The update file contains the latest FRITZ!OS (Firmware) for the FRITZ!Box 6820 LTE v4. **Attention:** This update file is only intended for use with FRITZ!Box 6820 LTE v4! Please follow the instructions at the end of this file to install the update. ``` Product: FRITZ!Box 6820 LTE v4 Version: FRITZ!OS 7.59 Language: German, English, French, Italian, Polish, Spanish Release date: 11/28/2024 ``` **New features:** ------------------------------------------------------------ - New energy-saving mode can be switched on upon request - Simplified replacement of a FRITZ!Box with new wizard - VPN with WireGuard technology: Simple, fast, and secure connection to the home network from anywhere - IPv4 VPN connections can be tunneled using IPv6 - New home network speed control mode for more fairness - The user interface was fine-tuned and rounded out with comprehensive "Help and Info" - Many new functions for the MyFRITZ!App and FRITZ!App Smart Home (iOS/Android) ------------------------------------------------------------ With each FRITZ!OS update, AVM also updates its security functions. Therefore we recommend performing the update for all devices. ------------------------------------------------------------ Note: Instructions for configuring and using Mesh functions are presented at en.avm.de/mesh-faq Below you find a complete list and descriptions of the new functions in the latest FRITZ!OS, along with a list of further improvements in this version. --- # New Features in FRITZ!OS 7.56 ## Mobile Communication: - **NEW** Support for Cell Broadcast Messages ## Internet: - **NEW** Automatic prioritization provides for fairly distributed data rates throughout the entire FRITZ!Box network (home network and guest network) - **NEW** VPN with WireGuard for simple setup of fast, secure VPN connections (for more, see [1]> - **NEW** The MyFRITZ! direct connection allows you to receive information on the FRITZ!Box in real time on MyFRITZ!Net ## System: - **NEW** In the new energy-saving mode, Wi-Fi and USB use even less power for slightly reduced performance - **NEW** New wizard transfers all important Internet and WLAN settings as well as connections to mesh devices to a new FRITZ!Box - **NEW** "Help and Info" in the user interface: A completely overhauled help function with many instructions based on user scenarios and a strong search engine ## FRITZ!Apps: - **NEW** MyFRITZ!App offers the option to enable prioritization for internet access on each home network device - **NEW** MyFRITZ!App allows home network devices to be renamed - **NEW** MyFRITZ!App allows a MyFRITZ! account to be created for MyFRITZ! internet access to the user interface of the FRITZ!Box (for iOS) ------------------------------------------------------------ # Further Improvements of FRITZ!OS 7.59 ## Internet: - **Fixed** During active VPN connection over WireGuard® with transmission of entire network traffic, the FRITZ!Box allowed selection of user for HTTPS access - **Fixed** FTP connections from a network device completely exposed for internet access (exposed host) were too slow - **Fixed** IPv6 sharing settings as "Exposed Host" for devices with delegated IPv6 prefix were sporadically deleted - **Fixed** In certain browser versions https pages were not filtered reliably - **Fixed** Incorrect entry for the NTP server in DHCPv6 reply of the FRITZ!Box resulted in IPv6 home network devices not being able to obtain a valid time - **Fixed** Problems occurred with DNSSEC validation in FRITZ!OS ## System: - **Improved** When using the "Transfer Your Settings to a New FRITZ!Box" wizard, the settings for the captive portal of a public Wi-Fi hotspot are now transferred to the new FRITZ!Box - **Improved** Stability - **Fixed** After failed download of a FRITZ!OS update, under certain circumstances no further update queries - **Fixed** If the new FRITZ!Box required a FRITZ!OS update when using the "Transfer Your Settings to a New FRITZ!Box" wizard, the successful update was then sporadically not recognized and the error message that the FRITZ!OS of the new FRITZ!Box was too old was still incorrectly displayed - **Fixed** When using the "Transfer Your Settings to a New FRITZ!Box" wizard, an error occurred if an IPv4 address range other than the preset range was used in the home network - **Fixed** When using the "Transfer Your Settings to a New FRITZ!Box" wizard, the "Factory settings" status of the new FRITZ!Box was not always reliably detected and it was not possible to transfer the settings - **Fixed** When using the "Transfer Your Settings to a New FRITZ!Box" wizard, the IP filter list was not transferred to the new FRITZ!Box - **Fixed** When using the "Transfer Your Settings to a New FRITZ!Box" wizard, the settings for DNS rebind protection were not transferred to the new FRITZ!Box ------------------------------------------------------------ # Further Improvements of FRITZ!OS 7.57 ## System: - **Fixed** stability and security increased # Further improvements in FRITZ!OS 07.56 ## Mobile Communications: - **Improved** Mobile network overview with a new design and more detailed information on the mobile network connection (LTE information / overview) - **Improved** New modem firmware with various optimizations and improved stability - **Improved** ZeroTouch startup when using SIM cards with deactivated PIN query including automatic country and provider detection - **Improved** Option to set the preferred mobile network type during initial connection - **Improved** More detailed error messages in cases of problems establishing the Internet connection or disruptions during the connection - **Improved** Accompanying event messages during a mobile modem software update - **Improved** Mobile connection authentication via CHAP supported (Other provider allows setting PAP or CHAP) ## Internet: - **Improved** When the DNS server of the internet provider (or the listed DNS server) is interrupted, automatic switch to the public DNS server - **Improved** FRITZ!Box services (SMT, FTP, IGD and TR-064) offered via Bonjour or mDNS - **Improved** Unwanted queries from certain IP addresses to FRITZ!Box services can be blocked with the new IP block list - **Improved** "QUICK" added to the internet protocols supported by parental controls - **Improved** When internet access to storage media via FTP/FTPS is enabled, the randomly preselected port number is displayed - **Improved** Support for VPN user dial-in for Android mobile telephones and tablets with IKEv2 IPSec (preshared key) - **Improved** Optimized upload and download speeds by adjusting the TCP segment size (MSS clamping), now also for IPv6-based connections - **Improved** IPv4 VPN connections (IPSec) can be tunneled via IPv6, for instance to reach FRITZ!Box devices on DS Lite connections (IP6 tunnel for IPv4, IPv4-inIPv6) - **Improved** VPN packet acceleration supported in IPSec - **Improved** In the user interface, an image now illustrates the different types of VPN connections - **Improved** No publication of IPv4 address to MyFRITZ!Net on dual-stack connections with carrier-grade NAT; MyFRITZ! address always resolved here into the IPv6 address - **Improved** After a restart, the FRITZ!Box refreshes its IP address with MyFRITZ!Net immediately (DynDNS update) - **Improved** A FRITZ!Box in "Mesh Repeater" mode is automatically registered with the MyFRITZ! account of the Mesh Master - **Improved** Support for IPv6 during prioritization of network applications and prioritization of a home network device - **Improved** Display of data loading from the guest network on IPv6 in the "Online Monitor" - **Improved** The IPv6 Interface Identifier used on the WAN port is chosen at random - **Improved** Improved tips and error messages on sharing ports on DS Lite connections with PCP support - **Improved** Data traffic from Wi-Fi calling (VoWifi) with smartphones prioritized over the FRITZ!Box internet connection - **Improved** NTP interoperability improved through better estimation of the hardware clock's deviation - **Change** Predefined selection of DynDNS providers replaced by a general settings option - **Change** The "IPv6" tab is displayed for IPv6-only connections - **Change** Support for the User Service Platform specification (USP, Broadband Forum TR-369) and configuration on the "Provider Services" tab - **Change** When a new port sharing setting is created, the outdated "eMule" application is no longer listed - **Change** "Eplus" removed from the provider list for internet access (Germany) - **Fixed** The ICMP identifier for pings was set to 0 by the FRITZ!Box in some rare cases - **Fixed** The FRITZ!Box could send an invalid Phase1 ID for VPN user dial-in via IPSec - **Fixed** The entry field for the IPv6 LAN prefix was too small - **Fixed** The IPv6 address could not be entered manually for IPv6 port sharing - **Fixed** Devices in the guest network with a captive portal were not connected to the internet via IPv6 - **Fixed** IPv6: When SLAAC was used and the DHCPv6 server was disabled in the FRITZ!Box, after a restart IPv6 could not longer be used in the home network - **Fixed** In individual cases, deletion of a port sharing setting deleted additional port sharing settings of the same device - **Fixed** VPN connections (IPSec) to StrongSWAN via IPv6 failed under some circumstance - **Fixed** VPN connections (LAN-LAN) could not be saved without a name - **Fixed** In some scenarios the FRITZ!Box's NTP server did not work after re-establishing the internet connection - **Fixed** Under certain circumstances, not all DNS servers made available by the provider were used ## Wi-Fi: - **Improved** Data rates increased when exchanging data with certain wireless devices - **Improved** The legend below the "Allocation of Wi-Fi Channels" diagram on the "Wi-Fi / Wi-Fi Channels" page is now displayed in a single line - **Change** New message under "System / Event Log" when a new session key was negotiated (encrypted connections compliant with the WPA3/SAE standard) - **Change** Restructuring of the "Wi-Fi / Wi-Fi Network", "Wi-Fi / Security", and "Wi-Fi / Wi-Fi Channel" pages - **Change** MAC address filters are limited to a maximum of 128 entries - **Fixed** On the user interface for the "Wi-Fi Guest Access", starting the WPS quick connection was linked with the "Wi-Fi / Security / WPS" page - **Fixed** Sorting of "Other Wi-Fi Networks in Your Vicinity" table by name did not always work reliably ("Wi-Fi / Wi-Fi Channel" page) - **Fixed** Preset name for Wi-Fi guest access linked to the language selection ## Mesh: - **Improved** Display of home network connections on the "Mesh" page of the user interface responds more quickly to changes - **Improved** Home network devices (e.g. printers or NAS) displayed in the "Mesh Overview" can be opened directly by link - **Improved** Changed country and language settings of the Mesh Master are automatically transmitted to the Mesh Repeater - **Improved** New message in "System / Event Log" when FRITZ!OS removes a network loop - **Improved** "Mesh Overview" now shows network switches that use the LLDP protocol - **Improved** "Mesh Overview" now shows deployed network switches or access points in sequence - **Improved** Indication on the start page of the user interface when there are FRITZ! devices in the home network that are not yet enabled for Mesh - **Improved** Region and language settings of the FRITZ!Box are adopted by FRITZ!Repeater(s) ## Home Network: - **Improved** Reworked details pages for network devices - **Improved** FRITZ!Powerline devices can be restarted in the "Device Details" of the FRITZ!Box user interface under "Home Network / Network" or registered by clicking a button - **Improved** Own network device highlighted in the overviews of the user interface - **Improved** More flexibility when assigning your own names for a network device in the home network for display in the user interface: Spaces and special characters are allowed - **Improved** The icon in the user interface for prioritized network devices was updated - **Improved** Reworked user guidance through changing of the FRITZ!Box name ## System: - **Improved** The INFO LED flashes during a running update of the mobile modem software - **Improved** New display of Wi-Fi connections between FRITZ! devices - **Improved** Summary of information areas on the "Overview" page for better orientation - **Improved** New design and improved operation concept for logging in to the FRITZ!Box user interface - **Improved** Revised layout of the FRITZ!Box user interface - **Improved** Changed operating concept for changing settings in the user interface - **Improved** Under "System / FRITZ!Box Users / Apps", the FRITZ!Box user from which each app has been configured is displayed for each app - **Improved** The "Forgot Password" push service email now contains information on the device that requested this mail - **Improved** If desired, the selection list of FRITZ!Box users can be hidden during login to the user interface from the home network - **Change** The hyperlinks for Contents, Manual, Tips & Tricks, en.avm.de, and Legal Notice are now located under "Help and Info" - **Change** New contents under "Help and Info / Get to Know the Functions" - **Change** Additional confirmation for configuring certain settings can no longer be switched off - **Change** The push service for the Wi-Fi guest access sends registration and deregistration events of the guest devices from the Mesh Repeater or Mesh Master with which the devices are registered - **Fixed** The display of several "Exposed Hosts" for two different devices under "Diagnostics / Security" was sometimes misleading ## Security: - **Improved** All a user's rights listed under "System / FRITZ!Box Users" - **Improved** Display of the last ACS connections under "Diagnostics / Security / Provider Services (TR069)" - **Improved** While login is blocked due to an incorrect password entry, the password entry field can be edited for the next login attempt - **Improved** Protection from frequent login attempts with incorrect password via the SMB protocol ## FRITZ!Apps: - **Improved** FRITZ!Apps support with explanation of where the preset FRITZ!Box password is found on the FRITZ!Box - **Improved** MyFRITZ!App shows when internet access is blocked for each home network device - **Improved** MyFRITZ!App with additional connection information for the home network devices - **Improved** When MyFRITZ!App is registered with a FRITZ!Box that has not yet been configured, MyFRITZ!App indicates this and offers to open the browser for configuration - **Improved** MyFRITZ!App reliably displays Mesh connection paths graphically, even for more complex constellations - **Improved** MyFRITZ!App indicates when Mesh functions have not been enabled in the Mesh Repeater - **Improved** MyFRITZ!App sets the name of the smartphone or tablet as the name of the network device in the home network of the FRITZ!Box if no name was assigned yet (for Android) - **Improved** FRITZ!App WLAN displays the channel bandwidth of the Wi-Fi connection ------------------------------------------------------------ ## [1] Scan the QR Code and You've Got a Connection: VPN with WireGuard Support for the WireGuard VPN protocol is also new, making it even easier to set up secure connections from the internet to the FRITZ!Box home network ? for example when working from home or if you want to access your home network while on the move. With the new WireGuard Assistant on the FRITZ!Box, encrypted connections can be set up on smartphones, notebooks or PCs in no time at all using the WireGuard app via QR code or software. The previous VPN protocol for FRITZ!Box, IPSec, has also been updated by the AVM development team and now supports both IPv4 and IPv6 connections. ### WireGuard Support for Simple Setup of VPN Connections WireGuard(R) is a modern, easy to understand, fast, and simple VPN solution. For most operating systems, there are apps or programs from WireGuard for connecting single devices to a network via WireGuard VPN. WireGuard is a registered trademark of Jason A. Donenfeld (https://www.wireguard.com). WireGuard is not compatible with other VPN protocols. Therefore it cannot connect to IPSec, OpenVPN and similar peers. WireGuard itself does not contain any mechanisms for key distribution. Both parties therefore require the public keys of the respective remote site. The concept for the FRITZ!Box is that both key pairs can be generated on the FRITZ!Box to set up a connection, and all the necessary dial-in data can be imported on the client side via a file or QR code, e.g. in the WireGuard App. For your FRITZ!Box to be accessible via WireGuard VPN, you need a MyFRITZ! address (you'll need to register your FRITZ!Box with MyFRITZ!Net) or a third-party DynDNS address for your FRITZ!Box. Please note that the connection configuration ? QR code or configuration file - is not permanently stored on the FRITZ!Box (for security reasons). Do not let the QR code or configuration file fall into the hands of unauthorized persons. ------------------------------------------------------------ ## [2] More Operating Convenience and a Clear FRITZ!Box Menu FRITZ!OS 7.50 also refreshes the design of the fritz.box user interface and makes it even easier to read. The restructured overview page helps users find their way around even better. If you want to find out more quickly about how to use the FRITZ! products within the menu, you can get tips and instructions directly from the new online help, including a keyword search. The FRITZ!Box user interface has been visually refreshed with the new version. Particularly noticeable here is the separation of the menu from the left edge of the screen and the width of the displayed pages have been trimmed for better readability. This has a positive effect on tables and texts, especially when displayed on particularly large screens (resolutions), and at the same time improves the display on smartphones and tablets. The redesign is based on a new style guide that facilitates the integration of innovative operating concepts. ------------------------------------------------------------ ## [3] Additional Confirmation After this update, additional confirmation for certain settings and functions can no longer be disabled. However, if additional confirmation was disabled before the update, this condition remains intact after the update. AVM recommends always using additional confirmation for reasons of security. To allow changes to protected settings from on the go, the TOTP standard with one-time passwords can be also used for additional confirmation. A freely available password manager or a separate app like the Google Authenticator can be used for this. ------------------------------------------------------------ ## [4] New wizard transfers all important settings for the internet, Wi-Fi network, and connections to Mesh devices to a new FRITZ!Box. Please take note of the following tips and requirements: The Wizard provided in this FRITZ!OS offers assistance if you are using a FRITZ!Box that you would like to replace with another new FRITZ!Box. Any other FRITZ! products connected with your currently used FRITZ!Box, including FRITZ!Repeaters, FRITZ!Powerline and FRITZ!Apps will also be connected to the new FRITZ!Box. This new switching function makes it easier to exchange your old FRITZ!Box with another FRITZ!Box, so that - the Wi-Fi and home network and all of the connected home network devices will work the same after the switch - no settings have to be changed on the devices connected with the FRITZ!Box because of the switch - the internet connection can continue to be used in the same way - all important settings on the currently used FRITZ!Box are transferred to the new FRITZ!Box (for instance for MyFRITZ!) 1. Two steps must be taken to prepare the other, new FRITZ!Box: - a current FRITZ!OS version 7.55 or newer. During the course of the wizard you will be prompted to update your new FRITZ!Box if necessary. - Set your new FRITZ!Box back to its factory settings , if it was used at all before, and then disconnect it from electrical power. 2. The currently used FRITZ!Box provides the internet connection on your line and has the latest FRITZ!OS version 7.55. 3. If you use any FRITZ!Repeaters: Update their FRITZ!OS. 4. If you use FRITZ!Apps for the previously used FRITZ!Box, have your smartphone ready. 5. You must have physical access to the FRITZ!Box you are currently using, so that you can insert its network cable and press the buttons. The other, new FRITZ!Box should be close at hand. You will also need to connect to electrical power and the internet for the switching procedure. 6. If you are not only changing the FRITZ!Box model, but also the type of connection (for instance, from DSL to fiber optic), then the other, new connection must be ready for operation. 7. You must be connected with the homei network of the currently used FRITZ!Box with a notebook or computer (recommended) or by smartphone. Under "Wizards" in the http://fritz.box user interface there is a "Transfer Your Settings to a New FRITZ!Box" link to click. Read the instructions presented there and follow them carefully. The process usually takes around 10 to 30 minutes, depending on the complexity of the home network. ___________________________________________________________ Initial firmware version upon product launch: 07.57 ___________________________________________________________ ------------------------------------------------------------- ##Features for Mesh ------------------------------------------------------------- General information on Mesh is presented at en.avm.de/mesh-networking. ------------------------------------------------------------- **Enabling the Mesh Function** To check whether a FRITZ! product is enabled for Mesh, see the Mesh Overview of the FRITZ!Box (the Mesh Master) under "Home Network / Mesh". Here the products in the Mesh are designated with a corresponding "Mesh active" symbol. A FRITZ!WLAN Repeater or FRITZ!Powerline Adapter with FRITZ!OS 6.90 or higher installed can be enabled for Mesh in various ways: - If the product has the factory settings configured and is being connected with the FRITZ!Box for the first time, it will be automatically enabled for Mesh. - If the product is already connected, but not enabled for Mesh, it is added to the Mesh by pressing a button on the product to be integrated and a button on the FRITZ!Box. On the FRITZ!Box, use the button that initiates WPS (depending on the model, press the "Connect" or "WPS" button briefly, or the "WLAN/WPS" button for 6 seconds) Detailed instructions, additional information and the answers to frequently asked questions about Mesh are presented at en.avm.de/mesh-faq. ------------------------------------------------------------- **Configuring a second FRITZ!Box as a Mesh Repeater with the press of a button** Requirements: - Your existing FRITZ!Box supports Mesh (FRITZ!OS 6.90 or higher). This box is the Mesh Master. - The FRITZ!Box to be deployed as a Mesh Repeater has been updated to FRITZ!OS 7.0 and you have restored its factory settings. This box is to become the Mesh Repeater. Here's how: - Connect the LAN 1 port of the Mesh Repeater with the Master using a LAN cable - Initiate the Connect function on both boxes (7590: press the "Connect" button briefly; 7490: press and hold down the "WLAN/WPS" button for 6 seconds) After the connection procedure is concluded, the second FRITZ!Box is ready for operation as a Mesh Repeater. (It is operating in "IP client" mode and, as a Mesh Repeater, adopts the wireless LAN settings and other important settings from the FRITZ!Box). Please note that this function can be used only if the second FRITZ!Box is permanently connected with the first box by LAN cable. If you've received the second FRITZ!Box from your internet provider this feature may not work in some cases. Please configurate this FRITZ!Box as a mesh repeater by visit the FRITZ!Box GUI manually. Instructions for configuring a FRITZ!Box connected via wireless LAN as a Mesh Repeater are presented at en.avm.de/mesh-faq ___________________________________________________________ ___________________________________________________________ We recommend every update for reasons of security as well. Further improvements to increase security with this version of FRITZ!OS are presented at http://www.en.avm.de/guide/security in the area "Updates increase security". ___________________________________________________________ Instructions for installing an update: Use the update function offered in the user interface to install the update. This automatically offers you the right FRITZ!OS. Click "Wizards", select "Update" and then follow the instructions on the screen. ___________________________________________________________ © AVM GmbH 2004?2024. All rights reserved. This AVM firmware package contains files that are propagated under different licenses, in particular under a license held by AVM or under an open-source license (namely the GNU General Public License, GNU Lesser General Public License or FreeBSD License). For details on the various licenses, see the "license.txt" file (https://download.avm.de/fritzbox/license.txt). The source code of the files propagated as open source files can be obtained upon a written request to fritzbox_info@avm.de. AVM grants the non-exclusive right to use this AVM firmware package, which is supplied exclusively in object code format. Licensee shall be entitled to make a copy exclusively reserved for personal backup purposes (backup copy). AVM reserves all intellectual property rights except as expressly granted herein. Without previous approval in writing, and except for in cases permitted by law, it is particularly forbidden for this AVM firmware packet to be - copied, propagated, or in any other manner made publicly accessible, or - processed, disassembled, reverse engineered, translated, decompiled or in any other manner "opened" and subsequently copied, propagated or made publicly accessible in any other manner. TVI 2024/11/28