3 edits | reply to rcilink
Re: Linksys PAP2 change from Vonage to Broadvoice said by rcilink:YES, the Linksys PAP2 can be unlocked from Vonage and used with another provider. Performing the act can be tricky. This will require some understanding of TFTP, DNS configuration, and a little XML (http web server pages). I will verify it works tonight. Here's the link with the details: » groups.google.com/group/Asterisk···d2e6d55f So I picked up a Vonage Linksys PAP2 last night @ Staples for $20 and attempted to follow the instructions in the Google Groups post.
I'm able to get TFTP transfers to take place; however, the settings configured in the XML file don't actually "take" on the PAP2 (i.e. nothing on the PAP2 changes). Thus, it's not unlocking the device for me.
For those wanting to take a crack at it, based on the Google Groups post linked above, here's what I did:
1) Setup 2 TFTP servers on my PC (1 running on port 69, the other running on port 2400). I used SolarWinds for port 69 (since that's all it'll run on) and WinAgents for 2400. (Links to both TFTP servers are listed above in my previous post).
2) In each TFTP server's ROOT directory, I added xml file spa{MACADDR}.xml (where {MACADDR} is the MAC ADDRESS of the PAP2) w/ the XML information listed in the Google Groups post above. I started the spa{MACADDR}.XML file's data at the line beginning with <?xml ...
3) Disconnected the cable modem from my router (so that the virgin PAP2 wouldn't be able to connect to any real Vonage servers for updates).
4) I decided to use my WRT54G router (running Sveasoft Alchemy firmware) as a DNS server for mimicking Vonage's TFTP server's domain name.
a) Telneted into my my WRT54G router (Sveasoft Alchemy provides a telnet option)
b) Added an entry to its hosts file (/tmp/hosts) as follows:
quote:
192.168.1.10 ls.tftp.vonage.net
(where 192.168.1.10 is the IP address of the PC running my TFTP servers)
c) Switched over to the WRT54G's WEB INTERFACE
d) Navigated to the "Administration" tab
e) Clicked the "Save Settings" button at the bottom.
f) Opened up a command prompt on my PC and tested the result.
"ping ls.tftp.vonage.net" resulted in a ping attempt against 192.168.1.10
5) Connected my PAP2 to one of the LAN ports of my WRT54G. The DHCP client list of the WRT54G showed me it's IP address.
6) Navigated to the IP address of my PAP2. It's running firmware 2.0.12(LS) (whereas the person on Google Groups had 2.0.9(LSd) on his/her Vonage PAP2).
7) Changed the DNS Server of the PAP2 to my WRT54G (192.168.1.1), saved settings, and power cycled the PAP2.
8) After ~30 seconds, the PAP2 performed the TFTP transfers on both TFTP servers (i.e. ports 2400 and 69). I verified this by the logs of SolarWinds and WinAgents TFTP servers (i.e. I don't have etherpeak or any other type of packet sniffer at this time)
9) Refreshed the PAP2's web-interface, absolutely nothing changed. The domain of "foo" didn't take, nor did the admin pw of "123456."
10) Attempted modifying the .xml file various ways (both with and w/o the HTML header section). No luck.
I've been told (while speaking to a friend of mine on the phone) that rcilink has already posted a reply as well. I haven't yet read it, so let's see how similar our situations are. 
Rizzo
EDIT: Given that rcilink and I are having the same issue, unless rcilink's PAP2 is running firmware 2.0.9(LSd), I suspect this unlock method may have been fixed in later versions of PAP2 firmware. |
|
maziloFrom MaziloPremium
join:2002-05-30
Lilburn, GA
kudos:1
1 edit | Re: Linksys PAP2 change from Vonage to Broadvoice Who? |
|
| rcilink,
Any luck thus far with your "proof of concept?"
Do you still believe it is possible to unlock the PAP2?
I wish I had even half the talent you have with
hardware hacking. Best of luck!
,.-=* [VoIP_LuRKeR] *=-., |
|
| Did anyone get any further with this? I have an RT31P2 I would like to unlock!!
I grabbed the encrypted XML off the vonage server but I guess its not gonna be easy.
Heres hoping...... |
|
| I'd also like to hear about some kind of status update from the powers that be on this project. Even if it is just a "nothing new to report..." type message. Just to find where things stand and if it is time to eBay my locked (to Vonage) PAP2.
rizzo2dial?
rcilink?
mazilo?
Anyone? |
|
| I've made no further progress w/ my attempts. I'm also in the camp that's awaiting an update from rcilink. 
RIzzo |
|
| reply to rizzo2dial
may i know how to get the unlock firmware? |
|
