rcilink
Premium
join:2003-12-15
Manchester, NH
| reply to rmanaka
Getting a WRTp54G to take 3.1.17-NA...
If you have tried to load up the WRTp54G with version 3.1.17-NA firmware from Linksys support and it does not take (says wrong code pattern), have a look at this:
For this project, you will need:
- a copy of wrtp54g_fw_3.1.17_US.img (get it from www.linksys.com)
- a good HEX editor
- a Linksys WRTp54G device (no, this does NOT work on a WRT54Gp2!)
- the ability to access /update.html (you must know the password)
Here's what to do:
Open the wrtp54g_fw_3.1.17_US.img file using your favorite HEX editor.
1. Change HEX offset 23 from 4D to 4C.
2. Change the last four bytes to: AB 3A 49 5D
3. Save your new file.
4. Update the firmware on your WRTp54G (/update.html) to the new firmware.
Very Important!!! Let the firmware upgrade complete!!! Do not close the web browser session! Eventually (1-2 minutes) it will load the login screen of your WRTp54G device.
If you interrupt this, you may brick your device!
One last note, you may need to do a factory reset to rid yourself of any left-over params from the former use.. I did not have to do that, so the admin password was retained, along with the router settings. The voice section lost all of the settings, as it loads a different SIP engine (resembles the Linksys PAP2).
The new Admin password is blank (nothing in the password field). This is only needed for the /update.html page on firmware 3.1.17-NA.
Good luck!! |
|
KillaB7
join:2006-05-23
Vancouver, BC | Thanks rcilink as always!
Would you be able to post an MD5 for the modded file so people don't screw this one up (myself included).
I'm assuming this one acts like a Sipura/PAP2 vs. 1.00.62-NA? |
|
rcilink
Premium
join:2003-12-15
Manchester, NH
| Sure, the MD5 for the firmware (after the above mods are done) should be: 611eb9063d2c9c8ff2e34826c1a376e2
It does have a PAP2 SIP module, unlike the 1.00.62 versions.
I was pleased to see it is more stable than the 3.1.3 and older versions we played with in the past... |
|
rmanaka
Premium
join:2006-08-07
Jenkintown, PA
2 edits |  reply to rcilink
This is really, really great. Thank you rcilink!!! Version 3.1.17 is indeed running like a SPA-2002/PAP2 as I just reinitialized the router and then added a "Voicepulse" recommended dial plan for the SPA-2002:
(x#|xx#|*821[2-9]xx[2-9]xxxxxx|*82011x.|*xx|*1xx|[3469]11|0|00|1[2-9]xx[2-9]xxxxxx|011x.|[2-9]xx[2-9]xxxxxx)
I think the Vonage WRTP54G is really open now! :D |
|
ii904
join:2005-11-05
Brooklyn, NY | reply to rcilink
hi rcilink, would you upload your modded file ?because I don't know how to do it.Thanks in advance!! |
|
ericolsendsl
join:2006-08-18
San Jose, CA
1 edit | reply to scaredofvonage
Re: [Vonage] SIP credentials, RTP300, GPP_K?
hi rcilink:
How did you get your RTP 300 to work with sipdiscount.com? I upgraded my RTP300 firmware to 1.00.62-NA and tried their test account with no success.
Their test settings are below:
SIP settings:
User Name: test
Password: test
Domain/Realm: sipdiscount.com
SIP Proxy/registrar: sip1.sipdiscount.com
SIP Outbound Proxy (optional): sip1.sipdiscount.com
STUN server (optional): stun.sipdiscount.com
I hear a dial tone, however, dialing results in a 3 different sounding beeps... du-dU-dUU pause then it beeps again. I should have been able to make a 1 minute call.
Any tips would be greatly appreciated. Maybe my dialing plan is off?
Thanks in advance!
Eric |
|
rcilink
Premium
join:2003-12-15
Manchester, NH
| Hmm, I think if I were you, I would look into the cyt tool. It is referenced here: »[General] The new PAP2 v2.0
This will most likely resolve your problem by replacing the dial plan (digit map) and removing the PLAR (dial digits prepend 666 )..
then reconfig the SIP settings and then dial a number using: 001+areacode+number
*Note: check that default dial plan to make sure it will work with 001+AC+NMB |
|
ericolsendsl
join:2006-08-18
San Jose, CA
2 edits | Thanks for that advice. I'm making progress, as now I'm actually getting a fast busy tone. There dial plan works as follows:
Dialplan:
00 + {countrycode} + {areacode} + {subscriber}
For instance if you want to call to the USA dial 001987654321 calling to France would be 0033987654321
The digit map I'm using is as follows:
*xxT|*1xx|[349]11|1xxx[2-9]xxxxxx|[2-9]xxxxxxT|[2-9]xxxxxxxxx|011x.T
What do you suggest? |
|
KillaB7
join:2006-05-23
Vancouver, BC
1 edit | reply to scaredofvonage
Thanks for the MD5 rcilink!
Could you kindly tell us what to modify in the RTP300 image (rtp300_fw_3.1.17_US.img)?
I think all you're calculating is the tichksum. Any chance this can be done in Windows? |
|
celiomartins
join:2006-08-19
01333001
|  reply to rcilink
Re: Getting a WRTp54G to take 3.1.17-NA...
rcilink and other that can Help.
I've tried your instructions and the HEX offset 23 is not 4C... I am using WinHEX... anyway the MD5 was different, so I guess that's the reason whay it is not working? could you please upload it? thank you very much! |
|
KillaB7
join:2006-05-23
Vancouver, BC | 23 Decimal = 17 HEX
So when using a HEX editor, you'll be editing the byte in address 17h |
|
rcilink
Premium
join:2003-12-15
Manchester, NH
| reply to KillaB7
Re: [Vonage] SIP credentials, RTP300, GPP_K?
KillaB7
Hey, I'm interested in that version of firmware, if you have it.. I have rtp300 v 3.1.10, not 3.1.17 ...
Thanks!
celiomartins
BTW, the offset I speak of is 23 decimal. In winHEX, you can move the cursor down to the 23rd byte (it shows in a status area in the bottom of your edit window.)
If you are using a different firmware than WRTP-3.1.17-NA.img (or whatever the name of it is), then yes, this will not work.
ericolsendsl
The dialplan in a wrtp54g or rtp300 that is/was running 1.00.62 (locked and unlocked) will not operate correctly if it had talked to vonage. Vonage pushes out a "hot line" config that trashes the dial plan (you can see "666" in there). There is another field not shown on the web page that also messes it up when trying to 'undo' and use for a real service.
The fix:
- do a factory reset of device (hold in reset button or from ADMIN tab, reset voice)
or
- use the cyt tool discussed in the other link. it will correctly remove the digits '666' from your dialing plan. |
|
KillaB7
join:2006-05-23
Vancouver, BC
1 edit | rcilink
Hey bud, it's on the Linksys site (just added on the 16th).
Just need to change from CYLM to CYLL and modify the checksum  |
|
rcilink
Premium
join:2003-12-15
Manchester, NH | Thanks, got it. I guess I missed it (2 days old, nice.) |
|
meister_sd
Premium
join:2006-01-29
La Mesa, CA
| reply to scaredofvonage
OK, I've loaded this and it looks good! I didn't make any changes to the firmware other than to change the header and re-checksum it. If anyone wants to use it I've posted it.
**** REMEMBER!! If you are using any provider on this device, ALL THE SETTINGS WILL BE ERASED!!
**** If you are using Vonage - DON'T use this firmware. You will not be able to use Vonage again without loading their firmware back on.
1) Download the file to your desktop
2) Log into your router and then click Administration. Click on Firmware Update then the browse button and find the file you just downloaded. Then click the upgrade firmware button.
3) Wait for the upgrade to complete. You will be brought to the login screen automatically. This whole procedure can take upto 5 minutes.
4) After you've logged back in, click on the Administration tab again and then to Factory Defaults. Click BOTH the router and voice to be reset. It will ask for a username/password. The username is Admin (Big A) and leave the password blank. This factory reset will clear any garbage configs and give you a new file.
5) Log back in and then click the voice tab. You are done!
This will give you an unlocked RTP300 with the voice section looking like the PAP2. There isn't any SSH function in this firmware. |
|
kd4yal
join:2006-08-06 | reply to scaredofvonage
Router Backup
Can anyone tell me then I backup my setting from the web interface does this also save all the voice setting?
Thanks |
|
zuchmir
join:2006-08-20
Montreal, QC
| reply to meister_sd
Re: [Vonage] SIP credentials, RTP300, GPP_K?
I have a rtp300 with firmware 1.00.43, I have the admin password, tried to go to the update.html page but the user is disabled. I tried getting to the xml file to enable the user but I'm not having any luck. I tried disableing the java scripts and going to the provisioning page, but it would not take any updates from there.
Anyone have the root password - or any password the will get me in with SSH, so that I can change the config.xml? or if someone knows another was to upload the hacked firmware, please let me know. I would greatlt apprecaite it. I read every post on the forum, but can't seem to get it going.
Thanks |
|
KillaB7
join:2006-05-23
Vancouver, BC
1 edit | @zuchmir
The answer is right here on this page. Look about 12 posts up. It's called CYT-Unlocker and works like magic. |
|
zuchmir
join:2006-08-20
Montreal, QC | Thanks I million! You guys rock! that tool is great, now I will try to set it up to work with my asterisk box.
Zuchmir |
|
celiomartins
join:2006-08-19
01333001 | reply to rcilink
Re: Getting a WRTp54G to take 3.1.17-NA...
To help I did a very easy walkthrough.
And also uploaded the Image file.
you can check here... »celiom.googlepages.com/linksys |
|
