dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
17256
share rss forum feed

pulsar777

join:2009-12-21
reply to Stewart

Re: [Unlock] Unlocking Linksys SPA2102 adapter

How to upload this .cfg config into the ATA?


Stewart

join:2005-07-13
kudos:25

said by pulsar777:

How to upload this .cfg config into the ATA?

Put the text into a file named spa2102.cfg, which should be located in the directory specified by Current Directory on the Tftpd32 screen. For debugging, also start a Wireshark capture. Reboot ATA. If you have trouble, report what error is returned (as shown by Wireshark) and what, if anything, is logged on the Tftp server screen.

pulsar777

join:2009-12-21

and the address of ATA web interface will be an IP address of Server interface from tftpd32?


Stewart

join:2005-07-13
kudos:25

said by pulsar777:

and the address of ATA web interface will be an IP address of Server interface from tftpd32?

Once the ATA has successfully read by TFTP (and presumably applied) your config file, you can restore your normal setup and access the ATA's web interface as usual.

The ATA's WAN address is normally what it got by DHCP. If you pick up the phone and dial **** (hear configuration menu prompt) and then 110#, you should hear the IP address spoken. If you open a web browser at that address with /admin/ (e.g. if address is 10.11.12.13, use 10.11.12.13/admin/) you should get a prompt for username (use admin) and password (use whatever you set).

If you don't get the prompt, confirm that you can ping the ATA. If not, check that ATA and PC are on the same subnet, etc. If you can ping it but not access the web page, dial **** then 7932#. If prompted for password, enter the admin password you set, followed by #. Enter 1# for value and 1 to save. Then, try to access the web page again.

If no luck, dial **** then 210# to hear the LAN address (defaults to 192.168.0.1). Temporarily connect a PC to the LAN port and try to access that address, e.g. 192.168.0.1/admin/ .

pulsar777

join:2009-12-21

3 edits

I had problem to upload config file in the beginning, but I managed to solve it. The spa2102.cfg was in Current Directory, shown in Tftpd (in same dir with Tftpd). Tftpd32 shows an error in Log viewer window:

Read request for file </spa2102.cfg>. Mode octet [21/12 21:50:05.790]
Error EACCESS on file \spa2102.cfg. Ext error The directory name is invalid. [21/12 21:50:05.790]
 

I changed in Tftpd32 settings the Base Directory from (.) dot to path to Tftpd folder, and also in 'TFTP Security' changed from Standard to None. This helped, config was uploaded and ATA is unlocked now. Thanks for your help!

Stewart

join:2005-07-13
kudos:25

I'm glad to hear that you got it working.

One last comment: this scheme does not give you access to the SIP password for the existing account in Line 1. If you want that account to keep working, you need to be careful not to accidentally change it, because you have no way to restore the old setting. Be sure that that you don't set the Line 1 password from the web interface or from a config file, and that you don't perform a factory reset. This last one means that you should avoid making any changes, e.g. to the network settings, that could result in losing control of the device.


pulsar777

join:2009-12-21

yes, I see this. So, in this case the only way to get sip password would be hardware way, i.e. to to read MX29LV160ATTC-70 flash memory and dump it content.


Stewart

join:2005-07-13
kudos:25

said by pulsar777:

yes, I see this. So, in this case the only way to get sip password would be hardware way, i.e. to to read MX29LV160ATTC-70 flash memory and dump it content.

Unfortunately, I know almost nothing about the internals of Linksys ATAs.

It might be difficult to read the device, e.g. it may not be set up for JTAG, or an in-circuit read may be thwarted by other connections to the required pins. Although of course you could physically remove it for reading, you'll need surface-mount rework equipment and a reasonably recent device programmer; perhaps you have that available at your workplace.

The next hurdle is that the data is likely compressed and/or utilizes an error-correcting code. It may take considerable effort to figure out how that works, and if it is non-standard, you would need to write your own decoder/uncompressor.

If you really want those credentials, IMO there are easier approaches; what's best for you is determined by your skill set and interests.

pulsar777

join:2009-12-21

There is definitely no connector pins on board. I think the most important is, does this chip have In-Circuit-Programming capability or not. If it does not have this capability and therefore, must be removed from PCB to be READ, then it's just not worth the effort, as desoldering a chip, then soldering it back would be very difficult procedure without use an industrial equipment.