOIP settings, no one seems to be able to sort
I don't have a dial tone on FON1/2,
I have a 2nd FB7390 not locked to SNAP
If I restore the lockes 7390 settings this also has no dialtone
Only way to fix this is to go back in FW (05.51 in my case) which does a full reset, then go forward to 06.20 then restore only the Telephony settings
And fully working VOIP
I'd now like my other FB7390 back to working condition with a full factory reset.

Hope to get some pics of the process while I'm at it.
And add the computer IP address setup stage as well for the recovery app to see the router as it boots.

Norton

Get easy to use, easy to install Norton antivirus protection against advanced online threats (affiliate link).

freakngeek

356 posts

Ultimate Geek

#1209542 6-Jan-2015 21:25

Well, many hours wasted on this, made only small progress

The above step 4 part 3 doesn't work 'SetENV provider' gives an error I think a parameter is missing, can't seem to find it.

I did how ever manage to get the SNAP locked firmware undone
I grabbed the 04.86 recovery FW from here http://fritzbox.com.au/firmware/annex_b/FRITZ.Box_Fon_WLAN_7390.AnnexB.en-de-es-it-fr.04.86-18550.recover-image.exe
This asks whether to over write the ISP settings, warnings bla bla, press OK and this FW gets put on
It does however not boot the FB7390 !!, as it's an Annex B recovery I presume
How ever you can now recover with FW 05:51 then set Annex A, then upgrade to 06:20, going directly to 06.20 may allow you to select Annex A

I can no longer get a dial tone at all any more on FON1/2 DECT still works, calls come in and FON1/2 rings (but sounds terribly sick)
SNAP must reset the VOIP password every 48 hours or so as I have no phone at all now.
I've reset the broken modem back up with original SNAP settings and ti should do an update via TR069 later
Thinking twice now about VOIP and it's swiss cheese of security and now SNAP taking over my router and being at it's mercy.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1209621 7-Jan-2015 05:52

All of the above problems are exactly why ISPs autoprovision and control their devices, and why you should do this as well.

freakngeek

356 posts

Ultimate Geek

#1209622 7-Jan-2015 06:05

Auto provisioning broke my dialtone, it was working fine till SNAP setup the TR069 and locked the router down.
I just want my VOIP to work like it did before the auto provisoning was setup and I wouldn't have to fiddle with it myself.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1209651 7-Jan-2015 08:34

What do you mean "broke your dialtone"? Autoprovisioning ensures that you have a fully managed end to end VoIP product that is guaranteed to work and is secure.

freakngeek

356 posts

Ultimate Geek

#1210824 8-Jan-2015 21:45

When I joined SNAP I had my own FB7390, I gave SNAP access to router so they could put in VOIP PW.
All was good with VOIP, but I had constant disconnects.
This was traced to giving me an IP already allocated.
While sorting this with a new IP, SNAP wanted to add my router to their system (provisioning)
They setup a TR069 link and router was updated numerous times.
Here is where my 'No dialtone' issue started.
The router at this point had not locked up the FW (I could still down grade)
When going back to FW 05.51, I got dialtone back, going forward to 06.20 then restoring back settings = no dialtone
Then after another FW update from SNAP the FW locked up, no more going back, at full merci of SNAP.

All I've had from support is 'it should work', I'm thinking yes it should but it doesn't
Now I've managed to get the SNAP FW lock removed router is back to what is was before, except 'no dial tone' persists, even going back to FW 05.51 made no difference.

chevrolux

4962 posts

Uber Geek
Inactive user

#1210831 8-Jan-2015 22:06

sbiddle: What do you mean "broke your dialtone"? Autoprovisioning ensures that you have a fully managed end to end VoIP product that is guaranteed to work and is secure.

Considering Snap didn't even have their dial plan sorted at one point I wouldn't be surprised if their auto-provisioning wasn't quite doing what it should either lol...

freakngeek

356 posts

Ultimate Geek

#1210840 8-Jan-2015 22:35

Nothing to loose now with this router so some work on nialm90's post above
The 3 command in part 4 is slightly wrong, corrected below
setenv provider xxxx
xxxx= name of provider, ie SNAP, so when you run the recovery it will still stop with ISP error but have the name of ISP in above command named in brackets.
unsetenv removes the ISP basic settings update block and what we should use.

I used FW 06.20 and it reset all the Mtd1-4 areas, running FW 05.51 recovery only did Mtd 1, 3 and 4

I'll be back shortly with, how I got on, WinXP and FB GUI not playing nice so have to plug router in to see how it got on

Corrected Guide

Download the recovery tool for your Fritzbox. This can be found on the AVM FTP server ftp://ftp.avm.de/fritz.box/. Once on the AVM FTP you will need to navigate to the directory that relates to your fritzbox. Now navigate to the x_misc folder. Next select the correct folder for your language. For me this was englisch, the type-o is on the FTP server. Finally you need to download the executable namedFRITZ*.recover-image.exe where the * is the model of your Fritzbox, languages and firmware version, download and save this file
Have a machine handy with WinXP, Win 8.1 gave me issues, boot up and have files handy
Skip this step if you have your own FTP tool and know what you are doing. Download PuTTY from http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html you only need putty.exe but you can download the installer if you prefer. If you get the installer go ahead and install it now.
Once you have both the tools you need to run the Fritzbox recovery tool and follow the instructions until you get to the point where it complains about the settings being set by a service provider. At this point you need to open PuTTY. On the right you will see an area for an IP Address, Port and Protocol. Set the Protocol to Telnet, enter the IP Address shown in the recovery tool and set the Port to 21.
Now, after setting up PuTTY, click the open button at the bottom of the screen. This will now open a black console window. Enter the following commands:
1. User adam2
2. Pass adam2
3. unSetENV provider
4. Quit
Finally close PuTTY and the Fritzbox recovery tool. Then open the recovery tool, again following the instructions. This time you should not be presented with an error about the provider and the tool should flash the Fritzbox.

freakngeek

356 posts

Ultimate Geek

#1210847 8-Jan-2015 22:58

The above does indeed work now.
Doesn't fix my lack of dialtone the search for this continues
But hopefully others may find the above useful for removing ISP blocks from Fritzbox routers.
BUT bewarned, you could brick your box, A Fritzbrick paper weight is a real possibility :)

clinty

1129 posts

Uber Geek

Lifetime subscriber

#1210895 9-Jan-2015 06:01

So just to confirm - DECT calls (Wireless handset attached directly to the Fritz DECT system) work fine and you can receive calls fine on Fon1/Fon2 but you can't hear a dial tone when plugged in to Fon1/Fon2 RJ-11 plugs?

If so the the SIP trunk is up and working fine. It sounds like ports

Have you tried another analogue phone and/or cable in Fon1/Fon2?

Clint

freakngeek

356 posts

Ultimate Geek

#1210916 9-Jan-2015 07:50

Yes DECT works in/out
Just FON1/2 got screwed up, can't reset this
Tried different cables, phones, standing on one foot, salt over left shoulder nothing works
There is a humm, can hear the receiver clicking when pressed, just can't dial out
When a call comes in, the ringer sounds like a strangled cat, even when setting up phone device
At least DECT works, I can make/receive calls, I'll just have to adjust my office.

Still will work more on the resetting router, via alternate means

pchs

174 posts

Master Geek

#1211023 9-Jan-2015 11:45

chevrolux:
sbiddle: What do you mean "broke your dialtone"? Autoprovisioning ensures that you have a fully managed end to end VoIP product that is guaranteed to work and is secure.

Considering Snap didn't even have their dial plan sorted at one point I wouldn't be surprised if their auto-provisioning wasn't quite doing what it should either lol...

Fritz box's don't have a user specified dial-plan/digit map, which is slightly frustrating, but the idea with them is that they auto-learn and build up a digit-map database, this is mainly for the European market where there numbers are not as nicely moderated as NZ/AU.

If for example you get a Fritz out of the box and dial 123 across SIP then you are going to get a long pause before the Fritz sends the digits to the SIP server, but on the second time it will send it pretty much instantly. later notes on the Fritz firmware updates though do say that they have made modifications for the NZ dialling plan so they must have added something in.

On a SIP trunk (business connection) they have used the standard TCF dialling plan for a number of years, which pretty much everyone else uses with their own modifications for internal use numbers.

If you are using a Snap at home SIP connection without the Fritz box you would be fine just using the standard TCF dialling plan, which will also for the most part work fine with any NZ SIP service.

unsignedint

69 posts

Master Geek

#1594948 19-Jul-2016 11:30

So, I went and re-flashed my Fritzbox 7390 to remove the Snap/2Degrees settings this weekend. I thought I should update this guide. Worked fine for me using Window 10 (only version I have, but I presume should be good on 7/8 also), and no need for PuTTY.

Download the recovery tool for your Fritzbox. This can be found on the AVM FTP server ftp://ftp.avm.de/fritz.box/. Once on the AVM FTP you will need to navigate to the directory that relates to your fritzbox. Now navigate to the x_misc folder. Next select the correct folder for your language. Finally you need to download the executable namedFRITZ*.recover-image.exe where the * is the model of your Fritzbox, languages and firmware version, download and save this file
Connect an Ethernet from LAN1 on the Fritzbox to your PC directly. Disconnect all other network cables from the Fritzbox.
Run the recovery tool on a Windows 7/8/10 machine (NOTE: do NOT run as administrator), and follow the instructions. You'll need to power-off the device, select the NIC on your PC that you connected to, and then power the device back on.
After the recovery tools starts talking to the device it will establish an IP address and check the software version. Then you will get to the point where it complains about the settings being set by a service provider.
At this open, open a Command Prompt, and type the command: "ftp <IP address>" replacing the IP address with the one shown in the recovery tool.
You will connect to the ADAM2 boot loader ftp server. Login with the username "adam2" and password "adam2".
At the ftp prompt run the command: "quote UNSETENV provider". It will respond with a successful confirmation. Then type "quit" and close the command prompt.
Now you can close the Fritzbox recovery tool. Then open the recovery tool, again following the instructions. This time you should not be presented with an error about the provider and the tool should flash the Fritzbox.