BT Home Hub
The BT Home Hub 4
|Release date||May 10, 2013(BT Home Hub 5)|
|Introductory price||£109 (free with BT Broadband)|
Home Hub 1.0 and 1.5
Home Hub 2.0
11.6 cm (4.6 in) (h)
23.6 cm (9.3 in) (w)
3.1 cm (1.2 in) (d)
|Weight||301g (BT Home Hub 5)|
The BT Home Hub is a family of wireless residential gateway router modems distributed by BT for use with their own products and services as well as wholesale resellers i.e. LLUs. The latest versions of the Home Hub are based on the Wi-Fi 802.11ac standard, and are also backward compatible with the 802.11b/g/n standards. All models of the Home Hub prior to the Home Hub 3 support VoIP Internet telephony via BT’s Broadband Talk service and are compatible with existing DECT handsets.
The BT Home Hub works with the now defunct BT Fusion service and works with the BT Vision video on demand service. The BT Home Hub 1.0, 1.5 and 2.0 devices connect to the Internet using a standard ADSL connection. The BT Home Hub 3 and 4 models support PPPoA for ADSL and PPPoE for VDSL2, in conjunction with an Openreach-provided VDSL2 modem to support BT’s FTTC network (BT Infinity). Since hardware version 5 of the Home Hub was released in August 2013 it includes its own VDSL2 modem for Fibre-optic connections. Firmware is pushed out to the device by BT automatically.
- 1 Features
- 2 Design
- 3 History
- 4 Technical specifications
- 5 Criticism
- 6 References
- 7 External links
The BT Home Hub 2.0 was a combined wireless router and phone. It supports the 802.11b/g/n wireless networking standards, and the WEP and WPA security protocols. It supports many of BT's services such as BT Fusion, BT Vision and BT Broadband Anywhere. It can also be used as a VOIP phone through BT Broadband Talk.
The BT Home Hub 3 incorporated WPS functionality, seen on other routers, which enables the user to connect to their encrypted network by the use of a "one touch" button, and also includes "smart wireless technology", which automatically chooses the wireless channel to give the strongest possible wireless signal. WPS has since been (temporarily) disabled by firmware updates due to security issues with the standard.
The BT Home Hub supports port forwarding.
The BT Hub Phone is an optional handset that can be bought to work in conjunction with the BT Home Hub 2.0. It calls using the BT Broadband Talk service, and may sit in a dock in the front of the Home Hub or be used on its own stand. It uses Hi-def sound technology when calls between Hub Phones are made. A DECT telephone can be used in place of the Hub Phone.
With each BT Home Hub released up to 2.0, a new phone was made to accompany it:
- BT Home Hub 1.0: Came with the BT Hub Phone 1010
- BT Home Hub 1.5: Came with the BT Hub Phone 1020 (The only difference between the 1010 and the 1020 was the lack of the colour screen on the 1020, and lack of colour screen based features.)
- BT Home Hub 2.0: Came with the BT Hub Phone 2.1
- The BT Home Hub 3 and 4 do not work with the BT Broadband Talk service and can no longer be paired with a DECT telephone. After 29 January 2011, BT Broadband Talk was no longer provided as part of BT's broadband packages.
The phones are only partially compatible with newer or older versions of the hub, able to make and receive calls, but with the loss of features such as: call waiting, call transfer, internal calls, phonebook, call lists and Hi-def sound.
There have been five different versions of the BT Home Hub so far:
- Version 0.5: grey (no Hub Phone was available, not technically a Home Hub but rather BT Fusion Hub)
- Version 1.0: white (matching Hub Phone was available)
- Version 1.5: white or black (matching Hub Phone was available)
- Version 2.0: black (matching black Hub Phone was available)
- Version 3.0: black (Hub Phones and DECT phones are not compatible) released on 29 January 2011.
- Version 4.0: black (Hub Phones and DECT phones are not compatible) released on 10 May 2013.
- Version 5.0: black, released in mid-October 2013
There were two different versions of the BT Home Hub 2.0: the BT Home Hub 2.0A (2.0 Type A), manufactured by Thomson and the BT Home Hub 2.0B (2.0 Type B), manufactured by Gigaset Communications (now Sagem Communications, Sagem having acquired Gigaset's broadband business in July 2009). Whilst the looks and functionality appear to be identical, the Home Hub 2.0A has been plagued with problems relating to poorly tested firmware upgrades which, amongst other problems, cause the Home Hub 2.0A to restart when uploading files using the wireless connection.
There are also two versions of the BT Home Hub 3: the BT Home Hub 3A, which contains hardware manufactured by Gigaset (now Sagem) and the BT Home Hub 3B, which contains hardware manufactured by Huawei.
The BT Home Hub can only be used with the BT Total Broadband package without modification; the 1.0, 1.5, 2A, 2B and 3A versions can be unlocked. The BT Home Hub configuration software is compatible with both Mac and Windows operating systems, although use of this is optional and computers without the BT software will still be able to connect to the Hub and browse the Internet normally.
The 4th generation of the BT Home Hub was released on the 10th May 2013. It has been built with a smart dual band technology, making it unique amongst other UK-based ISP provided routers. The Home Hub 4 will be free for new customers, whilst existing BT Broadband customers will be able to upgrade from June 2013 for £35. It has intelligent power management technology which monitors the hub functions and puts them individually into power save mode when not in use. There are now 2 variants of the Hub 4, Type A and B.
The 5th generation Home Hub was released in mid-October 2013 and is an upgrade to the Home Hub 4, featuring Gigabit Ethernet connections and 802.11ac Wi-Fi and an integrated VDSL modem. A £45.00 charge is levied to upgrade for existing Broadband customers. Customers upgrading from ADSL Broadband pay only a delivery charge. There are now 2 variants of the Hub 5, Type A and B
Prior to release of the Home Hub (2004-2005), BT offered a product based on the 2Wire 1800HG, and manufactured by 2Wire. This was described as the "BT Wireless Hub 1800HG", or in some documentation as the "BT Wireless Home Hub 1800". This provided one USB connection, four ethernet ports and Wi-Fi 802.11b or 802.11g wireless connection. A total of ten devices in any combination of these was supported.
The hardware contained within the BT Home Hub 1.0 and 1.5 was manufactured by Inventel, and is equivalent to other Inventel produced and third-party branded routers such as the Orange Livebox and the Thomson SpeedTouch 7G and ST790. Consequently, the Home Hub 1.0 can be flashed with some firmware such as that for the 7G; however full functionality cannot be achieved using this method. The Home Hub 1.5 firmware, whilst not hardware locked as previously claimed, does have extra locks in the bootloader which can now be circumvented and full functionality achieved.
There are two versions of the BT Home Hub 2.0, the A and the B model. The hardware contained within the Home Hub 2.0A was manufactured by Thomson SpeedTouch, who had bought out Inventel and all their hardware and software rights. This model is electronically identical to the Thomson SpeedTouch TG797n.
The hardware contained within the BT Home Hub 2.0B was manufactured by Siemens' Gigaset division in Germany. The middleware was developed by Jungo, a subsidiary of NDS, and is based on their openRGTM product.
Some Home Hub 2.0 units were also made by Hon Hai Precision Ind. Co. Ltd.
In the standard firmwares, telnet shell access is available in earlier versions (up to 220.127.116.11) on the BT Home Hub 1.0 with appropriate user permissions. This is identical to the custom shell used in the SpeedTouch range of routers and provides an almost identical software feature set, with a few notable exceptions (e.g. PPP authentication is locked on the BT firmware). This is not the case in the unlocked versions, as full telnet access is available.
There are two versions of the BT Home Hub 3, the A and the B model. The hardware contained within the Home Hub 3A was manufactured by Siemens' Gigaset division (now Sagem) and is based on a Lantiq XWAYTM ARX168 chipset supporting ADSL2+.
The Home Hub 3B was manufactured by Huawei and also supports ADSL2+. The Home Hub 3B is powered by a highly integrated Broadcom BCM6361 System-on-a-chip (SoC). The BCM6361 has a 400 MHz dual MIPS32 core processor as well as an integrated DSL Analog Front End (AFE) and line driver, gigabit Ethernet switch controller and 802.11 Wi-Fi transceiver.
BT Home Hub 2 type A
BT Home Hub 2 type B
BT Home Hub 3 type A
BT Home Hub 3 type B
BT Home Hub 4 type A
BT Home Hub 4 type B
BT Home Hub 5 type A
BT Home Hub 5 type B
|This section requires expansion. (August 2013)|
The BT Home Hub package includes:
- Broadband cable (RJ11 to RJ11)
- Ethernet cable (RJ45 to RJ45) (Cat5e)
- Power adapter
- 2 ADSL microfilters
- Phone to RJ11 converter
- User guide and CD
A USB lead was provided with the HomeHub 1 only.
|Spec||BT Home Hub 1.0/1.5||BT Home Hub 2.0||BT Home Hub 3||BT Home Hub 4||BT Home Hub 5|
|Modem||ADSL2+||ADSL2+||ADSL2+ (PPPoE is also supported in firmware for VDSL2)||VDSL2|
|Wi-Fi||802.11 b/g||802.11 b/g/n||802.11 b/g/n (now with "Smart Wireless", explained above)||2.4 GHz: 802.11n dual-stream 2x2 MIMO. Back compatible with 802.11 b/g.
5 GHz: 802.11n dual-stream 2x2 MIMO. Back compatible with 802.11a.
|2.4 GHz: 802.11 b/g/n
5 GHz: 802.11 a/ac/n
|WEP and WPA-PSK/WPA2-PSK/RADIUS||All previous features but now with WPS (temporarily disabled in firmware updates)||2.4 GHz: WPA & WPA2 (default), WPA, WPA2 and WEP 64/40
5 GHz: WPA2
|WPA (2.4GHz only), WPA2, WPS|
|Ports||2x Ethernet 10/100 Mbit/s sockets
1x USB 1.1 socket
2x RJ11 (broadband in and phone)
|4x 10/100 Mbit/s Ethernet sockets (RJ45)
1x USB (for network drives)
1x Broadband in (RJ11)
1x Telephone socket
|3x 10/100 Mbit/s Ethernet sockets (RJ45)
1x 10/100/1000 Mbit/s GigE Ethernet socket (RJ45)
1x USB socket (now enabled for use)
1x BT Infinity in (RJ45)
1x ADSL Broadband in (RJ11)
|4x 10/100/1000 Mbit/s GigE Ethernet socket (RJ45)
1x USB socket
1x BT Infinity in (RJ45)
1x VDSL Broadband in (RJ11)
(w x d x h)
|-||17.5 x 8.8 x 18.2 cm||18.5 x 4 x 11 cm||23.6 x 3.1 x 11.6 cm|
|Software||6.2.6.E or 6.2.6.H||8.1.H.U (Type A), 18.104.22.168.83.3.37 (Type B)||22.214.171.124.126.96.36.199.37 (Type A), V100R001C01B036SP05_L_B (Type B)||188.8.131.52.184.108.40.206.17 (Type A), v0.07.00.1729-BT (Type B)||220.127.116.11.18.104.22.168.6 (Type A), V0.07.01.0235-BT (Type B)|
The security of the BT Home Hub has been questioned several times by GNUCITIZEN. In October 2007, Adrian Pastor warned the security and BT Broadband community regarding critical vulnerabilities he discovered in the Home Hub. The details of such research were released later in November 2007 and demonstrated how to fully compromise (get root privileges) on the BT Home Hub by simply tricking a BT Home Hub user to visit a webpage crafted by the attacker.
Such research garnered a significant amount of media attention and led to Adrian Pastor being invited to BBC Radio 4 where he discussed the issue with Dave Hughes, director of BT Wireless Broadband. Mr Hughes argued that GNUCITIZEN's vulnerability research only covered a theoretical attack. Mr Pastor, on the other hand, stated that although GNUCITIZEN wasn't aware of such vulnerabilities being exploited in the wild, the attack is fully practical as demonstrated by the exploit code released at www.gnucitizen.org. Furthermore, Mr Pastor argued that the security of the BT Home Hub wasn't adequate to support the newly introduced Wi-Fi sharing FON service.
Also BT have admitted to being able to scan inside users home networks 
- "The UK’s most reliable broadband connection from BT’s new hub". BT Press Releases. 7 May 2013. Retrieved 10 May 2013.
- "BT Fusion on Hub 1.0". BT Customer Help. Retrieved 24 February 2013.
- "BT Vision self install process". BT Customer Help. Retrieved 24 February 2013.
- "The New BT Home Hub". BT. Archived from the original on 29 March 2010. Retrieved 28 March 2010.
- "The new BT Home Hub router". BT. Retrieved 24 February 2013.
- "BT Home Hub 3 WPS". BT Customer Help. Retrieved 24 February 2013.
- "BT Home Hub Help - Port Forwarding Help". File Save As. Retrieved 24 February 2013.
- "How do I register my BT Hub Phone to the Hub?". BT Customer Help. Retrieved 24 February 2013.
- "Connect a BT Hub Phone 2.1 to a BT Home Hub 1.0 or 1.5". BT Customer Help. Retrieved 24 February 2013.
- "PsiDOC.com". Retrieved 24 February 2013.
- "BT HH 5 features".
- Up and Running: Your guide to broadband networking with your BT Wireless Hub 1800HG. BT. 2004.
- "BT Home Hub 3.0 - Type B". kitz.co.uk. Retrieved 23 March 2012.
- "BT Home Hub - Information and Advice". File Save As. Retrieved 24 February 2013.
- "BT Home Hub models". BT Customer Help. Retrieved 24 February 2013.
- "Superfast BT Infinity". BT. Retrieved 24 February 2013.
- "Firmware versions for BT Home Hub". BT Customer Help. Retrieved 24 February 2013.
- Adrian Pastor (8 October 2007). "BT Home Flub: Pwnin the BT Home Hub". GNUCITIZEN. Retrieved 22 October 2008.
- Dan Goodin (9 October 2007). "BT home router wide open to hijackers". The Register. Retrieved 24 February 2013.
- "Wi-Fi fears". BBC Radio 4 You and Yours. BBC. Retrieved 2 June 2013.
- "BT cheerfully admits snooping on customer LANs".