Firmware H685-MT7620-v3.2.x

H685-MT7620-v3.2.x Firmware Downloads

This page contains firmware levels for variants of the H685 4G listed below.

H685t-W
H685t-W-60W
H685t-W-P2
H685t-W-CAT6

(These part numbers are found on the underside label of the router).

Changelog

H685-MT7620-v3.2.359 – November 2025

In development, download removed due to bug found with accessing WEBUI on HTTPS.

Added band lock for SLM770A.
Removed service port map which uses port 111.
Removed HTTP access, enforcing HTTPS access only, for EU RED Compliance.
Removed options for HTTPS weaker encryption suite, for EU RED Compliance.
Using SHA256+HMAC for firmware safe upgrade.

H685-MT7620-v3.2.355 – September 2025

Unified User Passwords
The WebUI user admin and CLI user router (root) now share the same password. Changing the admin password on first login will automatically update the CLI password.
Password Policy Enforcement
Implemented a minimum password strength requirement:
- At least 8 characters
- Must include one digit (0–9), one uppercase letter, one lowercase letter, and one special character
New Authentication Log
Added an Auth Log page under Status > Event Log > Auth Log.
- Records all login attempts (successful and failed) to the WebUI (HTTP/HTTPS) and CLI (SSH)
- Tracks failed attempts and logs lockout events when thresholds are reached
Security Page Enhancements
Updated the Network > Firewall > Security page:
- Redesigned layout and descriptions for clarity, removed ‘basic settings’ section and changed the sections to be specific to each protocol.
- IP Whitelisting moved to the top of the page
  - Whitelist now applies globally across all protocols
  - Port forwarding rules will only work for IPs listed in the whitelist
  - Whitelist rules are now handled internally (no longer added to Traffic Rules)
- Protocol Management Changes
- TELNET disabled by default and removed from WebUI management
- Removed per-protocol whitelisting for SSH, HTTPS, and HTTP
  - All protocol access is now controlled via the unified IP Whitelist
  - For per-protocol control, use Traffic Rules in the firewall
- Brute Force Protection Renamed
  The IP lockout feature for administrative protocols (SSH, HTTPS, HTTP) is now called WAN Brute Force Protection.
Fixed issue where FG132 shows the wrong band.

H685-MT7620-v3.2.354 – June 2025

Added check for HTTPS cert and key files, if it was generated by old method, it they are regenerated.
Updated HTTPS certificate generation method.

H685-MT7620-v3.2.352 – May 2025

SLM750 IP passthrough can be done on a configured MAC address, added option for Bridge MAC address on web page Network–>Mobile.

H685-MT7620-v3.2.351 – April 2025

Fixed captive portal issue.
Optimized dial process.

H685-MT7620-v3.2.350 – March 2025

Fixed issue that SLM750 disconnects internet access every 21 hours when SMS enabled.
Fixed the issue of export IPSEC log.

H685-MT7620-v3.2.349 – March 2025

Optimisation of DTU.

H685-MT7620-v3.2.347 – February 2025

Fix issue with dio_control application.

H685-MT7620-v3.2.346 – February 2025

Fixed gobinet driver conflict issue. Which impacted Sierra Wireless module.

H685-MT7620-v3.2.342 – October 2024

Updated HTTPS cert files generation method.
Added option to enable saving system log and kernel log during reboot.

H685-MT7620-v3.2.341 – September 2024

Updated DTU.

H685-MT7620-v3.2.339 – August 2024

Fixed issue that prevented static routes from being deleted.

H685-MT7620-v3.2.337 – July 2024

Added Modbus support GPS coordinate and modem signal strength.
Fixed DTU issue.

H685-MT7620-v3.2.335 – June 2024

Removed UI file browser page.
Fixed several vulnerabilities of UI.
Added NTRIP support on GPS.

H685-MT7620-v3.2.334 – May 2024

Updated password generation algorithm.
Updated NTRIP client.

H685-MT7620-v3.2.332 – April 2024

Fixed issue that caused login page error occasionally.

H685-MT7620-v3.2.324 – February 2024

Added option for “APN Reset” function at the ICMP check web page. Added default functionality: when ping failed reached max retries, and before
reboot router or reboot module is executed, router sets APN to 3gnet1, then closes and opens antenna, then set APN to configured APN, then close and open antenna, finally reboot module or reboot module and router.

H685-MT7620-v3.2.323 – January 2024

Fixed intermittent issue causing error for the login page.

H685-MT7620-v3.2.314 – September 2023

Fixed issue that sometimes SSH account cannot be changed from web GUI.
Fixed Huawei me906s module dial issue.

H685-MT7620-v3.2.305 – March 2023

Added support for long SMS.
Changed text description in WEBUI system–>Password.

H685-MT7620-v3.2.299 – December 2022

Added Failover alarm via email.
Fixed ICCID issue.
Set LAN as default interface for IP passthrough.

H685-MT7620-v3.2.295 – September 2022

Fixed issue that caused WIFI authentication on RADIUS server via OpenVPN tunnel to fail.

H685-MT7620-v3.2.291 – July 2022

Added option device at QoS config page.

H685-MT7620-v3.2.288 – May 2022

Added option to disable SIP ALG in firewall.

H685-MT7620-v3.2.282 – February 2022

Improve module detect process.

H685-MT7620-v3.2.281 – February 2022

Fixed SLM750 R2.0 GPS issue.
Fixed issue that caused ipv6 script to set firewall rule Allow HTTP WAN to disabled automatically.

H685-MT7620-v3.2.279 – January 2021

Updated SSH tool dropbear from 2015.67 to 2019.78
Updated SLM750VE GPS, the max GPS interval of SLM750VE is 1s, so if set to 2s directly, module will reject it.

H685-MT7620-v3.2.275 – November 2021