site Search:


 
    All Forums Hot Topics Gallery






how-to block ads


 
Search Topic:
Uniqs:
658
Share Topic
Posting?
Post a:
Post a:
Links: ·ALL ·Review Your VoIP Provider ·VoIP Providers ·VoIP FAQ ·Porting Rules ·What Codec?
AuthorAll Replies

lstevens

join:2002-08-17
Brookline, MA

[Unlock] Unlocking PAP2 3.1.6 FW

I have an elderly infirm friend who is pretty much housebound in China (see my other post). I am planning to set up 2 free Callcentric Accounts so I can check in on him/keep him company on a regular basis. I dug out a PAP2 that I want to configure with Callcentric and send it to him. It is a formerly VONAGE Provisioned one on FW 3.1.6. Because I am between jobs right now (WAY between ), I really can't afford to buy another one.

It seems from info found on this site that 3.1.6 is an "easy" unlock.

I did some search, but could not find a "cookbook" on how to unlock this or download the needed files.

Can anyone help point me in the right direction?

treichhart

join:2006-12-12

Have you contacted Ric aka DogFace05 for complete removal of vonage crap from the pap2?


lstevens

join:2002-08-17
Brookline, MA

Don't know who or where he is? Is it a paid service? I'm trying to avoid that because of current financial situation, and also currently helping out friend there too.


treichhart

join:2006-12-12

reply to lstevens
ya its a small fee for him to unlock it.


mazilo
From Mazilo
Premium
join:2002-05-30
Lilburn, GA
kudos:1

reply to lstevens

said by lstevens:

Don't know who or where he is?

DogFace05 offers a fee NAIzer service that will un-customize a customized (locked) SPA device. An un-customization will completely remove customization from factory default settings. As such, the device will no longer get locked once a factory reset is performed. This is way much better than an unlocking process where the device will get re-locked when a factory reset is performed. If you send an unlocked device to your friend in China and somewhere/somehow it gets reset, your device will become useless to your friend where you will no longer be able to communicate with him for free through the device.
--
don't and stop are the ONLY two 4-letter words considered offensive to men, but not when used together.

lstevens

join:2002-08-17
Brookline, MA

reply to treichhart
Ok. I wouldn't begrudge him that, but given my current situation would rather at least try. I see a lot of references to a 3.1.6 unlock being "easy". I'm pretty good technically; if there was somewhere with instructions and download links I could probably do it. But, most of what I've googled is bits/pieces and dead links.


Dan_voip

join:2007-01-03
Saint-Hubert, QC
kudos:3

Here is the unlocking procedure for PAP2.


treichhart

join:2006-12-12

reply to lstevens
I tried that guide and could not get mine unlocked so good luck to yea.


lstevens

join:2002-08-17
Brookline, MA

reply to Dan_voip
I saw that, but none of the download links work,


Dan_voip

join:2007-01-03
Saint-Hubert, QC
kudos:3

Send me a message with your email address and tell me what you need.


mazilo
From Mazilo
Premium
join:2002-05-30
Lilburn, GA
kudos:1

reply to treichhart

said by treichhart:

I tried that guide and could not get mine unlocked so good luck to yea.

IIRC, Vonage had changed and implemented a 3x successive provision scheme in the past. If your PAP2v1 unit is still running on a v3.1.6 or older version of firmware and can't be unlocked after a factory reset, try at least a 3x successive factory resets scheme to get to the factory default settings (with the factory default GPP_K value) before proceed to unlocking. Hopefully, this trick will help you to unlock your PAP2v1 unit. Good luck.
--
don't and stop are the ONLY two 4-letter words considered offensive to men, but not when used together.

lstevens

join:2002-08-17
Brookline, MA

mazilo (or anyone else that understands ): Do you mean to do 3 successive factory resets doing IVR? And then Admin password might be gone? If there is more to doing this, is it documented somewhere that I can see?


mazilo
From Mazilo
Premium
join:2002-05-30
Lilburn, GA
kudos:1

said by lstevens:

mazilo (or anyone else that understands ): Do you mean to do 3 successive factory resets doing IVR?

Yes.

And then Admin password might be gone?

Nope. As I said before and IIRC Vonage once had started to change it provision scheme with a set of multiple successive provisions. When a factory reset gets performed, apparently the PAP2v1 unit only erases the last provision data and leaves the previous one intact. As such, the working GPP_K value won't be the factory default GPP_K value and any attempt to unlock the PAP2v1 unit using the factory default GPP_K value will fail. At least, this was what I encountered if my memory serves me correctly.

If there is more to doing this, is it documented somewhere that I can see?

Again and IIRC, I had posted this information in this forum long time ago. I am sure DogFace05 will be able to clarify this better.
--
don't and stop are the ONLY two 4-letter words considered offensive to men, but not when used together.

toro

join:2006-01-27
Scarborough, ON
Reviews:
·TekSavvy DSL
·voip.ms

1 edit

reply to lstevens
I have unlocked many of these and never had to do 3 resets. Basically the process is this (all to be done with the internet disconnected):
- do a factory reset with ****73738#. If it asks for a password, try 8995523 or 7756112
- after that, find the IP address with ****110#
- open the web interface and set a password for the user account
- start a TFTP server and put the firmware files in the root (I sent you a PM with the link). You can use tftpd32 from »tftpd32.jounin.net/tftpd32_download.html (my favorite) or the SolarWinds TFTP server
- enter the following URL in your browser:

http://pap2_ip_address/upgrade?tftp://192.168.175.100/PAP2SP2K.bin
 
(replace pap2_ip_address with the actual IP address)
If asked for a username and password, enter "user" and the password you set up earlier.
The power light should blink for a while and you should see activity on the TFTP server. After that the adapter will reboot. When it comes up, the power light will stay red or off.
- now you should be able to login to the web interface and clear the password for the admin user (the web interface will look like Sipura rather than like Linksys)
- also clear the fields Profile Rule:, Profile Rule B:, Profile Rule C: and Profile Rule D: fields under the Provisioning tab. Last but not least, save the value of the GPP_K key (you will need this if you need to unlock the adapter in the future).
- now revert to the Linksys firmware by entering this URL:
http://pap2_ip_address/upgrade?tftp://192.168.175.100/SP2KPAP2.bin
 
Again, wait a couple minutes,then login to the web interface. It should look like Linksys again and you should have access as the admin user.

--
Providers: voip.ms, freephoneline, smartcall.ro through asterisk. Hardware: Vonage VDV21, Moto VT2x42, Linksys SPA series, Grandstream HT series, Panasonic KX-TGP5x0
»www.voipfan.net

lstevens

join:2002-08-17
Brookline, MA

reply to lstevens
Thanks to all who helped on this! I finally got it to work!!!

A special note re: DogFace05. I DID communicate with him, and he is an upstanding man with good services at a great price. Even though I didn't use him (because of my current job/money situation), I recommend him highly, as I communicated with others very happy with his service.

I spent hours playing with this before I got it right. Also, came close to bricking it once. In addition, as others have noted, a future reset could bring it back to square one or worse (no longer unlockable). For all these reasons, I would recommend others contemplating this to avail themselves of his service.

Again, thanks to all that helped!


toro

join:2006-01-27
Scarborough, ON
Reviews:
·TekSavvy DSL
·voip.ms

said by lstevens:

In addition, as others have noted, a future reset could bring it back to square one or worse (no longer unlockable).

This is precisely the reason why you should save the value of the GPP_K field. If you do a factory reset in the future, even if the firmware version gets upgraded, you can still unlock the device.
The unlock works this way: you have to spoof the DNS so that "ls.tftp.vonage.net" (the standard Vonage provisioning servers) point to an IP in your LAN. Then you have to take a simple provisioning file that resets the admin password and disables the provisioning, encrypt it with the GPP_K that you saved and feed it to the PAP2 adapter.
--
Providers: voip.ms, freephoneline, smartcall.ro through asterisk. Hardware: Vonage VDV21, Moto VT2x42, Linksys SPA series, Grandstream HT series, Panasonic KX-TGP5x0
»www.voipfan.net

treichhart

join:2006-12-12

reply to lstevens
so what happens if you do factory resets does it relocked it to vonage bs?


toro

join:2006-01-27
Scarborough, ON

Yes, it locks back to vonage.


lstevens

join:2002-08-17
Brookline, MA

reply to lstevens
Not to 'beat a dead horse', but to be very clear for future readers: if you have DogFace05 do it, it will NEVER go back, regardless of who it was locked to. It will be the same as if you bought an unlocked one to begin with.


rizzo2dial
Premium
join:2004-08-05

said by lstevens:

Not to 'beat a dead horse', but to be very clear for future readers: if you have DogFace05 do it, it will NEVER go back, regardless of who it was locked to. It will be the same as if you bought an unlocked one to begin with.

If you load it w/ SPA1001 3.1.10 (or lower) firmware, it won't get reset to Vonage deafults either upon performing a factory reset.

Monday, 04-Jun 02:31:48 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online © 1999-2012 dslreports.com.
Most commented news this week
Hot Topics