mss1234
@comcast.net | reply to sipjet
Re: [PAP2] Time for an upgraded "unlocking guide"...
Thanks, I can get to the config menu (via voice) with out network cable. but non of these 4 passwords 78196365#, 7756112# or 8995523# or 50274537# worked for me. |
|
rcilink
Premium
join:2003-12-15
Manchester, NH
| reply to mss1234
OK, now feed it the plain-text XML file..
Firmware 2.0.9d will read it and change the password for you.
Do this:
1. Make a new file in notepad called: spa00000000.xml (use MAC in place of 0's)
2. In this file, put:
<flat-profile>
<Admin_Passwd>4321</Admin_Passwd>
<Enable_Web_Server ua="na">Yes</Enable_Web_Server>
<Web_Server_Port ua="na">80</Web_Server_Port>
<Enable_Web_Admin_Access ua="na">Yes</Enable_Web_Admin_Access>
<Protect_IVR_FactoryReset ua="na">No</Protect_IVR_FactoryReset>
<User_Password ua="na">1234</User_Password>
</flat-profile>
3. Save this file into your tftp root location.
4. Power-cycle the PAP2. It will fetch the file.
5. Give it a few minutes to get the file.
6. When it is complete, try using a web browser to access the device.
--------------------------------
The new USER password is 1234
The new ADMIN password is 4321
This XML file will do a couple of things; it will enable the web server, enable factory reset IVR, and change passwords for USER and ADMIN.
I will need to update the PDF for these newer units to make note that SPA2000 firmware 2.0.9d should be used, since it is the only one that will read these 'plain-text' XML files.
Until then: If you plan to use this newer technique, make sure you have the SPA2000 2.0.9d firmware to use with SPAtools! |
|
sipjet
join:2006-03-08
| man, you are my super star!!!!
It worked!
What I tried last night was the xml file like:
<flat-profile>
<Admin_Passwd>4321</Admin_Passwd>
</flat-profile>
Then reset the device back to the factory settings by ****RESET#. I will follow your instructions tonight with my friend's PAP2, and will keep you informed.
Thank you so much for your GREAT help on this! It is very nice of you to share such a wonderful guide with us! |
|
rcilink
Premium
join:2003-12-15
Manchester, NH
| OK, I revised the 'unlocking guide' for newer PAP2 units with firmware greater than 3.1.6 ...
Some things to note:
1. Use spa2000 2.0.9d firmware to make this work. (Get it before you disconnect your internet!)
2. Clear out the DNS server entries on the PAP2 (with internet disabled, you can access PAP2 via WEB interface).
3. Download the original PAP2 unlocking PDF. It will remind you of the remaining steps you must take to complete the unlocking. (Another good thing to do before you unplug your internet access!)
4. Download the attachment at the top of this post. It is a new PDF showing some additional work needed to unlock a PAP2 with 3.17 or newer firmware on it.
Of course, you understand that you are doing this at your own risk-- and to trash the PAP2 is only your fault, since you did it. Since you are the one performing this surgery, be careful!! Keep it isolated from the Internet until you have turned provisioning OFF and saved settings!
If you are not familiar with the configuration of DNS, TFTP, APACHE, and basic Linux... seek the help of someone who does know these things! Don't say you were not warned when you end up with a brick with pretty blue lights.
--
PAP2 Info: PAP2 Unlock PDF
PAP2 SPATools: PAP2 SPAtools |
|
kgu2206
join:2005-10-03 | does anyone know how to get spa2000 2.0.9d firmware ,thanks |
|
skypeuser
join:2005-03-08
United State
| reply to rcilink
Re: [PAP2] Unlocking Guide
This is my forth PAP2. It came with firmware 2.0.10
I unlocked it without any problem. Thanks for the
valuable information I obtained here at BBR.
I have the .xml file, but I don't know how to decrypt it.
I downloaded on OpenSSL program, this wasn't a tool it only
took me to websites.
I would appreciate it if someone here with the knowledge
would lead me in the direction to decrypt this .xml file
VuckFonage worked great with the other 3, but this last one has no GPP_K code to enter into the program to obtain the decrypted file. I am trying to obtain the onginal
password.
 |
|
rizzo2dial
Premium
join:2004-08-05 | If the adapter is unlocked, the GPP_K key is in the "Provisioning" tab (when logged in as "admin" and selecting "Advanced").
Rizzo |
|
lyosha
join:2006-03-09
San Jose, CA
| reply to rcilink
Re: [PAP2] Time for an upgraded "unlocking guide"...
This algorithm only applies to firmware strictly less than 3.1.9, right? I'll try it anyway, but I expect PAP2 won't bother to reflash itself if it sees that current version in encrypted xml file is the same as what's flashed on the router, am I correct? |
|
rcilink
Premium
join:2003-12-15
Manchester, NH
| There is a good chance it will work with 3.1.9 firmware also, if it has never talked to the net before... This depends on the 'upgrade rule' and how it tries to get the new firmware.
I guess the question is: Does the 3.1.9 pap2 XML have an upgrade rule, or is it blank? If it's there, you can do it..
Any testers wanna try? |
|
lyosha
join:2006-03-09
San Jose, CA | I never let my PAP2 connect to internet. I'll try giving it an XML file from Vonage site and see if it will ask for firmware again. |
|
skypeuser
join:2005-03-08
United State
| reply to rizzo2dial
Re: [PAP2] Unlocking Guide
Thanks for responding rizzo2dial
I understand where it is supposed to be, but
this space in empty on this PAP2. My 3 others have
a K key. I used VuckFonage to obtain the orginal password.
I do have a copy of the .xml file, but it is encrypted?
Any suggestions are appreciated.
|
|
mss1234
@comcast.net
| reply to rcilink
Re: [PAP2] Time for an upgraded "unlocking guide"...
Dear RCILINK, You are a hero 
This morning I had packed my Free After Rebate PAP2 to return it to Circuit City, when I was not able to unlock it. But, after following your instructing (of using tftp, DNS, webServer) I have successfully unlocked my new PAP2 (FW 3.1.8). It is now running fine with braintel.net (a VOIP service for Pakistan). Thanks for your help!.
by the way here is my setup:
1. I have WinAgents TFP server running on an XP machine
2. pumpKIN tftp client running on the other XP maching to test my tftp server and dns entries.
3. NSLU2 (with unSlung FW) it is a small linux box
4. Apache running on NSLU2 as webserver
5. dnsmasq running on NSLU2 as DNS server
6. Netgear router WGT624
I have not used any sniffer software, because I used tftp server log to find the correct folder and file name for the xml file and apache log to see the folder and BIN file names.
After spending 2 evenings, I have DONE it with your help.
Thanks again rcilink and others.
MSS |
|
Sukru Bey
join:2005-09-17
Toronto, ON
| reply to skypeuser
Re: [PAP2] Unlocking Guide
said by skypeuser  :Thanks for responding rizzo2dialI understand where it is supposed to be, but this space in empty on this PAP2. My 3 others have a K key. I used VuckFonage to obtain the orginal password. I do have a copy of the .xml file, but it is encrypted? Any suggestions are appreciated. Getting GPP_K value is very easy once you unlocked your PAP2. So, if you have unlocked PAP2, read the followings:
1- Have only 3.1.6 or lower fw in your PAP2.
2- Factory reset the unit when it isn't connected to internet.
3- Follow the usual unlocking method.
4- VALLLA...
5- When you look at your GPP_K value, you'll see that.
6- AGAIN: It is exteremely important to have 3.1.6 or lower fw on your PAP2. Before going on the process, make sure to have the needed fw in it.
--
SUKRU BEY, a Linksys PAP2 user |
|
skypeuser
join:2005-03-08
United State
| Thanks Sukru Bey,
I already have the unit unlocked. I will do the hard rest and look for the GPP_K key. I already have a .xml
file, but since I can't decrypt it I will start over as you suggest and look for the need GPP_K key then I know how to use the VuckFonage to retrieve the decrypted .xml
file. I appreciate your help. I know that you have helped me before.
|
|
rcilink
Premium
join:2003-12-15
Manchester, NH | Don't forget that important tidbit listed above your post:
It is very important that you have firmware 3.1.6 or older loaded on your PAP2 prior to the RESET (with the PAP2 disconnected from the Internet, of course).
Good luck! |
|
arthree
@172.16.x.x | reply to rcilink
Confirmed. 3.1.9d firmware is unlocked successfully using rcilink's instruction. |
|
skypeuser
join:2005-03-08
United State
| reply to rcilink
Thanks!
I have 3.1.3 fw on the PAP2 at this time. It came with
2.0.10LCs. I will only try the methods that you
experts suggest.
|
|
kabanec
join:2006-03-07
Richmond Hill, ON | One more question, my friend brought to me today PAP2 3.1.9
And this box has been already connected to the Fonage server.
Looks like it is worse case scenario...
Any thoughts? |
|
arthree
@172.16.x.x
| You can monitor the device if you setup the DNS server, TFTP server, WEB server on your machine, and point the DNS to your machine on the router. Unplug the Internet connection before monitoring.
From the TFTP server and WEB server log, you can see what files the device is trying to get. Usually, it should try to get an XML file from TFTP server, then following the instruction in XML to get the firmware from WEB server.
Place an old firmware in WEB server to downgrade. Then following the unlock steps in this thread ... |
|
kabanec
join:2006-03-07
Richmond Hill, ON
| Exactly!
This is what i did for 3.1.8 box
Yhe question is, if that freaking 3.1.9 already has the latest firmware, why it should go to server and perform another update?
So I can't feed it with fake 3.1.9
Please, correct me if I'm wrong. |
|
