 maziloFrom MaziloPremium join:2002-05-30 Lilburn, GA kudos:1 | [Equipment] Configure Line1 on your PAP2 with two VoSPs Apparently, someone has used the SPATools to mod the SPA1001 firmware and flashed it to a PAP2 unit to make it like an SPA1001. According to the post (written in Spanish on 1/6/6), he was able to access and dial out using Line2 by preceding the numbers with dialing a # from a phone attached to Line1. The only problems are the LEDs and Line2 port no longer functioning. Hell, if you want to use your PAP2 with two SIP lines on a single line telephone, perhaps this this the way to go. Notice from his post, the PAp2 was running with SPA1001 firmware v3.1.8 (SEc). So, to sum up benefits to run your PAP2 with SPA1001 firmwares is as follows:
1. Perhaps, PAP2 unit is ALWAYS unlocked. 2. You will only need a 1-line telephone to connect to your PAP2 unit and be able to use both lines. 3. Perhaps, the SPA1001 firmware v3.1.8 still supports for a USER MODE firmware upgrade... After this hack, I wondered if Linksys/Sipura/Vonage will waste their effort to release SPA1001 new firmwares with the USER MODE firmware upgrades disabled.
Perhaps, the following will list the disadvantages of this mod:
1. Line2 port becomes deactivated. 2. LEDs no longer functions, except the ETHERHET LED. 3. Void your PAP2 warranty. 4. May render your PAP2 to useless with a prolong usage with the SPA1001 firmware.
Well, are there any guinea pigs here who dare to test their PAP2s to screw Vonage? At any rate, please don't forget to PIN your unlocked PAP2 on the Frappr Map for PAP2 to show Vonage how much $$$ it has lost to SPATools. |
|
 3 edits | Re: [Equipment] Configure Line1 on your PAP2 with Hi Mazilo.
It worked ok for my during days, i think its not more risky than unlocking procedure.
Regards |
|
 maziloFrom MaziloPremium join:2002-05-30 Lilburn, GA kudos:1 | Excellent. Have you found any flaws with this mod/hack? |
|
 1 edit | I did not find any..
Anyway, as other procedures, maybe something wrong could damage it, but it did not happen to me, and i tested really during days.
Regards |
|
 maziloFrom MaziloPremium join:2002-05-30 Lilburn, GA kudos:1 | Just be careful with this mod. The original poster on this link seems to have enjoyed this mod for about a week without a problem (otherwise, he would have posted the disaster news).
I believe it is cheaper to run a PAP2 with a 1-line (cordless) phone. I am sure you will find that your modded PAP2 with this SPA1001 firmware is still unlocked even after a factory reset. In other words, you now can kiss Linksys/Vonage good bye.:D |
|
 devil24Premium join:2002-06-28 Houston, TX | reply to mazilo Excellent job guys... you're unstoppable.
Alberto, felicitaciones y gracias por ofrecernos esta nueva solución para mandar a la mi... definitivamente a Vonage . Es una lástima que los LEDs no funcionen como normalmente, pero bueno, eso tampoco es cosa de morirse. |
|
 devil24Premium join:2002-06-28 Houston, TX | reply to albersag Alberto, quick question:
What exactly did you 'mod' on the SPA1001 firmware... did you change/alter anything? or did you just upgrade the PAP2 with it as it comes directly from Sipura? |
|
|
|
 2 edits | I tweaked the Wafro tools to accept/generate the SPA1001 headers. That appears to be the only modifications necessary.
SPA1001 firmware loaded up fine on my PAP2 (although I didn't really test anything with it yet). I also successfully reverted it back to a true PAP2 using PAP2 3.1.3 firmware w/ an SPA1001 header.
Rizzo
EDIT: Uploaded the modified Wafro tools (source code only). The programs now support both SPA2000 and SPA1001 firmware. Perhaps rcilink will compile these for Windows. They compile fine for me under Linux but not under Windows (I don't have gcc installed in Windows). |
|
 Reviews:
·Axvoice
1 edit | Very sweet. This sounds like a GREAT WAY to combine the services of:
FreeWorldDialup w/ IPKall for DID/POTS incoming...
and
SipDiscount/VoipBuster for outgoing... So for the $5 euros (period) you get pretty much unlimited incoming and outgoing phone service.  |
|
 devil24Premium join:2002-06-28 Houston, TX 4 edits | reply to mazilo
I'm definitely grateful for the amazing job some of my fellow BBR members have done unlocking these PAP2 boxes, so please, if you want to reply to me, do it via PM so we don't keep hijacking the thread. |
|
 maziloFrom MaziloPremium join:2002-05-30 Lilburn, GA kudos:1 | reply to mazilo I have flashed one of my PAP2s with the SPA1001 v3.1.8 (SEc) firmware and have uncovered some interesting discoveries.
Here is what I have done so far with my PAP2:
1. Modified SPATools to work with SPA1001 firmwares. 2. Took a virgin Linksys/Vonage locked PAP2 and flashed it with this firmware to unlock it. 3. The newly unlocked PAP2 had retained some of its factory default values even though it's plugged to Internet live. However, upon a factory reset, the factory default values for DNS got replaced with the DNS values from my router. Also, the factory default values for all GPP_ are completely gone. 4. I haven't got a chance to play around too much to configure this PAP2; however, I will leave it connected to the Internet to let it get provisioned by Vonage (which I doubt) and will report back later on. 5. One interesting observation regarding this SPA1001 v3.1.8 firmware is its version and size. Its size is very close to the size of a PAP2 v3.1.8 firmware.
BTW, someone has already had his PAP2 flashed/locked with PAP2 v3.1.9LSc firmware. I am sure Vonage is starting to pushed out with this new v3.1.9LSc firmware. |
|
 | reply to mazilo
Re: [Equipment] Configure Line1 on your PAP2 with two VoSPs I just finished setting up a PAP2 w/ SPA1001 v3.1.8(SEc) firmware, and it works great. I finally have 2 VoIP services registered on the adapter w/ both services functioning on phone port #1!
No need to setup any PAP2 call forwarding nonsense. Just configure VoIP service #1 on LINE 1, VoIP service #2 on LINE2, plug in a telephone into PHONE PORT #1, and both services are available (incoming & outgoing)! (Phone Port #2 serves no purpose w/ SPA1001 firmware, so that port is dead).
Thanks Mazilo for reporting the discovery of SPA1001 firmware working on the PAP2. 
Rizzo
P.S. I concur w/ Mazilo's findings above. |
|
 maziloFrom MaziloPremium join:2002-05-30 Lilburn, GA kudos:1 | reply to mazilo
Re: [Equipment] Configure Line1 on your PAP2 with Here is the update on my PAP2 with SPA1001 v3.1.8(SEc) firmware:
1. No Power LED. 2. No Line2 LED (SPA1001 firmware only supports Line1 port). 3. **** 73738#1# (factory reset) doesn't cause the PAP2 running with SPA1001 v3.1.8(SEc) firmware to phone home. 4. Then XML file that I used to provision my PAP2 doesn't seem to be processed by my PAP2 even though the TFTP log show the file got fetched by my PAP2. Perhaps, I need to regenerate a new XML file using SPC for SPA1001. 5. After a factory reset, it appears the GPP_K values becomes lost (I guess this also happens with SPA2K firmware) and the DNS entries seemed to be filled with the ones from the router.
What is interesting regarding item #3 is we no longer fear our unlocked PAP2 gets provisioned and locked by Vonage. I have left my PAP2 running with SPA1001 v3.1.8(SEc) firmware connected to Internet for 6 hours, and it did not even phone home when I perform a factory reset. So, IT IS SAFE TO PERFORM A FACTORY RESET while the device is attached to the Internet. I reckon this is the feature we all have been looking for. Please take some precautions when do this and don't hold me any responsibilities should your PAP2 decide to phone home. I merely tested this for six hours live with several factory resets and no phone home happens, yet. |
|
 rcilinkPremium join:2003-12-15 Manchester, NH | Hmm.. I am curious if you take that PAP2 with SPA1001 v3.1.8(SEc) and put Linksys PAP2 3.1.3 firmware on it... and then try the factory reset to see if the vonage stuff is really gone (GPP_K wiped, so did it wipe the 'customization' portion of the flash that the PAP2 uses?)
For those who want two FXS ports, this might be a useful step... if it does remove vonage customaization..
I have a hunch that the SPA1001 firmware uses a different memory map (most likely to store the second provider info), and it is overwriting the memory portion used for PAP2 customization (core Vonage settings that restore at factory reset). We stumbled across this with the SPA2000 firmware, noting that it wiped the Admin Passwd and a few provision settings.. |
|
 maziloFrom MaziloPremium join:2002-05-30 Lilburn, GA kudos:1 | said by rcilink:Hmm.. I am curious if you take that PAP2 with SPA1001 v3.1.8(SEc) and put Linksys PAP2 3.1.3 firmware on it... and then try the factory reset to see if the vonage stuff is really gone (GPP_K wiped, so did it wipe the 'customization' portion of the flash that the PAP2 uses?) It doesn't work that way. Upon re-flashing with a PAP2 firmware, the GPP_K values are back.
I have a hunch that the SPA1001 firmware uses a different memory map (most likely to store the second provider info), and it is overwriting the memory portion used for PAP2 customization (core Vonage settings that restore at factory reset). We stumbled across this with the SPA2000 firmware, noting that it wiped the Admin Passwd and a few provision settings.. We need to further testing this hack. So far, none of the Line1 and Line2 LEDs have light up even though Line1 can be used as Line2, too (just press the dial-plan key, i.e. #). |
|
 | reply to mazilo said by mazilo:3. **** 73738#1# (factory reset) doesn't cause the PAP2 running with SPA1001 v3.1.8(SEc) firmware to phone home. Sipura fw does not recognize the Vonage factory defaults stored in the adapter. I suspect it is a situation analogous to why the headers of the Sipura firmwares have to be patched to be accepted by the Linksys fw upgrade function and vice versa. Vonage factory defaults are stored separate from the firmware, and probably stored with a header identifying them as Linksys PAP2 specific, which Sipura won't recognize. We know they are not in the firmware, as there are no differences between Vonage and NA fw.
said by mazilo:4. Then XML file that I used to provision my PAP2 doesn't seem to be processed by my PAP2 even though the TFTP log show the file got fetched by my PAP2. Perhaps, I need to regenerate a new XML file using SPC for SPA1001. That's because by Sipura firmware's factory default, it is not setup to use the Vonage assigned pass-phrase. Put the following in your provisioning rule:
[--key $K] tftp://YourHost/spaxxxxxxxxxxxx.xml
and restore your original GPP_K, and it will take your encrypted profile.
said by mazilo:5. After a factory reset, it appears the GPP_K values becomes lost (I guess this also happens with SPA2K firmware) and the DNS entries seemed to be filled with the ones from the router. It's not lost--just not visible to Sipura firmware.
said by mazilo:What is interesting regarding item #3 is we no longer fear our unlocked PAP2 gets provisioned and locked by Vonage. That's right. Your PAP2 running Sipura firmware is permanently safe from the prying hands of Vonage. That is, so long as you don't use the Vonage provisioning rules, and/or you don't flash it back to Linksys land and do a factory reset. |
|
 | any one can post a modified spatools. |
|
 | hey, just tried it, so great, now I don't have to use two phone with it.
Thanks guys. |
|
 | reply to mazilo
Re: [Equipment] Configure Line1 on your PAP2 with two VoSPs remember this site: »www.voipconfig.de/ pay attention to line 1, line 2, line 3 and line 4 on that pap2.
maybe someone can come up with a 4-line device from pap2. |
|
 | reply to DogFace05
Re: [Equipment] Configure Line1 on your PAP2 with said by DogFace05:said by mazilo:3. **** 73738#1# (factory reset) doesn't cause the PAP2 running with SPA1001 v3.1.8(SEc) firmware to phone home. Sipura fw does not recognize the Vonage factory defaults stored in the adapter. I suspect it is a situation analogous to why the headers of the Sipura firmwares have to be patched to be accepted by the Linksys fw upgrade function and vice versa. Vonage factory defaults are stored separate from the firmware, and probably stored with a header identifying them as Linksys PAP2 specific, which Sipura won't recognize. We know they are not in the firmware, as there are no differences between Vonage and NA fw. just another thought, can we patch the header of sipura 2000 firmware and "convert" the Pap2 to sipura 2000 or pap2-na? |
|