Hi all,

I suffered from the UPnP reboot problem, and Draytek sent me the link to beta firmware today that was supposed to fix this.
I don't think I can attach the file, but here's the link:
http://www.draytek.co.uk/download/support/files/v2860001_upnp_beta1.zip

I uploaded this via the web interface (worked without complaints), but since reboot the router is bricked.
Steps that I have tried so far:
1) Power on with reset button held ('act', 'usb', and '2.4G' LEDs flash quickly
2) Connect to Ethernet port 1 (192.168.1.10 / 255.255.255.0)
3) tftp
4) mode binary
5) connect to 192.168.1.1 (doesn't give any feedback)
6) put v2860_3.4.7.1.rst

...times out. The very moment I hit enter after the last line, the router reboots again.
I can't ping on 192.168.1.1, but, when I reset the network as it was before, I can ping on the router's old address.
However, tftp to the old address also fails.
I tried Draytek's firmware utility on a virtual Win XP machine with bridged networking, but doesn't even discover the 2860n+.

I've read somewhere before that the 2860 doesn't have the same reset procedure as other Drayteks (e.g. hold reset button while powering on), can somebody tell me how to enter recovery mode?

thanks,
T

make sure you have set the firmware utility tool with correct infos

Turn off firewall at the pc & connect a cable
set a static ip at the pc you are trying the reflash (if you have changed the ip address of the 2860 before it bricks then you need to enter that one)
load a previous working good order firmware having the RST file
set the password you had last time before the issue (if not then the default is admin i think)
have ready & stand by the utility tool

at the 2860 turn it OFF ... now press and Hold the reset button ... while pressing the reset button with the other hand turn on the unit ... when the leds starts flashing fast press the send button of the already stand by firmware utility tool ... wait until the message router is active now

Looks like my 2860n+ is a goner, but if nothing else, I have some official instructions from Draytek support how to flash a router via tftp (except it doesn't work for the 2860n+). The flashing lights referred to would be the ACT, USB and 2.4G for the 2860, think that's the same for the 2850 as well. The instructions are for Mac, but the syntax should be the same for Linux.
So here it is, straight from the Dragon's mouth:

"Back up the router's configuration before updating, this can be done
under the Advanced - System Maintenance menu then Configuration
Backup, on there click the Backup button to download the config file.

Download the firmware you need to install, extract that and put the
.all file in the root of your user directory i.e. in Finder, under
Places, select your user account and put the firmware in that folder.

Connect the Mac to the router / IPPBX using an ethernet cable, set the
IP address of that ethernet connection as a Manual address with these
details:
IP Address: 192.168.1.10
Subnet Mask: 255.255.255.0
Router: 192.168.1.1

In Finder, go to Applications then Utilities and open Terminal, in
there, enter these commands, pressing enter at the end of each line:
tftp 192.168.1.1
binary
rexmt 1
timeout 180
put v2820pbx_a9_[3571].all

(replace the file name with that of the firmware being sent)

That will then wait for the router / PBX to receive that firmware -
you will need to turn the router off then press and hold the
Factory Reset button on the front of the router and turn the router
back on which should make the ACT + USB + CSM lights flash in unison.
You can then let go of the factory reset button.

Roughly 30-40 seconds after turning the router on in TFTP mode, the
Terminal window will show a message such as:
Sent 6210656 bytes in 91.0 seconds
Which indicates that the firmware has finished sending - you will now
need to leave the router to reflash itself for 3-4 minutes, until the
ACT light is blinking on the router again which indicates that it's
back to normal operation.
You can then set the IP address of the ethernet connection back to its
original settings and access the router / IPPBX as normal."

Update:

The firmware update tool works on Win XP as described, i.e.
192.168.1.1/24 as the target address
no password
use .rst file, .all file will fail.
This only works on a physical Win XP box, the same method failed on a virtual installation.

This method does not work on Windows 8.1 (Draytek suggested User Account Control may be to blame, but unfortunately I do not have any Windows computers to try).

tftp on Mac / Linux remains unsuccessful to date.