johngd
@comcast.net
| VONAGE VT2142 unlock help
Hi,
I am a novice and would like some help from expert. My Vonage agreement is over and now i would like to use MOTOROLA VT2142 with GIZMO5. Can some please help me to unlock this adapter? I tried many search on Forums and did not find unlocking information. I tried cyt3.0 to 4.6 but nothing works. I login to adapter using "router" and "user" but did not see sip info. Please help.
Thanks |
|
Johngd
@comcast.net | Please some one help me or give me some direction. |
|
PX Eliezer
Premium
join:2008-08-09
New Jersey | Please be patient. It may take a day or two.
Even boffins like to have some fun on Saturday night. |
|
PX Eliezer
Premium
join:2008-08-09
New Jersey | reply to johngd
Did you see these posts which maybe will be of use?
»Re: CYT Device: Unlocking Information
»CYT Device: Unlocking Information |
|
johngd
@comcast.net | reply to johngd
Thank you,
I looked those link and they are explaining more about VT2442 but my one is Vt 2142 and its menu are different. Please advice. |
|
PX Eliezer
Premium
join:2008-08-09
New Jersey
 ·Callcentric
·Optimum Voice
·callwithus
·voip.ms
| It appears to me that some of the forum participants who might know this are not around this weekend. So I would give it through Tuesday morning.
If no one has replied by then, it is likely that regrettably, no one will have any other solution.
You should consider also that for Gizmo5, you could use a basic adapter such as a Grandstream Handytone 286 which you can get for around $ 30. So what is your time worth?
While we are on this, I want to add that with Gizmo5, you have to download the program onto your computer first, even though your end goal is to use an ATA. Once you obtain the SIP parameters (user name, password, and so forth), you can program the ATA. At that point, if you wish, you could remove the Gizmo5 software from your computer. Certainly do not have the software and the ATA running at the same time. |
|
toro
join:2006-01-27
Scarborough, ON
 ·TekSavvy Solutions..
| reply to johngd
The only difference between VT2142 and VT2442 is the 4 port switch. I have both models and the menu options are really the same.
Don't look for the Provisioning settings if you logged in as "router" or "user", they only show up when you login with the Admin account. Basically the whole purpose of unlocking is to reset the password for the Admin account.
As far as I remember, the CYT unlocker doesn't work for the current firmware versions. So if your adapter was connected to the internet in the last year, forget about the unlocker.
Probably the only known solution at this point is to use a JTAG and there's plenty of info in this thread:
»[Unlock] Unlock and re-use VT2442 |
|
meister_sd
Premium
join:2006-01-29
La Mesa, CA
| said by toro  :Probably the only known solution at this point is to use a JTAG You can also downgrade the firmware using the serial port. I've never done it but I know it is possible. |
|
johngd
@comcast.net | reply to johngd
I got the Gizmo5 sip info and now i am ready to put in my ATA VT2142. But my firmware is 11.4 . can i downgrade using user login? |
|
usbjtag
join:2008-10-21
Burnaby, BC
| I found a way to unlock VT2442 and VT2142 without downgrading the firmware. Actually keep the latest firmware has benefit.
You just need to use JTAG to erase the configuration patitions and then modify the admin password in the bootblock. Then you can login as Admin and use CYT to push the configuration.
I also found if you use VT2442 and VT2142 you can get yoru VONAGE configuration and possible use software phone or use your own device to work with VONAGE (untested). |
|
Johngd
@comcast.net | Hi Usbjtag,
Please help me. Can you show me some pic of your jtag that you used and if possible can please direct me where i can buy?
Thanks in advance |
|
usbjtag
join:2008-10-21
Burnaby, BC
| If you just need to unlock one router it is not need to buy a fast JTAG> Build a simple JTAG. I will compile how to and latter post at www.usbjtag.com.
There is no need to downgrade the firmware to be able to get admin access.
All you need to do is erase the log and cfg and then modify the ADMIN_PWD key. The same method applies to RTP300. I have not tested with WRTP54G. But should be the same.
If you have a VT2142 and log in as router/router, go to tools and export the config. You then unzip the file to xml, your VONAGE phone password is in it. |
|
meister_sd
Premium
join:2006-01-29
La Mesa, CA
| said by usbjtag :I will compile how to and latter post at www.usbjtag.com. Can you let us know when you do that and where the post is? This should apply to most of the Linux devices of that type. |
|
usbjtag
join:2008-10-21
Burnaby, BC
| The same tech works for RTP300.
The theory is once you erase the log and cfg patition, the firmware will load the default admin password stored in bootblock. The well know hash of the Admin can be put in the boot and it will be the new password of admin.
Since those Vt2142 has flash types that has to be distinguished by the CFI command, I need to finish the software and then make a step by step unlock VT2142, VT2442 and new steps of RTP300. (I do not have other devices yet). I have already posted the RTP300 in the forum but will make it more public along with VT2X42 unlock. |
|
toro
join:2006-01-27
Scarborough, ON
·TekSavvy Solutions..
| reply to meister_sd
I've used the technique so far on RTP300, WRTP54G, Moto VT2142, Moto VT2442, Linksys PAP2v2, D-Link VWR-VD. It should work for the Vtech IP8100 as well, except not all the JTAG pins are present.
Basically I save the first 128K of the flash using the JTAG, then look for ADMIN_PWD, HASH_DIR and CRYPT_KEY. I replace the value for ADMIN_PWD with a known hash such as ABW9wzpK6VV4Q ("Admin") and get rid of HASH_DIR and CRYPT_KEY completely (to prevent any further provisioning). I also look for CONSOLE_STATE and set it to unlocked. Then upload the bin file back to the same location, boot up to the PSP loader and use the console to erase CONFIG_A and CONFIG_B.
That's all, after this you can boot up, and use Admin/Admin to login and point the provisioning to your own TFTP or HTTP server. |
|
usbjtag
join:2008-10-21
Burnaby, BC | Agree. No need to downgrade to special firmware to work. Yet RTP-300 has NA version of firmware and that is good choice after unlocked. |
|
meister_sd
Premium
join:2006-01-29
La Mesa, CA
| reply to toro
said by toro :I've used the technique so far on RTP300, WRTP54G, Moto VT2142, Moto VT2442, Linksys PAP2v2, D-Link VWR-VD. Have you ever changed the ProductID to make it a true -NA? One that will accept -NA firmware without modification?
@USBJTAG: Do you have any support for an ADM5120? |
|
usbjtag
join:2008-10-21
Burnaby, BC | I have not tested ADM5120 myself.
If I have a full flash dump, I can convert linksys to true -NA version. Not only the product ID. There are other data in the boot makes it non-NA. |
|
toro
join:2006-01-27
Scarborough, ON
·TekSavvy Solutions..
| reply to meister_sd
Have you ever changed the ProductID to make it a true -NA? One that will accept -NA firmware without modification? Yes, for RTP300 and WRTP54G I usually change the ProductID to the one corresponding to the -NA version so I can load -NA firmwares without having to patch them. I haven't encountered any issue doing that. |
|
usbjtag
join:2008-10-21
Burnaby, BC
| If we use TFTP to upgrade we can change the product ID.
If we just modify the product ID and still want to use web upgrade page to upgrade it will never fire up.
A complete re-program the whole flash with MAC modified can make it a true -NA. With USB JTAG program a whole flash will take only about 2 minute include the erasing. Not 90 hours to program. So it makes the re-factory the router possible and fast too. The programming time is so fast and you will take long time to open the box and put back than the programming. |
|
