Re: RT31P2 Unlock thoughts?? in VOIP Tech Chat

Re: RT31P2 Unlock thoughts??

Tue, 07 Apr 2009 12:59:38 EDT

giovanoty : I would say that I have a RT31P2 closed in the part of VoIP, and also tell you that I have this firmware version: RT31P2_v1.17.02_000_combin_code, if they served, and the need to contact me my mail, because I've read out there that need a version older, and if I can help them unlock agradeceria. I apologize because I do not know English then, as is this translation.

Re: RT31P2 Unlock thoughts??

Tue, 24 Mar 2009 14:11:52 EDT

dafil : Can someone send me the unlock Firmware for WRT54GP2 (current Firmware Version: 1.20.01)? Mail to davidchen (at) onlinehome.de

Thx in advance
David

Re: RT31P2 Unlock thoughts??

Thu, 15 Jan 2009 16:14:13 EDT

Dan_voip :

said by xc :

Anybody direct me to a step by step guide to unlocking the thing?

Here is the requested link:
»www.bargainshare.com/index.php?s···743&st=0

Re: RT31P2 Unlock thoughts??

Thu, 15 Jan 2009 07:45:43 EDT

mazilo :

said by xc :

Anybody direct me to a step by step guide to unlocking the thing?

You shouldn't have a problem to locate posts here with a step-by-step guide to unlock an RT31P2 device through a search button. Failing that, your best option is to contact DogFace05 to remotely NAizer (completely unlock and safe to a factory reset) your RT31P2 device.

Re: RT31P2 Unlock thoughts??

Thu, 15 Jan 2009 00:24:34 EDT

anon : So, after stumbling throu most of the last 63 pages, i havent found a step by step guide to unlocking the RT31P2. Though it looks like you guys have put in some very hard work!

Anybody direct me to a step by step guide to unlocking the thing?

My thanks in advance..

XC

Re: RT31P2 Unlock thoughts??

Sat, 10 Jan 2009 04:05:26 EDT

anon : is there a way to unlock a wrt54gp2 without the xml file? like via jtag? my box is locked to engin, an australian voip provider.

Re: RT31P2 Unlock thoughts??

Tue, 30 Dec 2008 23:21:34 EDT

Yippz Voip : I've got an RT31P2 reg'd to Vonage to unload. It's in perfect shape and includes the power supply. I have absolutely no use for it.

Any takers - $20 + $7 Priority Mail (US ONLY)

PM me - payment via paypal.

Re: wrt54gp2 unlock image needed please

Tue, 30 Dec 2008 22:04:38 EDT

meister_sd :

said by jjones3601 :

Can someone send me wrt54gp2_v1.27.02_209_combin_code.zip

Thanks!

You will have to PM someone and give that person your email address. There is no attachment in a PM.

wrt54gp2 unlock image needed please

Tue, 30 Dec 2008 20:52:50 EDT

jjones3601 : Can someone send me wrt54gp2_v1.27.02_209_combin_code.zip

Thanks!

Re: RT31P2 Unlock thoughts??

Wed, 17 Dec 2008 14:46:04 EDT

Dan_voip :

said by rouge1 :

Can someone please send me the wrt54gp2_v1.27.02_209_combin_code.zip?
email rouge_1@hotmail.com

Thanks.

WRT54GP2_v1.25.00_209_combin_code.zip sent
I think this version will work also.

Re: RT31P2 Unlock thoughts??

Wed, 17 Dec 2008 13:37:58 EDT

rouge1 : Can someone please send me the wrt54gp2_v1.27.02_209_combin_code.zip?
email rouge_1@hotmail.com

Thanks.

Re: RT31P2 Unlock thoughts??

Sat, 13 Dec 2008 20:42:58 EDT

meister_sd :

said by fredautumn :

One last question, after getting it unlocked will it work if i upload file WRT54GP2_NA_v1.30.06_000_VM_3.1.09_LId_combin_code.bin instead of wrt54gp2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin?

No - they are built for different providers. You will get a file pattern error.

Re: RT31P2 Unlock thoughts??

Sat, 13 Dec 2008 15:09:49 EDT

fredautumn : i already tried power recycle. I will try the reset button on the device.

One last question, after getting it unlocked will it work if i upload file WRT54GP2_NA_v1.30.06_000_VM_3.1.09_LId_combin_code.bin instead of wrt54gp2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin?

Re: RT31P2 Unlock thoughts??

Sat, 13 Dec 2008 08:56:17 EDT

mazilo :

said by fredautumn :

I event tought on reseting it but i don't want to take the risk to lock it again.

Have you tried a power cycle to see if that will do the trick? Otherwise, you will need to try to reset your device and do the unlocking again.

Re: RT31P2 Unlock thoughts??

Sat, 13 Dec 2008 08:35:25 EDT

fredautumn : Hi guys

I am using my unlocked wrt54pg2 for quite sometime, but this week i realized that i cannot connect my laptop using wireless adaptor.

I didn't, for sure, changed any setup.

Laptop adaptor sees the network but it does not get an IP. I tried with another computer and the same thing happens.

Do you think it can be a setup that somehow changed or most probably it is a hardware issue?

I event tought on reseting it but i don't want to take the risk to lock it again.

best regards
Fred

Re: RT31P2 Unlock thoughts??

Tue, 25 Nov 2008 22:56:21 EDT

Dan_voip : Take a look at that:
»www.bargainshare.com/index.php?s···ry748434

Re: RT31P2 Unlock thoughts??

Mon, 24 Nov 2008 19:44:34 EDT

dvijen : If I reset the router, is it possible to make an encrypted .xml with known factory fresh K and upload it to the router with 1.30.01 firmware for wrt54gp2 router? Or do I have to go through the entire unlocking process?

Is there a way to get factory fresh user ans admin password?

Thanks for the reply

d

Re: RT31P2 Unlock thoughts??

Mon, 27 Oct 2008 13:04:28 EDT

accent : To accounted:
Your DNS might not be working right. It should like the DNS record I posted.

Re: RT31P2 Unlock thoughts??

Sun, 26 Oct 2008 04:53:50 EDT

accent : I think I found the problem. I thought the Microsoft FTP server worked but it didn't. I downloaded the SolarWinds FTP and everything is good now.

Re: RT31P2 Unlock thoughts??

Sun, 26 Oct 2008 02:33:26 EDT

accent : I've been trying to unlock my RT31P2 1.17.02 by feeding it with FW, and xml file from my webserver and ftp server. The RT31P2 got the IP address of my PC for all the sever it requested but it just doesn't download anything.
Here is my DNS Log. Can anyone help me find out what is going on? I even installed and started a time server on my PC but it still doesn't help.

11:08:25 Request from 192.168.0.1 for A-record for time.nist.gov
11:08:25 Sending reply to 192.168.0.1 about A-record for time.nist.gov:
11:08:25 -> Answer: A-record for time.nist.gov = 192.168.0.2
11:08:25 Request from 192.168.0.1 for A-record for time.stdtime.gov.tw
11:08:25 Sending reply to 192.168.0.1 about A-record for time.stdtime.gov.tw:
11:08:25 -> Answer: A-record for time.stdtime.gov.tw = 192.168.0.2
11:08:25 Request from 192.168.0.1 for A-record for time.chttl.com.tw
11:08:25 Sending reply to 192.168.0.1 about A-record for time.chttl.com.tw:
11:08:25 -> Answer: A-record for time.chttl.com.tw = 192.168.0.2
11:10:40 Request from 192.168.0.1 for A-record for time.nist.gov
11:10:40 Sending reply to 192.168.0.1 about A-record for time.nist.gov:
11:10:40 -> Answer: A-record for time.nist.gov = 192.168.0.2
11:10:40 Request from 192.168.0.1 for A-record for time.stdtime.gov.tw
11:10:40 Sending reply to 192.168.0.1 about A-record for time.stdtime.gov.tw:
11:10:40 -> Answer: A-record for time.stdtime.gov.tw = 192.168.0.2
11:10:40 Request from 192.168.0.1 for A-record for time.chttl.com.tw
11:10:40 Sending reply to 192.168.0.1 about A-record for time.chttl.com.tw:
11:10:40 -> Answer: A-record for time.chttl.com.tw = 192.168.0.2
11:15:33 Request from 192.168.0.1 for A-record for time.nist.gov
11:15:33 Sending reply to 192.168.0.1 about A-record for time.nist.gov:
11:15:33 -> Answer: A-record for time.nist.gov = 192.168.0.2
11:15:33 Request from 192.168.0.1 for A-record for time.stdtime.gov.tw
11:15:33 Sending reply to 192.168.0.1 about A-record for time.stdtime.gov.tw:
11:15:33 -> Answer: A-record for time.stdtime.gov.tw = 192.168.0.2
11:15:33 Request from 192.168.0.1 for A-record for time.chttl.com.tw
11:15:33 Sending reply to 192.168.0.1 about A-record for time.chttl.com.tw:
11:15:33 -> Answer: A-record for time.chttl.com.tw = 192.168.0.2
11:15:43 Request from 192.168.0.1 for A-record for time.vonage.net
11:15:43 Sending reply to 192.168.0.1 about A-record for time.vonage.net:
11:15:43 -> Answer: A-record for time.vonage.net = 192.168.0.2
11:15:51 Request from 192.168.0.1 for A-record for s.voncp.com
11:15:51 Sending reply to 192.168.0.1 about A-record for s.voncp.com:
11:15:51 -> Answer: A-record for s.voncp.com = 192.168.0.2
11:16:10 Request from 192.168.0.1 for A-record for ls.tftp.vonage.net
11:16:10 Sending reply to 192.168.0.1 about A-record for ls.tftp.vonage.net:
11:16:10 -> Answer: A-record for ls.tftp.vonage.net = 192.168.0.2

Re: RT31P2 Unlock thoughts??

Sat, 20 Sep 2008 20:46:46 EDT

accounted : After read many pages, I still do not know how to set up in Simple DNS Plus and SolarWind server.

What is root of Solarwind? is it in solarwind server folder? too many folders list there, unsure which is which even I already created a subfolder for xml file. But it does not do any good.

Would be greatly appreciate to any help. Please instruct me step by step

Below are from my Simple DNS:

Response received from 192.168.1.142: (this is my pc ip)

Authoritative response (AA): No
Recursion available (RA): Yes
Truncated (TC): No

Header:
RCODE 2 - Server Failure

Re: RT31P2 Unlock thoughts??

Fri, 19 Sep 2008 10:04:53 EDT

seya : Hi,
Could it be possible use the RT31p2 method to unlock the Vonage cisco ATA 186?
As per the search result, the 2.14 firmware does not have UIPASSWORD locked, or it can be easily reset.
Is there any way to load the 2.14 firmware to ATA?

Re: RT31P2 Unlock thoughts??

Wed, 27 Aug 2008 18:49:34 EDT

fredautumn : Hi

That makes sense as i cannot use my WRT54GP2 to route SIP packages to my LAN.

Curious thing is that another similar router WRTP54G is doing that.

i wondering if there are internal differences between them. Talking about web interface they are pretty much the same.

thanks

Re: RT31P2 Unlock thoughts??

Tue, 26 Aug 2008 14:12:36 EDT

DogFace05 : The RT31P2's ATA only communicates through the WAN side--it cannot be accessed from the devices's LAN side. The RT31P2's loopback function has absolutely no effect on any VoIP packets going to/from the built in ATA. They are never looped back.

The only way that you can use the RT31P2's VoiP within your own LAN, is to have its WAN port connect to the same network segment as your LAN (and computer). This also implies that you'll have to rely on a second router for connection to the Internet. Furthermore, you'll also have to enable remote admin on the RT31P2 to be able to administer its settings from its WAN side.

Re: RT31P2 Unlock thoughts??

Tue, 26 Aug 2008 07:57:47 EDT

fredautumn : hi

Thanks for the reply, router is not really sending any SIP (UDP) messages to the computer.

I searched into several options and nothing seems to be related to that.

I also looked for the mentioned loop back, but not found as well.

Really stucked now.

Re: RT31P2 Unlock thoughts??

Sun, 17 Aug 2008 10:18:06 EDT

mazilo :

said by fredautumn :

I want to route SIP from line 1 to a SIP server in my computer. For that i created a different dial plan and enabled ip dialing.

Can't you just configure your SIP server to register as a client so that it will register to the account on your VoSP server?

Situation/Problem 2
---------------------
In my router i cannot even route SIP to computer. When i dial i always get a busy tone.
Again, not a clue what the problem could be.

For this to work, you will need to use different ports for signaling. Also, I believe you may want to enable LOOPBACK on your router if you want to be able to call from your RT31P2 to your computer.
--
Mazilo always prays for FREEBIES!
US Phone: +1-678-601-0907
UK Phone: +44-703-194-2574

Re: RT31P2 Unlock thoughts??

Sun, 17 Aug 2008 09:18:43 EDT

fredautumn : Hi

i don't know how to get setup in text file, can i put it here as images (i tried it out here and it gets big)?

Apart from that, i power cycle my router and it worked, i expected that changes on the web didn't require that.
i have now line 2 properly working with mi SIP provider.

Of course, I have another problem that i don't know if it fits to this thread, please advice.
In fact i have two problems. See below:

I want to route SIP from line 1 to a SIP server in my computer. For that i created a different dial plan and enabled ip dialing.

Situation/Problem 1
---------------------
I manage to make it work with my father in law router, one WRTP54G. Just have an issue with audio, it is one way only. Responses from router to computer arrives there with WAN ip and not local IP. I don't have a clue how deal with that.

Situation/Problem 2
---------------------
In my router i cannot even route SIP to computer. When i dial i always get a busy tone.
Again, not a clue what the problem could be.

I really appreciate If you guys can help me out.

thanks in advance

Re: RT31P2 Unlock thoughts??

Sun, 17 Aug 2008 08:20:40 EDT

mazilo :

said by fredautumn :

Any idea of what it can be?

Why don't you post here your SIP/Line configurations?

Re: RT31P2 Unlock thoughts??

Sun, 17 Aug 2008 07:35:23 EDT

fredautumn : ops, that's me again.

Everything is working fine. But line 2 is dead, both lines are enabled in the web interface.

If i setup my sip provider in line it connects and works fine, but line 2 i get and error and not even a dial tone is heard.

Any idea of what it can be?

Re: RT31P2 Unlock thoughts??

Thu, 14 Aug 2008 23:25:15 EDT

fredautumn : hi guys

Thank you for the replies.

I managed to found the problem. I installed wireshark and saw that ICS was not providing an IP to the router.

I got a free software called tftpd32 that is a tftp server and dhcp server. After that, router picked-up the file and i could get GPP_K from vonage and then later from factory.

I updated firmware back to 1.30 then i connected to WAN to run VuckFonage. I believe, router got to vonage again an updated XML file. Then, voice admin page asked for the passcode again. I used the one decrypted and It worked but as result i got the message "Hidden Page".

I tried the combination using phone dial. But i got no answer from router. Conclusion, i had to start it over.
Finally, everything is back working.

My conclusion is that guide is ok, but unlocking the router is not so straight forward, sometimes wierd things happens. Like second time i uploaded the plain xml i still got the router asking for the admin file. I uploaded it again and only after that is worked.

cheers
best regards

Re: RT31P2 Unlock thoughts??

Thu, 14 Aug 2008 07:49:23 EDT

fredautumn : Sorry, i am using solar winds. I mistyped TFTP. I will try again today, maybe i did something wrong.

One curiosity, when i uploaded 1.20/2.0.9 and didn't succeedded loading plain XML file, afterwards i tried to upload 1.30 again. But web is complaining about password.

Originally i used user/7756112 to upload 1.20. I understood that firmware update changed the password for web interface, is this correct?

Besides the password list below, is there any other known original passwords?
user/8995523
user/7756112
admin/fry3]g1mlets

Thanks for your kindness support.
best regards

Re: RT31P2 Unlock thoughts??

Wed, 13 Aug 2008 16:31:08 EDT

meister_sd : You need a TFTP server, not FTP. Use the free one from Solar Winds

Re: RT31P2 Unlock thoughts??

Wed, 13 Aug 2008 11:03:37 EDT

mazilo :

said by fredautumn :

Hi firmware is 1.20 and 2.09.

If this is the same as v2.0.9 on a PAP2v1, then you can just easily unlock it through a plain-text (no encryption) provisioning XML file.

Re: RT31P2 Unlock thoughts??

Wed, 13 Aug 2008 08:37:12 EDT

fredautumn : Hi firmware is 1.20 and 2.09.
The problem is that it is not loading the file.
Ftp server is up (i tested it) but router does not pick it up.
Any tip?

Re: RT31P2 Unlock thoughts??

Tue, 12 Aug 2008 17:50:55 EDT

meister_sd : What firmware version are you at now? If you are at 1.20 router and 2.09 voice, then get the router to load your plain text XML file. Here is an example:

Then when this sucks it up - the passwords should be gone.

Re: RT31P2 Unlock thoughts??

Mon, 11 Aug 2008 23:50:02 EDT

mazilo : DogFace05 can easily NAizer an RT31P2 to completely unlock it.

Re: RT31P2 Unlock thoughts??

Mon, 11 Aug 2008 22:12:31 EDT

fredautumn : hi

i made some progress but now i believe situation is even worse.

1 - uploaded firmware 1.20.10 and voice 2.0.9 into router using web and admin/7756112.
2 - put xml text file into ftp directory and firmware renamed to wrt54gp2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin in http directory (I didn't really know if this was necessary but guide instructed so).
Result: files where not uploaded into router
3 - put xml text file into http directory and then files where picked up.
See log of apache.
192.168.0.1 - - [10/Aug/2008:04:45:10 -0300] "GET /+00121732c6e3/wrt54gp2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin HTTP/1.1" 200 1046564
192.168.0.1 - - [10/Aug/2008:04:45:30 -0300] "GET /+00121732c6e3/spa00121732c6e3.xml HTTP/1.1" 404 231

But voice_Admin page is still asking for password.

After several hours and no progres i tried to re-start over and upload newer version using web. But it didn't work. User and password are different now.

Tried also using http server but files are not picked up again.
TFTP server also shows no activity at all.

I don't know if made things even worse...
Please, help, i need advice.

thanks in advance

Re: RT31P2 Unlock thoughts??

Mon, 11 Aug 2008 08:18:37 EDT

fredautumn : I believe it is Vonage. At least the CD comes with setup for Vonage (for your reference, some posts above i put SysInfo).

I tried to upload version 1.20 but instead of illegal pattern i got a no found page after i enter the password admin/admin.

Should it be another password or should i use a different method to upload the firmware?

Using httpd and tftp as explained in the long method the router does not pick the files up.

thanks

Re: RT31P2 Unlock thoughts??

Sun, 10 Aug 2008 22:47:45 EDT

meister_sd :

said by fredautumn :

In fact with firmware 1.30, i get the illegal pattern.

The illegal pattern means that you are using the wrong firmware. If you have an AOL, Vonage or a true -NA, each has it's own firmware - they are not interchangeable.

Re: RT31P2 Unlock thoughts??

Sun, 10 Aug 2008 18:28:32 EDT

fredautumn : Hi,
In fact with firmware 1.30, i get the illegal pattern. With 1.20 it requests me the password, and then, whe i type admin/admin it stops loading and return a IE not found default page.

Hope you guys can help me.

Thanks in advance

Re: RT31P2 Unlock thoughts??

Sun, 10 Aug 2008 16:42:45 EDT

fredautumn : Sure, my mistake. Sorry. It was 5am and i was struglinh with the problem. :P

Besides i was doubled wrong. I did a reset to factory using web.

I am now stuck. I tried to upload the firmware received using web and it complais about a illegal pattern.

I tried using also the long method which uses a http and tftp servers but the files are not retrieved by the router.

Can you guys give me some tips?

thanks in advance
best regards
Gleudson

Re: RT31P2 Unlock thoughts??

Sun, 10 Aug 2008 15:17:21 EDT

DogFace05 :

said by fredautumn :

According to some postings back, dogface05 said if the regular and voice admin password are not blank it shouldn't reset it.

If you're referring to this post, that's not what I said. Please go back and revisit it.

Depending on how you've configured the voice module, pressing the reset button can indeed reset it back to factory defaults. Note that the "user" password I refer to in the post, is not the same as the login password defined for the router section.

When pressing the reset button for 5 seconds, the router side issues a request to the voice module to factory reset its settings. If the voice module has been configured with "Protect_IVR_FactoryReset" disabled, it will always reset its settings without complaint. On the other hand, if "Protect_IVR_FactoryReset" is enabled, the voice side will authenticate the request, first against the "user" password, and if not matched, again against the "admin" password.

Setting a blank password (for either user or admin) is equivalent to a wildcard that matches any password, and results in the request and therefore the factory reset always succeeding. Also note that the router side, by default, issues the factory reset request using the router side login password. If this password matches either the user or admin password of the voice side, the reset request will happily go through as well.

Re: RT31P2 Unlock thoughts??

Sun, 10 Aug 2008 14:19:56 EDT

anon : could you please send me a copy too? I have a WRT54GP2 but no light on Phone connect

Re: RT31P2 Unlock thoughts??

Sun, 10 Aug 2008 11:33:09 EDT

meister_sd : Firmware sent.

A factory reset through the web interface will reset everything. The button on the back will not reset the voice.

There is a tiny piece of code added to these branded devices that contain a small config file. This file gets loaded, which includes passwords, when a factory reset is done. This won't go away by loading -NA firmware on it.

Re: RT31P2 Unlock thoughts??

Sun, 10 Aug 2008 10:13:13 EDT

fredautumn : On last thought...
Why was admin password reset?
According to some postings back, dogface05 said if the regular and voice admin password are not blank it shouldn't reset it.

Re: RT31P2 Unlock thoughts??

Sun, 10 Aug 2008 09:22:03 EDT

fredautumn : hi

i tried to use tutorial »www.bargainshare.com/index.php?s···743&st=0.

I tried with version 1.25 as version 1.27 is not available (i sent a PM to meister_sd, i hope he can send me).

In short method firmware it is rejected with a message ilegal pattern.
Interesting thing is that i also tried vonage 1.30 version and i get the same error.

In long method XML file neither firmware are loaded by device.

My hope, again, is that i can get version 1.27 and it works.

Any other comment are welcome.

Thanks in advance
fred

Here is my device sysinfo
Vendor:Linksys
Model Name:WRT54GP2
Firmware Version:1.30.01, Sep 2 2005
#:000
Voice Version:3.1.6(LI)
Boot Version:
CodePattern:WP31
Country:USA

Re: RT31P2 Unlock thoughts??

Sun, 10 Aug 2008 01:04:24 EDT

fredautumn : Hi guys

I have a lynksys WRT54G2 Firmware Version: 1.30.01. I had to reset factory defaults and now i cannot acces voice_AdminPage anymore.

I bought it from Amazon as a not locked device. Checking original CD i realized it is a Vonage device.

It is wierd that when i try to again to open factory defaults screen the name of the device is switched to RT31P2 and firmware info gets blank.

I read in this forum that i can get my voice admin page back but i don't know which firmware and which process should i use as the forum is for RP31P2 and my device is a WRT54G2.

Can somebody give me some ideas?

thanks in advance
best regards
Fred

Re: RT31P2 Unlock thoughts??

Sat, 02 Aug 2008 14:43:36 EDT

Shehzada : Grauer,

Thanks for your post. The »192.168.15.1/SysInfo.htm page shows no voice module loaded, so I'm guessing its corrupt someplace.

I have tried using Linksys TFTP during bootup (as soon as it starts accepting pings) and tried using various firmwares, including the same version that was already loaded on it.

It has not worked yet.

Re: RT31P2 Unlock thoughts??

Sat, 02 Aug 2008 06:43:59 EDT

GrauerFuchs : I ran into this as well. I don't have as much experience with this box, so my solution may not work for you. I ran into the same loop, where it lost connection with the VM. The solution that worked for me was a command-line TFTP (using the Linksys client) of the viable firmware of the same version and release that had previously been installed and working. This allowed it to get a connection to the VM, and brought it back to operation.

I surmise that the firmware updates of any other revision may not be accepted if the VM firmware doesn't agree with the router firmware. This has the additional backing from a test in which I was able to send it a custom-modded firmware with a VM release that was different from the router release. It accepted one segment, flashed it, and failed on the second segment. Therefore, the two halves were left out of sync, and they wouldn't connect to each other.

Re: RT31P2 Unlock thoughts??

Sat, 02 Aug 2008 03:11:49 EDT

seya : Hi,
Update for the status
Again thanks everyone who contributed to this forum and made this Fon@ge RT31p2 unlock possible.

I have successfully unlocked this router, I also get the two GPP_K value, and update the firmware to RT31P2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin
I have changed the setting from plain text file "Protect_IVR_FactoryReset ua="na"|No|/Protect_IVR_FactoryReset" to "Protect_IVR_FactoryReset ua="na"|Yes|/Protect_IVR_FactoryReset" and set the voice admin and user password.
I had set the voice provision to NO and clear the two F0n@ge DNS entry.

Now my question is:
Can I confirm that this router wouldn't re-lock even do a factory reset?
Do I need to do any further action on this Router?
Can I upgrade the router to the latest NA firmware?

Re: RT31P2 Unlock thoughts??

Mon, 28 Jul 2008 00:35:49 EDT

seya : Hi,
Thanks everyone for the clarification of the MAC address issue, especially Dogface05.
For info, I had loaded the modified firmware to the router, after that
I can't tftp feed the router with plan xml file by using box MAC address and stop there( the strange things is I can get into the voiceadmin page of this router by first click the voice page, after see displied " see your ??? provider" information, I change the Address to the 192.168.1.15/Voice_adminPage.htm hidden page) but can't find the provision information on that page).
I will try late.

By looking for the product appearance,it does not look like counterfeited one,the actual model on the box is RP31P2-VD, the package included a user manual and CD-ROM, it is probably the seller misplaced the unit in to another box.

Re: RT31P2 Unlock thoughts??

Sun, 27 Jul 2008 18:39:51 EDT

DogFace05 : The box you have is definitely not the original that came with your RT31P2, as the serial no/MAC stamped on it should exactly match the WAN serial and MAC on the RT31P2.

The correct MAC *should* be the WAN one stamped on the unit, but to complicate matters as a friend of mine recently found out, if you've bought it from one of the many Hong Kong/China/Taiwan based counterfeiters who've been flooding the market (mostly through ebay but also other channels) with fake -NA adapters for the past couple of years, that may not and usually won't be true.

These counterfeits usually have onboard serial numbers and MACs that differ from what's stamped on them, and worse, that in turn are different from those on their embedded security certificates, which therefore are rendered invalid, making the units totally insecure for provisioning via HTTPS--normally the preferred and most secure method.

In your case, since your unit is apparently still locked to Vonage, it is doubtful that it would be such a counterfeit. In all likelihood, therefore, it is the WAN MAC stamped on it that you need.

Re: RT31P2 Unlock thoughts??

Sun, 27 Jul 2008 11:06:56 EDT

mazilo :

said by seya :

The problem is all those 5 numbers are different, so which one is the MAC address I need to use to download the XML file from vonage?

WAN MAC address

Re: RT31P2 Unlock thoughts??

Sun, 27 Jul 2008 10:19:58 EDT

seya : Hi,
I am new to this forum, I need some help.
I am confused about the RT31p2 MAC address, I am not sure which is the correct one.
on the BOX of adapter, thare are printed S/N and MAC number, both are 12 digit.
on the bottom of the RT31P2,there are S/N, LAN mac address and WAN MAC address, all are 12 digit.
The problem is all those 5 numbers are different, so which one is the MAC address I need to use to download the XML file from vonage?
Could it be the BOX is not original one?
many thanks

Re: RT31P2 Unlock thoughts??

Sat, 05 Jul 2008 17:22:13 EDT

Shehzada : Is DogFace MIA?

Re: RT31P2 Unlock thoughts??

Sun, 22 Jun 2008 19:55:34 EDT

Shehzada : Thanks for your advice.

Re: RT31P2 Unlock thoughts??

Sun, 22 Jun 2008 18:13:34 EDT

meister_sd :

said by Shehzada :

I'm definately going to get an unlocked device, I just can't decide between the RTP300 or the PAP2. BTW, any chance of salvaging my RT31P2?

The RT31P2 maybe salvageable, but not easily. I'd use DFs suggestion of the TFTP client from LS and try to reload the version of FW you have on the device.

The decision of RTP300 vs PAP2 is your network setup. The RTP is a router and voice device and the pap2 is voice only. The RTP has complaints of stability, especially under heavy load and P2P. Personally, I'd get a decent router and use the pap2. If you go anywhere, you can always take the pap2 with you.

My setup is the WRT54G w/Thibor FW and the pap2's are behind that. I don't have to do anything special, like forward ports - but maybe I've been lucky so far.

Re: RT31P2 Unlock thoughts??

Sun, 22 Jun 2008 16:29:21 EDT

Shehzada : I'm definately going to get an unlocked device, I just can't decide between the RTP300 or the PAP2. BTW, any chance of salvaging my RT31P2?

Re: RT31P2 Unlock thoughts??

Sun, 22 Jun 2008 16:19:13 EDT

meister_sd :

said by Shehzada :

he would be happy to send me either a refurbished Motorola VT2142 or the V-portal (they don't have the older models like the PAP2 or the one you mentioned anymore).

The V2142 and V-Portal are devices made for Vonage. As such, they don't work well with other providers without special knowledge, and neither come with STUN support. The "V" is config file only provisioning. I have a default config file for you to get your bearings - if you get it unlocked. I'm the only one who has unlocked it (as far as I know) and I had to dump the chip to get the passwords. The V2142 can be unlocked and there are other threads dealing with that.

If you want to use another provider, get an already unlocked device from a retailer (I suggest VoIPSupply) or off ebay. It will save you from a lot of headaches. Unless, of course, you want to learn to hack. ;) The pap2 and pap2t are the most popular and will most likely have "how to" information written for it.

Re: RT31P2 Unlock thoughts??

Sat, 21 Jun 2008 11:32:25 EDT

Shehzada : Thanks Mazilo. The rep told me that since its his fault, he would be happy to send me either a refurbished Motorola VT2142 or the V-portal (they don't have the older models like the PAP2 or the one you mentioned anymore). I told them that I'd rather purchase a device on my own and he said he would credit my account for $60 once I registered it. BTW, on the RT31P2, the router function still works perfectly.

Are there any Vonage devices that are easy to unlock orr should I just start looking for an unlocked WRTP54G or the RTP300-NA? I'm really tired of Vonage and am looking to move to ViaTalk (thus the reason for an unlocked version).

Do you suggest I get an adapter like the PAP2T or router like RTP300? The reviews on the WRTP54G are not so great which is why I'm refraining to buy it.

Thanks in advance.

Re: RT31P2 Unlock thoughts??

Sat, 21 Jun 2008 08:19:37 EDT

mazilo :

said by Shehzada :

Any help would be appreciated. (My wife is yelling at me as to why I even called Vonage for the firmware in the first place).

First, tell your wife to stop bitching you or send her to an angry management school. Then, call Vonage and ask them to replace the device with a new one, i.e., a Linksys WRTP54G WiFi VoIP router, and be sure to request for a free return S/H service to send back this RT31P2 if Vonage still wants it.
--
Mazilo always prays for FREEBIES!
US Phone: +1-678-601-0907
UK Phone: +44-703-194-2574

Re: RT31P2 Unlock thoughts??

Sat, 21 Jun 2008 00:28:08 EDT

Shehzada : Oh boy. I've read through this entire thread regarding the RT31P2 problem I have. Unfortunately, none of the tips revived it.

I called Vonage customer service yesterday to have them upgrade my firmware. The tech guy said he was sending an update, but somewhere along the lines, the update wasn't successful and now I have no phone service, the phone LEDs are not lit and when I go to the Voice_Setup.htm page, it states "Router Still Starting..."

I have tried to flash about 2 or 3 firmware updates using TFTP but they all fail. Using the firmware update within the web interface does seem to work, but towards the end I get into a never ending prompt for user/pass .

I've read DogFace05's comment that when it goes into this type of loop, no upgrades/downgrades will work (until the router can communicate with the VM) The default settings command from the web interfaces give me "Setting are failed"

Any help would be appreciated. (My wife is yelling at me as to why I even called Vonage for the firmware in the first place).

Re: RT31P2 Unlock thoughts??

Thu, 03 Apr 2008 08:48:43 EDT

toro : Does anyone know if the WRT54GP2-NA firmware can be patched in order to load on a WRT54GP2-VD device ?
The reason I'm asking: the newest firmware for WRT54GP2-VD, wrt54gp2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin has serius issue with WPA encryption. I am hoping that the newer WRT54GP2_NA_v1.30.05_000_VM_3.1.09_LId_combin_code.bin may solve them, but it gives a "Code pattern error" when trying to load it on the WRT54GP2-VD.

Re: RT31P2 Unlock thoughts??

Sat, 22 Mar 2008 18:05:17 EDT

DogFace05 : ex_Cust_999,

You're not giving the whole story. In your original post, you gave the impression that your RT31P2 suddenly started acting up without you doing anything to cause it, while in your last post, as you ask what precautions to take not to brick it, it would seem that perhaps you had more of a hand in it than you let know.

Failsafe is merely the case where the boot code in the router determines through a checksum that the main firmware code is corrupt, decides not to load and execute it, and instead stays within its own code (in the case of the RT31P2 waiting indefinitely for a firmware upgrade over TFTP).

The shorting of certain pins on the flash chip is just a trick used to force the boot code to think that the main code is corrupt, by aliasing some blocks within the address space where the main code is stored, causing its checksum to fail. The boot code then, as a result, enters the failsafe state. If your RT31P2 is already in failsafe, there's no point in trying to short pins to trick it into going into a state in which it is already in.

That said, it is extremely rare for the main code to become corrupt on its own. This situation, almost exclusively happens as a result of an interrupted firmware upgrade. Therefore, if as you infer from your first post, that it just suddenly started acting up, it is far more likely that there's something else at fault with your RT31P2 (such as its ethernet switch having been fried by a lightning surge), rather than it being stuck in failsafe.

On the other hand, if it ended up in its current state as a result of you trying to upgrade its firmware, perhaps with some hacked firmware, then it's probable that it may be in failsafe. In that case, there's no reason why you shouldn't be able to upgrade the firmware again through TFTP. However, you have to use Linksys' proprietary TFTP client--no other TFTP client will do. You can find this TFTP client at Linksys' ftp site.

Also, the RT31P2 will be hardcoded to IP address 192.168.15.1, so to communicate with it, you have to make sure that your PC's ethernet interface has an IP within the 192.168.15/24 subnet (eg, 192.168.15.2) range. You should configure it statically.

Re: RT31P2 Unlock thoughts??

Sat, 22 Mar 2008 17:32:07 EDT

mazilo :

said by DogFace05 :

You're confusing the RT31P2 with the WRT54G(S) series routers (and similar), which have this time limited window during the startup of their main firmware.

Thank you for clarifying this and you definitely read my mind pretty well. ;)

Re: RT31P2 Unlock thoughts??

Sat, 22 Mar 2008 17:22:48 EDT

DogFace05 :

said by mazilo :

There is about three seconds window during the booting process that an RT31P2 will accept a tftp command, IIRC. You can use ping utility to determine this when it gets the responses from your RT31P2 during a booting process.

You're confusing the RT31P2 with the WRT54G(S) series routers (and similar), which have this time limited window during the startup of their main firmware.

The RT31P2, when in failsafe, waits indefinitely for a TFTP firmware upgrade. There's no such thing as a 3 second window or any time limited window of any kind for TFTP with it. You can wait 3 minutes or 2 years if you're so inclined, and it will still accept TFTP sessions. Furthermore, when running the main code (ie, when not in failsafe), it also accepts firmware upgrades via TFTP at any time.

Re: RT31P2 Unlock thoughts??

Sat, 22 Mar 2008 13:39:35 EDT

mazilo :

said by ex_Cust 999 :

No luck to push it up to the default IP-add: 192.168.15.1. I used Wireshark (EtherReal) to capture the traffic on both LAN & WAN sides. But I don't see anything comes out from my RT31P2 at all.

I had done this about a year or so ago when my RT31P2 went into this mode before and was able to bring it out by pushing a firmware using tftp while it was booting. There is about three seconds window during the booting process that an RT31P2 will accept a tftp command, IIRC. You can use ping utility to determine this when it gets the responses from your RT31P2 during a booting process. If you don't get any response, then probably your RT31P2 is dead and needs a (USB)/serial-console cable to access it.
--
Mazilo always prays for FREEBIES! :D
US Phone: +1-678-601-0907
UK Phone: +44-703-194-2574

Re: RT31P2 Unlock thoughts??

Sat, 22 Mar 2008 12:30:29 EDT

anon : Mazilo,

Many thanks for your responses.

No luck to push it up to the default IP-add: 192.168.15.1. I used Wireshark (EtherReal) to capture the traffic on both LAN & WAN sides. But I don't see anything comes out from my RT31P2 at all.

So, could you pls confirm if this mean it's a brick...?
If yes, I may try the last resource...shorting the pins.

In the meantime, I am getting a brand new WRT54GP2. Just wonder if there is any precaution I should be aware before making another expensive high-tech brick. 8^)

Cheers,

Re: RT31P2 Unlock thoughts??

Sat, 22 Mar 2008 08:50:19 EDT

mazilo :

said by ex_Cust 999 :

On the WRT54G w/ Intel flash, it says short pin 15-16.
But the RT31P2, what pins should I short, since SST-39VF080 has only 20 pins?

I haven't done anything by shorting pins on any flash. So, if you want to take this approach which I really don't recommend unless it is the last resort, make sure you understand the risks you will be taking at your own. My suggestion is to use the tftp command line to flash when your RT31P2 is booting. Perhaps, Linksys has some utilities to do this, too. Another option which I think is the best is to have DogFace05 helped you out. He may even be able to NAize your RT31P2 unit into make it a real RT31P2-NA unit.
--
Mazilo always prays for FREEBIES! :D
US Phone: +1-678-601-0907
UK Phone: +44-703-194-2574

Re: RT31P2 Unlock thoughts??

Sat, 22 Mar 2008 00:08:26 EDT

anon : Mazilo,
I found the info (for WRT54G w/ an Intel Flash) in the link below:
»voidmain.is-a-geek.net/si/?i=wrt···5%20pins

However, the RT31P2 has 2 flashes:
- one for Router (SST-39VF080)
- one for SIP (MX-m042705)

On the WRT54G w/ Intel flash, it says short pin 15-16.
But the RT31P2, what pins should I short, since SST-39VF080 has only 20 pins?

Many thanks for your advice...

Re: RT31P2 Unlock thoughts??

Fri, 21 Mar 2008 23:51:37 EDT

anon : Mazilo,
Many thanks for your advice.
Yes, I found your old post on how to use a "firmware_upload_tool.exe".
I just wonder, if this method can be used in my case, since the RT31P2 is not even boot up to get the IP-add (192.168.15.1).
Will do a search for more info on....how to recover an RT31P2 from a safe mode.
Cheers...

Re: RT31P2 Unlock thoughts??

Fri, 21 Mar 2008 22:54:40 EDT

mazilo :

said by ex_Cust 999 :

Lately, my "hacked" RT31P2 decided to stop working. The "power" led keeps blinking like crazy.

Tried a "reset" button, however, nothing comes back....
Yes, not even a default "IP-add: 192.168.15.1" is coming back.
The "power" led is still blinking...

This sounded like your RT31P2 went into a safe mode. IIRC, you can use a tftp to flash it with a firmware during the booting process. You will need to configure your computer with a static IP Address. Please search this thread on a more complete step-by-step on how to recover an RT31P2 from a safe mode.
--
Mazilo always prays for FREEBIES! :D
US Phone: +1-678-601-0907
UK Phone: +44-703-194-2574

Re: RT31P2 Unlock thoughts??

Fri, 21 Mar 2008 22:43:20 EDT

anon : Lately, my "hacked" RT31P2 decided to stop working. The "power" led keeps blinking like crazy.

Tried a "reset" button, however, nothing comes back....
Yes, not even a default "IP-add: 192.168.15.1" is coming back.
The "power" led is still blinking...

Is it toasted?
Any advice on how to revive it?

Many thanks.

Re: RT31P2 Unlock thoughts??

Wed, 19 Mar 2008 13:09:31 EDT

Dan_voip :

said by Wirelessg :

Is there a way to enable the hidden page?

disconnect the WAN cable (internet connection)
pick up the phone connected to line 1 and dial
****
then 7932#
if asked, the password could be:
78196365
8995523
7756112
50274537
5465866
followed by #

Press 1 to Confirm and then hang up

Re: RT31P2 Unlock thoughts??

Wed, 19 Mar 2008 00:27:21 EDT

anon : I did the factory defaults, but I still get the message:
"Hidden page is disabled!" when I try »192.168.15.1/Voice_adminPage.htm.

When I unlocked my PAP2A NA I remember there was a similar message but had to connect a phone and enter a sequence of numbers to enable that page. Is there a way to enable the hidden page?

Thanks for your help.

Re: RT31P2 Unlock thoughts??

Tue, 18 Mar 2008 10:42:06 EDT

donc :

said by Wirelessg :

I have a RT31P2-NA, the firmware reads: Firmware Version: 1.25.00
I unlocked the device but now when I try to go to the voice page »192.168.15.1/Voice_adminPage.htm ‎and enter the password - I used to unlock it- i get a page that says "Hidden page disabled!"

If you have the password then the you should be able to go to 192.168.15.1, then to the Administration tab and select "Factory Defaults", "Restore Factory Defaults: Yes", and then click on "Save Settings". That should reset everything to factory defaults and give you access to Voice_adminPage. Be aware though that that will also wipe out any other settings you have in it.

Re: RT31P2 Unlock thoughts??

Tue, 18 Mar 2008 00:32:06 EDT

anon : I have a RT31P2-NA, the firmware reads:
Firmware Version: 1.25.00
I unlocked the device but now when I try to go to the voice page »192.168.15.1/Voice_adminPage.htm ‎and enter the password - I used to unlock it- i get a page that says "Hidden page disabled!"
I simply followed a step by step document to unlock it, the document doesn't explain or say anything about this disabled page. Now, I don't know what to do, if anyone can help I would really appreciate any input.
Thanks to all

Re: RT31P2 Unlock thoughts??

Tue, 04 Mar 2008 19:29:07 EDT

donc : Thanks meister_sd!

I have a RT31P2-NA that I bought but had been locked by a previous provider. After spending many hours reading through all 59 pages of this thread I had concluded that it was not possible for me to unlock my NA version (the trick with downgrading to and older firmware only seemed to be available for Vonage units as I could never find any old NA firmware). All I really ever needed was the password to reset the factory defaults and that was it!

By the way, the username I used was admin, if that makes any difference to diver236.

Re: RT31P2 Unlock thoughts??

Mon, 11 Feb 2008 05:59:43 EDT

diver236 : No, that didn't work for login or to reset the factory defaults. Thanks for the reply though.

Re: RT31P2 Unlock thoughts??

Mon, 11 Feb 2008 01:14:52 EDT

meister_sd :

said by diver236 :

Tried the factory reset, however it asks for a username and password.

Try this password when it wants it:

fry3]g1mlets

Re: RT31P2 Unlock thoughts??

Sun, 10 Feb 2008 21:54:14 EDT

diver236 : After reading all of these pages, I'm more confused than when I started. Have a RT31P2-NA from VOIP.COM, seems most of the hard work here is for Vonage, can mine be unlocked?

I've tried to change the firmware, but when I try to load the file, it just sits there doing nothing.

Tried the factory reset, however it asks for a username and password. Also no access to the voice menu.

Re: RT31P2 Unlock thoughts??

Mon, 04 Feb 2008 09:31:05 EDT

mazilo :

said by Russell_ :

... did you seek his help because you found the various instructions in this thread to be inadequate?

DogFace05 completely removes Vonage factory default settings on any RT31P2 device. Basically, his process turns any locked RT31P2 device into an unlocked RT31P2-NA device that can be safely factory reset and the device won't get locked anymore. RIght now, I can factory reset my RT31P2 and it won't get locked nor even get provisioned once completely rebooted.
--
Mazilo
US Phone: +1-678-601-0907
UK Phone: +44-703-194-2574

Re: RT31P2 Unlock thoughts??

Mon, 04 Feb 2008 08:58:10 EDT

Russell_ :

said by mazilo :

I have my RT31P2 connected behind my Buffalo WHR54GS NAT/Firewall WiFi router and it has been working for more than a year since it got NAized by DogFac05.

Thanks for the quick response. I've got my Vonage router gathering dust and thought I'd attempt to play with it. I've been reading through this fascinating thread from screen 1 and am up to the mid 20s ... I do understand DogFace05 is a very helpful guy ... did you seek his help because you found the various instructions in this thread to be inadequate? I'm at the point where I've downgraded my RT31P2 to 1.17.02 (with voice 2.09) and thought I'd ask the STUN question before I attempt to go through the set of instructions of making the device talk to TFTP server, etc.
--
Russell

Re: RT31P2 Unlock thoughts??

Mon, 04 Feb 2008 08:32:10 EDT

mazilo :

said by Russell_ :

Does the RT31P2 do STUN or traverse NAT in some fashion.

Yes and an RT31P2 has a support for STUN options as Outbound Proxy. BTW, both RT31P2 and PAP2v1 have similar VM webGUI.

The reason I ask is wondering whether the ATA portion will work if put BEHIND another router. In other words if I have Cable-Modem -> Wirelss NAT router -> RT31P2, will the ATA portion of the RT31P2 function behind the Wireless NAT router.

Definitely, this will work provided you have your RT31P2 configured correctly. I have my RT31P2 connected behind my Buffalo WHR54GS NAT/Firewall WiFi router and it has been working for more than a year since it got NAized by DogFac05.
--
Mazilo
US Phone: +1-678-601-0907
UK Phone: +44-703-194-2574

Re: RT31P2 Unlock thoughts??

Mon, 04 Feb 2008 07:43:17 EDT

Russell_ : Does the RT31P2 do STUN or traverse NAT in some fashion. The reason I ask is wondering whether the ATA portion will work if put BEHIND another router. In other words if I have Cable-Modem -> Wirelss NAT router -> RT31P2, will the ATA portion of the RT31P2 function behind the Wireless NAT router. Can someone who has an unlocked router confirm that the there are fields for NAT traversal (say a STUN server setting)? I particularly need the above configuration - putting the Wireless router behind the RT31P2 is not an option.
--
Russell

Re: RT31P2 Unlock thoughts??

Thu, 27 Dec 2007 18:55:35 EDT

Velund : Hm. For me it's look like search for someone risky enough to try... :D

BTW: My SpeedStream Wi-Fi router is reflashed with SMC Barricade 7004AWBR firmware (one of hw versions, there was few releases that was made on different platforms but under same model name). Hardware appears almost exactly the same, everything works fine. SMC continued to make updates for a long time after Siemens (Speedstream) ceased support of their product.

So, it is not so unlikely that both Asus and D-Link units is based on the same reference design and may be even firmware-compatible.

Re: RT31P2 Unlock thoughts??

Wed, 26 Dec 2007 08:12:33 EDT

mazilo :

said by Vel :

»www.bitsum.com/openwiking/owbase···?WL-530G

Looks like someone has been working on this code porting to a DLink DI-524 router. :D

Re: RT31P2 Unlock thoughts??

Thu, 20 Dec 2007 17:51:08 EDT

intensefacto : Maybe someone here can help me. I have a vonage adapter that is currently registered with Vonage. When I put the adapter on the internet and it registers. So, I still tried to unlock it, but everytime I try to unlock it, PumpKIN doesnt grab the XML file. And I noticed that the 2 phone lights work blink about every 45 sec. or so after the unlocking process starts. I unlocked many RT31P2s that do not register to vonage when I put the adapter on the internet for the provisioning part of the unlocking process. But everytime I try to unlock one that is registered I keep getting the same issue as stated above. Is there anyway to unlock a RT31P2 that is still registered to vonage?

Re: RT31P2 Unlock thoughts??

Tue, 18 Dec 2007 01:42:01 EDT

DogFace05 : Educyberk, register yourself with a free user account here at DSLR and contact me by PM.

Re: RT31P2 Unlock thoughts??

Sun, 16 Dec 2007 17:44:03 EDT

anon : I want to unlock my RT31P2, locked from Vonage. Dogface05, can you do this for me? How much? What information I must pass to you?

Thanks.

Re: RT31P2 Unlock thoughts??

Fri, 14 Dec 2007 00:47:25 EDT

DogFace05 : First you have to get the PAP2 (voice) firmware on the RT31P2, which is done by creating a hybrid firmware image containing the PAP2 firmware modded to look like an RT31P2 voice module image (a modified version of the SPAtools will do it). Once loaded, the router side will no longer have contact with the voice module, and may spontaneously reboot at regular intervals.

Next, you have to put the router side in failsafe. For this, you either have to come up with your own code to install in lieu of the normal router firmware, the sole purpose of which is to erase or corrupt the main firmware, leaving only the boot code intact (which is what I've done).

Or you can follow Dan_voip's attempts to turn his unit into an RT31P2-NA, whose steps lead to the device ending up in the failsafe state, when eventually reloaded with an unhacked true -NA firmware image. I don't remember the title of his thread, nor did I have anything to do with his experiments.

However, I DO NOT recommend carrying out any of these stunts, and I don't have the time or energy to spend bailing out those who end up screwing up their adapters as a result.

Re: RT31P2 Unlock thoughts??

Thu, 13 Dec 2007 21:48:11 EDT

anon : Dogface, please, if you can

Re: RT31P2 Unlock thoughts??

Wed, 12 Dec 2007 12:08:46 EDT

quemazon :

said by DogFace05 :

I can definitely confirm that the PAP2 firmware works. However, to use it, it is necessary to disable the router side (IOW, put it in failsafe). You then end up with the equivalent of a PAP2v1 combined with a 5 port switch (4 free, and one used up by the PAP2). However, don't try doing this unless you know what you're doing. To load the PAP2v1 firmware onto the RT31P2, and then disable the router code, isn't a trivial task; nor is it to restore it back to normal firmware once done.

So, are there any more in-depth instructions out there? This sounds REALLY interesting. Also since the PAP2 firmware will work, how about the modified SPA-1001 firmware as well? Being able to use 2 voip accounts on one line would be great!

Can all of this be done from the web interface, or from telnet, or do you have to use JTAG or something? Thanks for the input.

Re: RT31P2 Unlock thoughts??

Wed, 12 Dec 2007 10:32:07 EDT

mazilo :

said by andrzejw :

..., simply reset voice room or clear and everything will be ok i do it and write about this work sorry but my english is not very well

If you know of any new way on how to reset the VM of an RT31P2 other than already discussed here, please let us know.

Re: RT31P2 Unlock thoughts??

Wed, 12 Dec 2007 03:25:22 EDT

andrzejw : hm , i have any idea, if i used never tftp ver 1.255 from linksys i get back this: voice module is locked and i thinking this way, simply reset voice room or clear and everything will be ok i do it and write about this work sorry but my english is not very well

Re: RT31P2 Unlock thoughts??

Tue, 04 Dec 2007 08:02:48 EDT

mazilo :

said by Vel :

I meant WRT54GP2...

I thought we were talking about an RT31P2 and that's the device you are waiting for, right?

What I understand from this and other similar threads, is that RT31P2 is based on same PCB design, but with Wi-Fi RF portion left unpopulated. Correct me if I'm wrong.

I don't have a WRT54GP2 device, so I wouldn't know this,unfortunately.

Anyway, this start to become offtopic here... As I understand, this thread is mainly for "gimme working solution" talks... 8-)

When you are ready, it will be better if you try to post/start on a new thread.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Tue, 04 Dec 2007 02:45:26 EDT

meister_sd :

said by G0dfather :

meister_sd,

I heard you saying in another thread that the username is not user anymore.

Actually, I said the "user" account isn't active anymore.

It isn't in the new config files, just the "Admin" is. I haven't tried to see if a device that has a known "user" account gets deactivated when a new config file without that user explicitly stated in the new file or if the password is still usable.

Re: RT31P2 Unlock thoughts??

Mon, 03 Dec 2007 00:34:45 EDT

G0dfather : meister_sd,

I heard you saying in another thread that the username is not user anymore.

I tried all combinations of usernames and passwords I could find and I cannot DOWNGRADE my WRT54GP2 firmware.

Those are the ones I tried

Usernames:
user
admin
vonage
Vonage

Passwords:
vonage
Vonage
8995523
7756112

Is there other password I should be able to try ?

Re: RT31P2 Unlock thoughts??

Sun, 02 Dec 2007 21:35:29 EDT

anon :

said by mazilo :

said by Vel :

There is a lot of possibilities that may make RT31P2 and its Wi-Fi enabled "brother" much more powerful....

Who is the Wi-Fi enabled brother of RT31P2?

I meant WRT54GP2... What I understand from this and other similar threads, is that RT31P2 is based on same PCB design, but with Wi-Fi RF portion left unpopulated. Correct me if I'm wrong.

So, let's see it all when I got my "guinea pig"... ;)

Let's know how your make out on your idea with your guinea pig. :D

I'm not sure I will proceed too far. ;) If documentation availability for Marvell will be at same level as for latest Qualcomm SoC's, it all will end just before it begin. ;) But if there will be at least developer guide or something alike available, I'll don't mind to sacrifice my "guinea pig" ;-) by removing Marvell from its place just to check if larger flash may be installed on a existing PCB (either by replacement or piggybacking of another chip on top of existing one with CS lead bent out and wired to some pullup resistor). I have all necessary equipment for BGA rework handy, but I doubt I will be able to put Marvell back - I don't have correct template to reball it, and such custom template will cost far more than another pair of locked routers from eBay if ordered from our usual source. ;-)

It may be much simpler to forget about it and move to MIPS-based units with Linux already ported, but currently I'm fully equipped to work with ARM targets (JTAG, trace, etc) and have just ugly McGregor Daemon (clone ;-) )that (in theory) works with MIPS, sloooooowly....

Anyway, this start to become offtopic here... As I understand, this thread is mainly for "gimme working solution" talks... 8-)

Re: RT31P2 Unlock thoughts??

Sun, 02 Dec 2007 10:20:34 EDT

mazilo :

said by danramos :

Seems like the previous owner have line 1 to receive calls and line 2 to make calls, but how can I disable that?

You may want to consider to perform a long factory reset and re-unlock your device. Then, flash it with a different firmware.

OTOH, you may also want to consider to contact DogFace05 and ask him to NAize your RT31P2 that will be safe from a long factory reset.

Re: RT31P2 Unlock thoughts??

Sun, 02 Dec 2007 10:17:26 EDT

mazilo :

said by Vel :

There is a lot of possibilities that may make RT31P2 and its Wi-Fi enabled "brother" much more powerful....

Who is the Wi-Fi enabled brother of RT31P2?

So, let's see it all when I got my "guinea pig"... ;)

Let's know how your make out on your idea with your guinea pig. :D

Re: RT31P2 Unlock thoughts??

Sun, 02 Dec 2007 02:55:43 EDT

danramos : I haven't tried the vonage settings to unlock the voip.com locked routers yet. I will let you know. Right now I've been dealing with a regular rt31p2 that was locked to Vonage. I could unlock it but I am having problems with making calls on line 1. I have dial tone and can receive calls. But when I try to call it makes the sound of the numbers I am dialing (DMTF tones) but the dial tone is still there. Now if I setup line 2 with exactly the same configuration, I am able to make calls but can't receive any even though the line status says that it is registered. Seems like the previous owner have line 1 to receive calls and line 2 to make calls, but how can I disable that? Thank you guys.

Re: RT31P2 Unlock thoughts??

Sat, 01 Dec 2007 22:25:51 EDT

anon :

said by DogFace05 :

I can definitely confirm that the PAP2 firmware works.

It becomes more and more interesting...

The main problem here is the RT31P2's limited flash memory. You will have to come up with a way to squeze Linux with its file system and all the necessary networking applications (router, firewall, etc) into a mere 2MB of flash.

By the way, how much RAM is there?

I didn't see detailed Marvel docs (like developer guide) on the net. Let's see if it can be obtained somewhere else. There is a lot of possibilities that may make RT31P2 and its Wi-Fi enabled "brother" much more powerful.... If necessary signals is routed out of BGA chip to a place where it can be tapped... ;)

According to my experience with industrial equipment, many developers provide some means to install bigger EPROM or flash, if it exist in suitable case. Just to be sure that they will not be forced to re-route and re-order prototype PCBs when software developer team fill existing chip completely. ;) Things may be different with mass produced consumer equipment, but, from other side, few extra tracks on PCB and pads for a jumper usually cost near to nothing.

So, let's see it all when I got my "guinea pig"... ;)

Re: RT31P2 Unlock thoughts??

Sat, 01 Dec 2007 19:43:58 EDT

DogFace05 :

said by Vel :

If this will be confirmed, and original PAP2 f/w will really work... It will be great news.

I can definitely confirm that the PAP2 firmware works. However, to use it, it is necessary to disable the router side (IOW, put it in failsafe). You then end up with the equivalent of a PAP2v1 combined with a 5 port switch (4 free, and one used up by the PAP2). However, don't try doing this unless you know what you're doing. To load the PAP2v1 firmware onto the RT31P2, and then disable the router code, isn't a trivial task; nor is it to restore it back to normal firmware once done.

Ports of Linux to Marvell Libertas already exist. Look here for example...

»www.bitsum.com/openwiking/owbase···?WL-530G

The main problem here is the RT31P2's limited flash memory. You will have to come up with a way to squeeze Linux with its file system and all the necessary networking applications (router, firewall, etc) into a mere 2MB of flash.

Re: RT31P2 Unlock thoughts??

Sat, 01 Dec 2007 18:40:57 EDT

anon :

said by mazilo :

I believe this had been discussed here to conclude the VM is identical to a PAP2v1.

If this will be confirmed, and original PAP2 f/w will really work... It will be great news.

I may be wrong here. However, this is very unlikely until someone has ported the open-source firmware, based on Linux codes, to the chipset used on an RT31P2.

Ports of Linux to Marvell Libertas already exist. Look here for example...

»www.bitsum.com/openwiking/owbase···?WL-530G

If I get the Firmware I will put it on my webserver!!!

Sat, 01 Dec 2007 17:56:48 EDT

anon : Hello, I also need the firmware, can someone please send the wrt54gp2_v1.27.02_209_combin_code.bin to me?!

It seems funny that no one is hosting this on a website, so...

if someone sends it to me (forum@akesons.com) i will post it for as long as I can on my webserver.

(I will post the url once I get the firmware.)

Re: RT31P2 Unlock thoughts??

Sat, 01 Dec 2007 17:37:11 EDT

anon : REQUEST: wrt54gp2_v1.27.02_209_combin_code.zip

to: war_godfather (at) hotmail.com

PLEASE PLEASE PLEASE !!!

Re: RT31P2 Unlock thoughts??

Sat, 01 Dec 2007 15:21:05 EDT

mazilo :

said by Vel :

Is there any chances that voice part of these unit is the same design as older PAP2, ...

I believe this had been discussed here to conclude the VM is identical to a PAP2v1.

..., there is a chances that some Linux distribution (OpenWRT?) can be run on router part, ...

I may be wrong here. However, this is very unlikely until someone has ported the open-source firmware, based on Linux codes, to the chipset used on an RT31P2. If you really want to work on an ATA (WiFi) router with an open-source firmware, then try the Linksys WRTP54G/RTP300, Linksys PAP2v2, DLink VTA-VR, and/or devices based on a TI AR7 chipset.

Re: RT31P2 Unlock thoughts??

Sat, 01 Dec 2007 12:19:26 EDT

anon : Just finished to read this thread. Great work done, of course...

But there is a few (stupid?) questions to people who know RT31P2 and WRT54GP2 well... (My RT31P2, purchased on eBay, is somewhere in the mail).

Is there any chances that voice part of these unit is the same design as older PAP2, just routed to PCB together with router, and can run the same Linksys or Sipura firmware?

It is not too unlikely, designs is reused quite often to save development cost, both on hardware and firmware, so...

If it is possible to make voice part of this unit operate independently, there is a chances that some Linux distribution (OpenWRT?) can be run on router part, and it will become a great platform for various projects...

Re: RT31P2 Unlock thoughts??

Wed, 28 Nov 2007 16:00:20 EDT

Dan_voip : Do something similar with Vonage settings, add both addresses, doesn't mater the order. I can't make some tests now, my SimpleDNS expired, I have to clean up my registry first.

Re: RT31P2 Unlock thoughts??

Wed, 28 Nov 2007 15:29:45 EDT

danramos : I took a look at the wireshark logs and I saw probably two lines that may be the important ones. There is a Standard A Query to sd.voip.freester.com and another Standard A Query to provis.voip.com . However I am not sure how to set the DNS for these queries. I did it to unlock a vonage device but I don't know how to set it up for this case. I know I have to create a record but what should be the domain name that I have to set up first? For vonage I first used ls.tftp.vonage.net and then the actual IP of my PC. Could you please help? Thank you.

Re: RT31P2 Unlock thoughts??

Wed, 28 Nov 2007 14:40:14 EDT

Dan_voip : If web update doesn't work you have to take a look in the wireshark logs, setup a DNS, HTTP and FTP server and feed the router with an old firmware and a plain text xml file

Re: RT31P2 Unlock thoughts??

Wed, 28 Nov 2007 14:30:26 EDT

danramos : Both routers are -NA (written on the router). However, the voip.com set up locks the voice section not allowing to access it even with a reset (reset button in the back for more than 5 sec). That's why I have been unable to upgrade with a -NA firmware as I have done with other -NA routers that were not used with voip.com.

Thanks for the suggestion.

Re: RT31P2 Unlock thoughts??

Wed, 28 Nov 2007 14:12:51 EDT

Dan_voip :

said by danramos :

I have two RT31P2-NA locked for voip.com. I tried factory resets but they are password protected.

Suppose to be easy to unlock if really are NA(written on the router) and if my assumption is correct. I assume that after you make a reset (with the reset button for more then 5 sec) you can 'upgrade' your router with a different firmware version and I'm thinking at an older one who allow you to feed the adapter with a plain text xml file.
Do a test first, download a RT31P2-NA firmware from Linksys, disconnect the router from internet go to »192.168.15.1/Upgrade.htm and load the firmware using for username and password admin.
If that will work 'upgrade' the router with RT31P2_NA_v1.17.02_000_VM_2.0.09_LIa_combin_code.bin or an older one who will allow you to load a plain text xml file.

Re: RT31P2 Unlock thoughts??

Wed, 28 Nov 2007 07:31:31 EDT

mazilo : Unless you want to get your hands dirty from hacking your RT31P2-NA, your best option and the easiest one is to contact DogFace05 asking him to NAize your RT31P2.

Re: RT31P2 Unlock thoughts??

Tue, 27 Nov 2007 23:33:27 EDT

danramos : I have two RT31P2-NA locked for voip.com. I tried factory resets but they are password protected. Even if I hold the reset button at the back of the router for a factory reset, it wont reset the voice section of the router so I am still not able to access it. Using wireshark I saw that it made some requests to sd.voip.freester.com and provis.voip.com but I don't know what else to do. Should I set simple DNS and a TFTP server? I appreciate any suggestion. Thanks

Re: RT31P2 Unlock thoughts??

Thu, 08 Nov 2007 16:54:37 EDT

akoei : No. Since I can't access _b, I don't know if my device is fully un-locked, I mean I want to know more hidden features.

Re: RT31P2 Unlock thoughts??

Thu, 08 Nov 2007 16:50:55 EDT

mazilo :

said by akoei :

Who can explain what's the different between
Voice_adminPage.htm and
Voice_adminPage_b.htm?

On my RT31P2-NA(ized) unit, both pages show the same information. Is there any other reason why you need to access the Voice_adminPage_b.htm?

Re: RT31P2 Unlock thoughts??

Thu, 08 Nov 2007 15:46:15 EDT

akoei : Who can explain what's the different between
Voice_adminPage.htm and
Voice_adminPage_b.htm?

I bought a un-locked RT31P2, the seller told me the password is admin/admin. After I changed from regular menu, I can't access VM; Then I change it back, access Voice_adminPage.htm page, change password there. Now I can access Voice_adminPage.htm, setup everything, and my two account are working fine, but I can NOT access Voice_adminPage_b.htm. Someone know what Voice_adminPage_b.htm does?

Re: RT31P2 Unlock thoughts??

Wed, 07 Nov 2007 23:18:49 EDT

DogFace05 : There are only two uses for the reset button on the RT31P2/WRT54GP2:

1) a quick (less than 5 second) push that is only meant for rebooting the device and nothing else (no, it's not meant for nor has any unintended side effects of clearing passwords or any other settings at all);

2) a push of just under 5 seconds in duration that factory resets the router and, under certain conditions, also the voice module.

Despite the wishful thinking of many posters here, there's NO SUCH THING as a "long" 30-40 second reset on the RT31P2/WRT54GP2--AT ALL, PERIOD. Holding the reset button depressed for any extended length of time DOES NOT UNDER ANY CIRCUMSTANCES accomplish anything beyond what the 5 second reset does.

Re: RT31P2 Unlock thoughts??

Wed, 07 Nov 2007 18:10:21 EDT

meister_sd : A quick push of the reset button shouldn't relock it. That is meant to clear the admin password. The longer button push is meant to reset it. I've tested the long 40 second button push and that did NOT clear the passwords or settings in the voice section, but YMMV.

Re: RT31P2 Unlock thoughts??

Wed, 07 Nov 2007 16:36:02 EDT

anon : I'm a noob here but managed to unlock my rt31p2 and use it with voipbusterpro and voipdiscount. Just wondering about it will re-lock itself after factory reset, is that include the reset button at the back I meant the 5 second reset not the long ones. thanks

Re: RT31P2 Unlock thoughts??

Tue, 06 Nov 2007 11:27:21 EDT

neko :

said by Dan_voip :

If the router doesn't give you an IP address you have to setup your computer with a static IP address like:
IP address 192.168.15.10 Subnet Mask 255.255.255.0 Default Gateway 192.168.15.1 and try to access »192.168.15.1

I got access to the device after that, but it asks for a password. admin/admin doesn't work:(

I have also reset the device by holding the pin at the back for 30 seconds.

Any ideas what else I could try?

Thanks

Re: RT31P2 Unlock thoughts??

Mon, 29 Oct 2007 23:20:46 EDT

oferp : Maybe I was misunderstood,

I thought bigbear111 PDF unlocking tutorial would work as well on my RT31P2 as it did on my WRT54GP2.

everything went well until I needed Pumpkin TFTP to show me where to put the xml file.

I didn't get any request for the file from RT31p2 router for the xml so I wonder if that tutorial is good for that router too.

I didn't change any thing on my system.
Did the same thing.

Help

Re: RT31P2 Unlock thoughts??

Mon, 29 Oct 2007 21:08:13 EDT

Dan_voip :

said by oferp :

Try to do the same thing with my RT31P2 using bigbear111 helpful tutorial but I couldn't get the request for the xml file on Pumpkin.
Help guys
Thanks

I don't know about bigbear111's tutorial, I was using this one:
»www.bargainshare.com/index.php?s···743&st=0
Give as more details where do you have problems and about rt31p2, firmware version, provider.

Re: RT31P2 Unlock thoughts??

Mon, 29 Oct 2007 21:00:36 EDT

mazilo :

said by oferp :

I had a success with my wrt54g.

Are you sure about this? AFAIK, there isn't any locking mechanism built-in within any wrt54g firmware. If you had to unlock your wrt54g device, then you might be doing something else unless you have a non-standard wrt54g goes under different brand other than Linksys.

Re: RT31P2 Unlock thoughts??

Mon, 29 Oct 2007 17:04:53 EDT

oferp : I had a success with my wrt54g.

Try to do the same thing with my RT31P2 using bigbear111 helpful tutorial but I couldn't get the request for the xml file on Pumpkin.

I thought it would work like on the wrt54g but it didn't

Help guys

Thanks

Re: WRT54GP2's Unlocking Instructions

Sat, 27 Oct 2007 14:22:02 EDT

meister_sd :

said by oferp :

Any knows where to get the:

wrt54gp2_v1.27.02_209_combin_code.zip

Thanks

Read the page before - anyone who wants the firmware needs to PM me with their email address and I'll send it to them.

Re: WRT54GP2's Unlocking Instructions

Sat, 27 Oct 2007 12:00:02 EDT

oferp : Any knows where to get the:

wrt54gp2_v1.27.02_209_combin_code.zip

The link posted on the PDF file is dead.

Thanks

Re: RT31P2 Unlock thoughts??

Thu, 25 Oct 2007 17:00:08 EDT

Dan_voip :

said by neko :

I don't get assigned an IP & I can't use it as a router, perhaps my unit is faulty.

If the router doesn't give you an IP address you have to setup your computer with a static IP address like:
IP address 192.168.15.10 Subnet Mask 255.255.255.0 Default Gateway 192.168.15.1 and try to access »192.168.15.1 after that.
Another thing you can try is to load a firmware using »ftp://ftp.linksys.com/pub/network/tftp.exe
Last resort is to flash the chip

Re: RT31P2 Unlock thoughts??

Thu, 25 Oct 2007 16:38:36 EDT

neko : Hi mazilo, thanks for the reply.

I tried a long reset but it didn't work. I don't get assigned an IP & I can't use it as a router, perhaps my unit is faulty.

Re: RT31P2 Unlock thoughts??

Wed, 24 Oct 2007 21:56:32 EDT

mazilo :

said by neko :

it's an RT31P2-VD. I can't use it as a router, it doesn't give me an IP address.

An RT31P2-VD is a Vonage VoIP router whose VM is locked to Vonage. However, its router part is not locked and can be accessed through a web browser. Perhaps, you will first need to perform a long factory reset by pressing the reset button on the back of the device for more than 30 seconds.

Re: RT31P2 Unlock thoughts??

Wed, 24 Oct 2007 21:53:53 EDT

mazilo :

said by booBot :

Is it somehow possible to use the Voice part from the WRT54GP2 v3.1.24 to "update" the RT31P2?

Are you talking about a WRTP54G or a WRT54GP2? if you are talking about a WRT54GP2, then the v3.1.24 firmware you mentioned isn't correct and it is the latest firmware for a WRTP54G.

Re: RT31P2 Unlock thoughts??

Wed, 24 Oct 2007 21:48:56 EDT

neko :

said by Dan_voip :

What kind of rt31p2 do you have, it's a -VD?
What do you know about this router, is working as router, can you access the internet?

I just found the box for it; it's an RT31P2-VD. I can't use it as a router, it doesn't give me an IP address. Does this mean I am SOL?

Re: RT31P2 Unlock thoughts??

Wed, 24 Oct 2007 13:40:33 EDT

Dan_voip :

said by booBot :

Is it somehow possible to use the Voice part from the WRT54GP2 v3.1.24 to "update" the RT31P2?

Must be a confusion, v3.1.24 is for WRTP54G and I think has a different hardware for VM. The last FW for WRT54GP2 is v1.30.06_000_VM_3.1.09 and the last FW for RT31P2 is v1.30.07_000_VM_3.1.09, both have the same VM version.

Re: RT31P2 Unlock thoughts??

Wed, 24 Oct 2007 12:10:18 EDT

Dan_voip :

said by neko :

I can't get access to my RT31P2 to even attempt to unlock it. I connected my PC to the LAN 1 port (also tried 2 & 3) of the RT31P2 & the light comes on, but I can't access the internal web page, »192.168.15.1

Anyone any idea why I can't access it?

Maybe the router lan address was changed
- Make sure your lan card settings are to 'Obtain an IP address automatically' and 'Obtain DNS server address automatically'
- Go to Start->Run, type cmd, click ok; in msdos window type ipconfig and check what do you see; let's say you see 192.168.50.100, then you have to browse 192.168.50.1 (keep the first 3 groups and change the last one with 1)

As a last resort I'll think to push the reset button for 30 seconds
What kind of rt31p2 do you have, it's a -VD?
What do you know about this router, is working as router, can you access the internet?

Re: RT31P2 Unlock thoughts??

Wed, 24 Oct 2007 09:50:31 EDT

neko : I can't get access to my RT31P2 to even attempt to unlock it. I connected my PC to the LAN 1 port (also tried 2 & 3) of the RT31P2 & the light comes on, but I can't access the internal web page, »192.168.15.1

Anyone any idea why I can't access it?

Re: RT31P2 Unlock thoughts??

Tue, 23 Oct 2007 17:36:16 EDT

meister_sd :

said by booBot :

Is it somehow possible to use the Voice part from the WRT54GP2 v3.1.24 to "update" the RT31P2?

Yes. Download the RT31P2 update and the WRT54GP2 update. Open them with a hex editor and separate the router portion from the voice portion. Each portion is checksum'ed, but not the firmware as a whole. Combine the router for the RT with the voice from the GP2 and save the file in the same naming format - or it won't load. Then, load it up!

If you are worried about bricking your device, I can try it on mine since I have a socket on it and can just reflash the chip if needed.

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Tue, 23 Oct 2007 17:23:07 EDT

funkydcat : Derick, if you have time could you please send 'wrt54gp2_v1.27.02_209_combin_code.zip' to funkydcat@gmail.com. I would be very grateful. Thanks a Bunch.

Re: RT31P2 Unlock thoughts??

Fri, 19 Oct 2007 05:57:48 EDT

booBot : Is it somehow possible to use the Voice part from the WRT54GP2 v3.1.24 to "update" the RT31P2?
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.07/v3.1.09LId)

wrt54gp2_v1.27.02_209_combin_code.zip file wanted - Pretty Pleas

Sat, 13 Oct 2007 16:50:20 EDT

anon : Hi all,

Like most of us, I'm looking for these files:

wrt54gp2_v1.27.02_209_combin_code.zip
wrt54gp2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin

Could someone be so kind and send them to me please.

baabaa33@hotmail.com

Thanks a lot!

Re: RT31P2 Unlock thoughts??

Fri, 12 Oct 2007 20:16:55 EDT

anon : Yeah I'm also looking for wrt54gp2_v1.27.02_209_combin_code.zip
can somebody send me a copy to marski501@gmail.com

Thanks in advance

Re: RT31P2 Unlock thoughts??

Tue, 09 Oct 2007 00:08:46 EDT

meister_sd :

said by ogdensburg :

Any idea how to unlock it? Thanks.

Same as above. If customer service won't FR it for you, you can try the reset button. If that doesn't work, you can send it to me.

Re: RT31P2 Unlock thoughts??

Mon, 08 Oct 2007 22:14:22 EDT

ogdensburg : I have a RT31P2-NA which is locked to vontastic.com . The model number is RT31P2-NA on the back. I can't do factory reset on this router because it ask for password when I do factory default from web interface.

Any idea how to unlock it? Thanks.

Re: RT31P2 Unlock thoughts??

Mon, 08 Oct 2007 20:54:41 EDT

meister_sd : Since I don't know who has been given the firmware yet, PM me with your email address and I'll send you RT31P2_v1.17.02_000_combin_code.bin.

Also, tell me if it is for the RT31P2 or WRT54GP2.

Re: RT31P2 Unlock thoughts??

Mon, 08 Oct 2007 20:51:58 EDT

meister_sd :

said by srainsdon :

hello all i have been working on this for about 9 months and have found no solution that works for me i have a RT31P2-NA locked to VOIP.com

It is password protected from voip.com. If you do a factory reset it will be unprotected. If you can't do a FR, then you can mail it to me and I can wipe it for you.

First try holding the reset button, then plug it in and while continuing to hold the button in, wait about 45 seconds and then take your hand off the reset button. If that doesn't work, let me know if you want to send it to me.

Re: RT31P2 Unlock thoughts??

Mon, 08 Oct 2007 19:59:09 EDT

mazilo :

said by srainsdon :

CodePattern:P2NA:9060

This identifies the device is an RT31P2-NA. If it is locked, chances are the factory default settings are not locked to specific VoSP. If that is the case, then a factory reset can clear the locking mechanism done through the provision. Otherwise, you will need to contact DogFace05 and ask him to NAize your RT31P2-NA to get it unlocked.

Re: RT31P2 Unlock thoughts??

Mon, 08 Oct 2007 18:41:44 EDT

srainsdon : hello all i have been working on this for about 9 months and have found no solution that works for me i have a RT31P2-NA locked to VOIP.com have tried to up load the FW provided. it tells me Upgrade action is not completed!! Upgrade file pattern error. sysinfo:
Vendor:Linksys
Model Name:RT31P2
Firmware Version:1.30.05, Feb 7 2006
#:000
Voice Version:3.1.9(LId)
Boot Version:
CodePattern:P2NA

RF Status:Disable
RF Firmware Version:C_2.29.11PsV

-----Dynamic Information
Device Mac Address:00-14-BF-04-1A-1F
WAN Mac Address:00-14-BF-04-1A-20
Hardware Version:
Device Serial No.:
VM profile rule:

i hope some one here can help me thanks -- srainsdon

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Tue, 18 Sep 2007 18:53:17 EDT

call_world : please send it to getme23@usa.com

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Tue, 18 Sep 2007 18:07:45 EDT

anon : Can someone please send me the wrt54gp2_v1.27.02_209_combin_code.zip file to

bigbadjohn@telus.net

TIA!

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Sun, 16 Sep 2007 05:06:04 EDT

Justin Case : I too would like this FW. Would someone be so kind to email it to imawag at gmail.com

Thanks

Re: RT31P2 Unlock thoughts??

Sun, 09 Sep 2007 10:19:01 EDT

eleven5 : Could anyone explain the detailson how to remove the DNS servers setting in WRT54GP2?

Since the orignal setting is 0.0.0.0, but I always get the message saying "input ip is illegal!" when I reset them.

Please help me out!

Thanks a lot.

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Mon, 27 Aug 2007 23:40:41 EDT

hxdf8888 : i am looking for the firmware too. please send me a copy of
wrt54gp2_v1.27.02_209_combin_code.zip. guangliu10@hotmail.com

thanks

grant

Re: RT31P2 W/ FWD

Thu, 23 Aug 2007 13:30:27 EDT

quemazon : Hey, thanks a lot for your input. My router is a linksys running DD-WRT. When you talk about NAT forwarding, do you mean Port forwarding? If so, I don't have to forward any ports for my PAP2 to work--maybe the RT31P2 is different. Do you forward anything besides 5060 (or whatever sip port you're using)? I thought that's what STUN was for. Do you have to forward anything for RTP?

I'll look into doing debuggig. I've never tried this before. Any recommended syslog servers for XP? Thanks again.

Re: RT31P2 W/ FWD

Thu, 23 Aug 2007 00:43:51 EDT

havarian : it's working find for me,
if you are connecting through another router, make sure the NAT forwarding is set correctly and make sure that "NAT Support Parameters" is set correctly.

you might need to enable full SIP debuging, and point to a syslog server, then compare the sip message with the pap2

Re: RT31P2 Unlock thoughts??

Tue, 21 Aug 2007 17:12:59 EDT

phraze2amaze : ok , I read i think all 55 pages.

I am still wondering how to unlock this router. Alot of mixed results.

I obtained this router unable to login, the previous user had vonage, though its not stamped with vonage across it. So the model # reads exactly RT31P2 so no NA or EUR or any of that crap. When I click on the voice tab it does say " Please contact your service provider for further information. "

Firmware version does state:

Firmware Version: 1.30.00, Aug 18 2005

Voice version tab by firmware :

Voice Version: 3.1.6(LI)
Customization: Customized .

When I got the router I didn't know the password so, I did a reset, was able to login and get the specs. I do assume its locked by vonage being limited to seeing a blank voice tab with useless text, as stated above. I would like any help or assistance to getting this thing unlocked. I would like to use voipbuster or something else. Vuck fonage like the one app says. So any help or UPDATED Guides would be greatful. I did go to bargain share and was again lost with all the previous firmwares and people brickin their crap :( .

RT31P2 W/ FWD

Mon, 20 Aug 2007 16:59:58 EDT

anon : I have unlocked and installed about 10 RT31P2's for friends and family to use with Free World Dialup. Never a hitch with unlocking, but getting the RT31P2 to register without an outbound proxy is next to impossible. I've had it working a few times, but I don't know what the key is. Can anyone help me out?

Here are a few more details:
-Using a FWD outbound proxy almost always works right away.
-My PAP2 works fine on my home network without OB proxy, but my RT31P2 with essentially the same settings doesn't.
-I have tried it on many different routers on many different networks, and it rarely works. I almost always have to fall back on the OB proxy.
-I have used a few other services, like teliax, on the RT31P2 without OB proxy and it works fine. It seems to be something in the combination of the RT31P2 and FWD.
-I have configured the STUN server correctly (using a few different servers), and it still doesn't work.
-I have tried to fiddle many setting (there are a lot of them!) and nothing seems to work!

Does anyone out there have FWD working on the RT31P2 without the OB proxy? Is there a key to getting this to work? Thanks for your help.

Re: RT31P2 Unlock thoughts??

Mon, 20 Aug 2007 16:42:48 EDT

anon : Hi guys,

Would you please upload the missing files to somewhere again, like wrt54gp2_v1.27.02_209_combin_code.zip?

Or please send to me at newbee2000 {at} gmail {dot} com.

Thanks in advance.

Re: RT31P2 Unlock thoughts??

Sat, 18 Aug 2007 15:44:01 EDT

markosjal : I have a RT31P2 with firmware 3.1.6(LI) / 3.1.6(LI) (V*nage) and it seems very problematic as at times the router does not get the IP address from my ISP. Also there are a lot of other weird problems that I have never seen on any Sipura or Linksys

I need to know if there is other, leess problematic firmare I can load into this.

Also is anyone using the factory reset at:
»www.ilovepap2.com/PAP2/PAP2-factoryreset.xml ?????

Need something be disabled to use this?

Re: RT31P2 Unlock thoughts??

Sat, 18 Aug 2007 12:11:24 EDT

sddsl : What page is the summary on how to unlock the rotuer? Theres 55 pages and i'm having trouble figuring out what to do.

also, can u send me the firmware too? Send to

fiuedu a t yahoo d o t com

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Sat, 18 Aug 2007 01:54:21 EDT

Derickchow : sent.

Re: RT31P2 Unlock thoughts??

Sat, 18 Aug 2007 01:49:51 EDT

Derickchow : Thanks for help. hold the reset button does not work. learning to how to use wireshark to monitor it. Can you please give me more detail for how?

Re: RT31P2 Unlock thoughts??

Sat, 18 Aug 2007 01:44:20 EDT

Derickchow : Thanks for ad., too late for me :S
Maybe hope another people.

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Fri, 17 Aug 2007 11:37:51 EDT

anon :

said by kakaroto :

Hi,
Thanks to meister_md for sending me the FW by email. I also forwarded it to the last few people who posted here. So if anyone reads this, no need to resend.
Thx

KaKaRoTo

Can you please send me the firmware as well? My email is mypatpat at gmail.com

thanks!

Re: RT31P2 Unlock thoughts??

Fri, 17 Aug 2007 02:03:08 EDT

meister_sd : You have to do a factory reset, but you may not be able to. Unplug the device for 15 seconds or more, then hold the reset button while plugging it in. Continue holding the button for 45 seconds. This is your best bet. If it doesn't work - monitor it with wireshark

Re: RT31P2 Unlock thoughts??

Fri, 17 Aug 2007 01:54:27 EDT

hoolahoous :

said by Derickchow :

Than I hold the reset button of the router and connect the router to the Internet

u screwed up here ... you should NOT do reset on any unlocked device EVER.

Re: RT31P2 Unlock thoughts??

Thu, 16 Aug 2007 13:50:37 EDT

Derickchow : Thank you for all nice guys help.

I did unlock the router.

Unfortunately, When I upgraded the firmware to WRT54GP2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin,
Than I hold the reset button of the router and connect the router to the Internet, the Voice Admin page locked again.
I try to downgrade the firmware again, but the password has been changed. I did set the Provision Enable to No.
and I do have the GPP K, it's 64 letters. Also I have the xml file and download from the Vonage, But I don't know
How to got the password back. Pleas help.

Thank you,

Derick

Re: RT31P2 Unlock thoughts??

Thu, 16 Aug 2007 02:29:02 EDT

kakaroto : done

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Wed, 15 Aug 2007 23:45:49 EDT

anon : Hi everyone, I too am looking for:
wrt54gp2_v1.27.02_209_combin_code.zip
can you please email FW to je.lenart at my utoronto.ca account?
Many thanks.

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Wed, 15 Aug 2007 00:02:57 EDT

kakaroto : Hi,
Thanks to meister_md for sending me the FW by email. I also forwarded it to the last few people who posted here. So if anyone reads this, no need to resend.
Thx

KaKaRoTo

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Sun, 12 Aug 2007 17:56:57 EDT

acey4 : Yeah I'm also looking for wrt54gp2_v1.27.02_209_combin_code.zip
can somebody send me a copy at noneedmail at gmail.com?

Thanks in advance

Re: RT31P2 Unlock thoughts??

Sun, 12 Aug 2007 02:19:35 EDT

anon : Hi,
I would also like to have the unlock firmware. Can anyone send it to me to ks_test001 AT hotmail DOT com
I'd like it ASAP so I can unlock this before it's too late to return it to the shop (just in case it all fails).
Also, I'd like to know if once I unlock it, I can use the NA firmwares from linksys website and that it will succeed in upgrading.

Thanks for all the help and the great tutorials!
KaKaRoTo

Re: RT31P2 Unlock thoughts??

Fri, 10 Aug 2007 07:26:26 EDT

mazilo :

said by uzi123 :

Have someone wrote a guide for unlocking vonage RT31P2?

Have you read all posts in this thread before you posted asking the above question?

Re: RT31P2 Unlock thoughts??

Fri, 10 Aug 2007 05:49:33 EDT

anon : Hi all,
sorry for the annoying question..
Have someone wrote a guide for unlocking vonage RT31P2?
Can someone write the link to the guide?
Thanks
uzi

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Mon, 06 Aug 2007 18:31:05 EDT

StarmanDXE : Hey all, I could use a copy too :D

If you would be so kind, could you please send to starmandxe (at) hotmail dot com?

Thanks!

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Mon, 06 Aug 2007 13:16:25 EDT

Derickchow : sent.

And Thank you meister_sd sent one to me.

Re: RT31P2 Unlock thoughts??

Mon, 06 Aug 2007 13:09:58 EDT

Derickchow : I have a problem when I do unlock.

I pub these into the spaxxxxxxxxxxx.xml :

Yes
80
Yes

No

Than PumpKIN said:
/U5x..../spaxxxxxxxxxx.xml' of type 'octet' is requested from 192.168.1.100
Transfer '/U5x..../spaxxxxxxxxx.xml' has successfully completed.

after that, I opened »192.168.15.1/Voice_adminPage.htm, It still ask me inpute the user name and password.

What's wrong or What should I need to do next?
Thank you,

Derick

Re: wanted wrt54gp2_v1.27.02_209_combin_code.zip

Sat, 04 Aug 2007 11:20:07 EDT

abidala : Hi Guys, I am looking for the wrt54gp2_v1.27.02_209_combin_code.zip too. Can anybody please send to me.

falcao_x@yahoo.com.br

Thanks a lot !

wanted wrt54gp2_v1.27.02_209_combin_code.zip

Fri, 03 Aug 2007 10:28:43 EDT

Derickchow : Hi,

I am looking for the firmware too, can anybody send me one wrt54gp2_v1.27.02_209_combin_code.zip? zlchow at hotmail.com

Thank you,

Derick

Re: WRT54GP2's Unlocking Instructions

Fri, 03 Aug 2007 10:00:49 EDT

anon : I am looking for the firmware too, can anybody send me one wrt54gp2_v1.27.02_209_combin_code.zip? zlchow at hotmail.com

Thank you,

Derick

Re: WRT54GP2's Unlocking Instructions

Wed, 01 Aug 2007 02:03:06 EDT

ee601 : Hi,

I am also looking for this firmware 1.27 for WRTGP2

can someone please send it to me via email

ee601@excite.com

Thanks

Re: RT31P2 Unlock thoughts??

Wed, 01 Aug 2007 01:41:31 EDT

platanon : This thread just keeps going:

---------------------------------------------
I have a rt31p2-na
here's what sysinfo shows
Vendor:Linksys
Model Name:RT31P2
Firmware Version:1.28.03, May 10 2005
#:000
Voice Version:3.1.3(LI)
Boot Version:
CodePattern:P2NA

RF Status:Disable
RF Firmware Version:C_2.16

-------------------------------------------------

Now this model is not a vonage branded one. The firmware on it was 1.30.03 i believe. I downgraded it.

My issue is the Voice_adminPage.htm has a password different then the admin password like we all know. I've reset by hitting the button for 40 seconds. I tried to go to admin page and do a factory reset but it still ask me for a username password. Does any body have any ideas? I am thinking reset it thru the phone interface?
I've tried to flash it with other firmware now and is asking for a password again .

I see there a lot of knowledgable people here.
None of the unlocking methods with the vonage trick won't work. I think that the previous voip provider of this box is or was called nexboom

thanks

Re: RT31P2 Unlock thoughts??

Tue, 17 Jul 2007 10:52:24 EDT

anon : Outstanding! Thnx for your kind assistance.

Re: RT31P2 Unlock thoughts??

Tue, 17 Jul 2007 06:57:30 EDT

mazilo :

said by Reagan69 :

Does anyone know how to determine if they can be unlocked?

I am pretty sure these all three RT31P2 of yours are completely NAizable by DogFace05. Just PM him and ask for his help.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Tue, 17 Jul 2007 01:02:22 EDT

anon : Hello~

This may seam obvious...How can you tell if a RT31P2 is a Vonage device?

The Model number on the router itself is 'RT31P2" there is no "-" anything.

I have 3 of these routers (from a SWAP sale), I'd like to UNLOCK them and use them...I just need to determine what their origins are.

The current firmware on one is 1.30.01 with VV 3.1.6 and the other 2 have firmware 1.30.00 and VV 3.1.6.

Does anyone know how to determine if they can be unlocked?

Thanks for your attention.

Re: RT31P2 Unlock thoughts??

Sat, 07 Jul 2007 12:34:02 EDT

anon : I got my RT31P2 Unlocked..

Big Thanks to srid121 and meister.

Re: RT31P2 Unlock thoughts??

Wed, 04 Jul 2007 19:40:02 EDT

mazilo :

said by Ambarsaria :

Any suggestion for me. Thanks a lot in advance.

Just some thoughts on your WRT54GS router. If it is an older version, i.e. v3.1 or older, you may want to consider to flash it with an open-source firmware, i.e. DD-WRT. OpenWRT, and configure it to block traffics to/from any Vonage servers to protect your RT31P2 from phoning home.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Wed, 04 Jul 2007 19:16:51 EDT

anon : Thanks Guys,

I got my XML file from Vonage and successfully downgraded my RT31P2's firmware to Unlocking Firmware(1.17).. :D

BUT Now I am stuck at Making STATIC IP on my House Router. I have Linksys Wireless Router( WRT54GS) and I have DSL (Bell Sympatico, PPPoE connection)connection. I am using bommenarao/srid121's method. I am at step 6, Whenever I put Primary DNS value on my House Router as my PC's IP with DNS and TFTP server on,(in my case 192.168.1.102) and save changes my Router says " Illegal Subnet Mask". My subnet mask is 255.255.255.255. I ever tried putting 255.255.255.0 but that also doesn't work.

Any suggestion for me. Thanks a lot in advance.

Re: RT31P2 Unlock thoughts??

Thu, 28 Jun 2007 00:00:06 EDT

DogFace05 :

said by Dan_voip :

Yes you can.You have to connect your computer to the WAN port of your RT31P2 but you need a crossover RJ45 cable.

No, there's no need for a crossover cable with the RT31P2. A regular straight cable will do just fine, as the RT autosenses and self adjusts to whether the cable is straight or crossed.

Re: RT31P2 Unlock thoughts??

Tue, 26 Jun 2007 10:18:30 EDT

bluefalcon5 : make sure u have enabled both transfer and receive in the settings of the tftp server.

As well make sure u can ping ur router and in fact it is connected to the WAN port of the router. Ensure your DNS is configured correctly.

My router wasn't able to get a DHCP ip from the server so I statically created the ip in the router on the same subnet as the server.

Re: RT31P2 Unlock thoughts??

Mon, 25 Jun 2007 23:27:47 EDT

anon : okie .. here is my situation.

I hv a dummy xml file but Iam not able to load it to TFTP server. Server is running. but when I try to load dummy xml file,which is sitting at my Desktop, its not showing any sign of loading it. When ever I go to File > Configure > C > Documents and Setting > Singh > Desktop > spa001310383008, the TFTP server bottom bar only shows Path upto Desktop on left and the IP 192.168.15.100 on right hand of bottom bar and nothing in Log bar.

Could you pls tell me what and where Im doing something wrong. Thanks in advance.

Re: RT31P2 Unlock thoughts??

Mon, 25 Jun 2007 21:27:41 EDT

Dan_voip :

Actually I have a DSL connection and I just have one Computer and no Wireless or Wired Router, So I am wondering can I feed the dummy xml file to my RT31P2 through TFTP server without using router ???

Yes you can.You have to connect your computer to the WAN port of your RT31P2 but you need a crossover RJ45 cable.

Re: RT31P2 Unlock thoughts??

Mon, 25 Jun 2007 20:46:40 EDT

anon :

said by Sukru Bey :

said by Ambarsaria :

... BUT now I am not able to Grab my XML file from Vonage,

Where will you use that XML file. In other words, since you already downgraded the fw, you do not need that Vonage XML file to unlock.

Well.. thats right Sukru.. I dont need XML file anymore, cause I already downgraded it to 1.17.02 :D

I guess my next step is only to Feed Dummy xml to my RT31P2, Am I right ?

Actually I have a DSL connection and I just have one Computer and no Wireless or Wired Router, So I am wondering can I feed the dummy xml file to my RT31P2 through TFTP server without using router ???

Looking for answer..
Thanks

Re: RT31P2 Unlock thoughts??

Mon, 25 Jun 2007 19:18:52 EDT

anon : Thanks meister_sd

I got the XML file by using Firefox, but now Im stuck at Apache Server!! its giving me ERROR message again and again ..

Im Gona try once again tonight.. will post the Error Code again ..

Thanks for ur help

Ambarsaria

Re: WRT54GP2's Unlocking Instructions

Sat, 23 Jun 2007 21:21:12 EDT

meister_sd :

said by raymonk975 :

could someone sent it to me via email

Sent

Re: WRT54GP2's Unlocking Instructions

Sat, 23 Jun 2007 15:40:16 EDT

raymonk975 : Hi

i am also looking for this firmware 1.27 for WRTGP2

could someone sent it to me via email

labuttespm@yahoo.fr

Thank you

Re: RT31P2 Unlock thoughts??

Fri, 22 Jun 2007 22:13:16 EDT

Sukru Bey :

said by Ambarsaria :

... BUT now I am not able to Grab my XML file from Vonage,

Where will you use that XML file. In other words, since you already downgraded the fw, you do not need that Vonage XML file to unlock.
--
SUKRU BEY, a Linksys PAP2 user

Re: RT31P2 Unlock thoughts??

Fri, 22 Jun 2007 15:32:48 EDT

anon : Hi I need some help....
I was able to downgrade the flash to the 1.25 mod version. I got the GPP K key etc and now after the voice section my router keeps saying "Router still restarting. Please wait a moment". I tried upgrading the flash but it won't left me it will say "Upgrade action is not completed!! Upgrade failed." I tried using linksys flash tools to upgrade flash but no luck either.
Now when I try to get the router to redownload the xml files it won't do it.

Is there any way to fix this or is my router dead?
thanks!

Re: RT31P2 Unlock thoughts??

Wed, 20 Jun 2007 20:26:42 EDT

meister_sd :

said by Ambarsaria :

An invalid character was found in text content. Error processing resource '»httpconfig.vonage.net/spa00131038300B.xml...

Salted__

Internet Explorer can't handle the file - it thinks the XML file is for it - not for download. I was able to download your file using Firefox.

If you don't want to install Firefox, then register your name here and then you can PM someone with your email address

Re: RT31P2 Unlock thoughts??

Wed, 20 Jun 2007 20:19:48 EDT

anon : Hi Guys,

I just bought the Locked RT31P2 from ebay and started unlocking according to meister_sd method. I made one mistake of NOT grabbing xml file from Vonage. I had 1.30 firmware version and I downgraded it to Unlocking Firmware version v1.17.02 w/2.09. BUT now I am not able to Grab my XML file from Vonage, whenever I type »httpconfig.vonage.net/spa00131038300B.xml ( My RT31P2 has MAC address 00-13-10-38-30-0B) in Internet Explorer I get this message-

QUOTE
The XML page cannot be displayed
Cannot view XML input using style sheet. Please correct the error and then click the Refresh button, or try again later.

--------------------------------------------------------------------------------

An invalid character was found in text content. Error processing resource '»httpconfig.vonage.net/spa00131038300B.xml...

Salted__

Could you please tell me where I am wrong ?? Do I need to upgrade it to 1.30 before grabbing my xml file from Vonage or is there another way of grabbing that file ?? Im lost

Please help.

Big Thanks in advance. ambarsaria

Re: RT31P2 Unlock thoughts??

Sat, 09 Jun 2007 19:40:42 EDT

mazilo :

said by booBot :

What is the current firmware version for RT31P2, is it still the v1.30.07|v3.1.09LId?

Mine is running on a v1.30.07 firmware. with VM v3.1.09LId.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sat, 09 Jun 2007 10:22:56 EDT

booBot : What is the current firmware version for RT31P2, is it still the v1.30.07|v3.1.09LId?
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.07/v3.1.09LId)

Re: looking for bin file

Sat, 02 Jun 2007 11:20:17 EDT

Dan_voip :

said by thinredline :

Can someone provide a working links for wrt54gp2_v1.27.02_209_combin_code.zip? I've tried very hard to find one in this thread and failed. Thanks a million!

Try to PM meister_sd. I have WRT54GP2_v1.25.00_209_combin_code.zip, if you want it send me a message.

looking for bin file

Fri, 01 Jun 2007 15:00:56 EDT

thinredline : Can someone provide a working links for wrt54gp2_v1.27.02_209_combin_code.zip? I've tried very hard to find one in this thread and failed. Thanks a million!

Re: RT31P2 Unlock thoughts??

Tue, 29 May 2007 10:21:07 EDT

xless : Nevermind -- I figured it out, finally. It looks like I'm good now, and it was only a series of stupid mistakes which made it take as long as it did. In then end, having Wireshark running to show exactly what was going on was a HUGE help. Big thanks to everyone who helped figure out this hack!

Re: RT31P2 Unlock thoughts??

Tue, 29 May 2007 05:20:47 EDT

xless : Ugh -- desperately need help with an RT31P2. After hours of toying with it, I finally managed to have it fully unlocked, able to get to Voice_adminPage.htm, got both the Vonage and factory fresh GPP_K keys, etc. But at the end, I totally forgot to unset provisioning, and so once it went back on the net, it re-provisioned itself back to Vonage. I was able to flash the firmware back to RT31P2_v1.17.02_000_combin_code.bin, but now it's stuck. I can't factory reset it, can't upgrade the firmware, and it's not trying to find anything via TFTP. What now? It seems like the user password was reset when it was re-provisioned. Is there any hope? Am I Vucked?

EDIT: One other weird symptom: it keeps trying to do a dns lookup of 0.0.0.0. WTF?

Re: RT31P2 Unlock thoughts??

Wed, 09 May 2007 19:35:06 EDT

anon : I have WRT54GP2 locked to Vonage . I followed the method on »www.bargainshare.com/index.php?s···ry741176

But I dont see the tftp request for the xml file..Can anybody help ?

Re: RT31P2 Unlock thoughts??

Thu, 26 Apr 2007 15:49:34 EDT

Blader : I cant get this to load bruteforce.zip, into access driver it craps out everytime I try to load in in.Ive even resaved it as a txt file and still no go? And wheres the part that u have to change $adminpassword the 1 I see says that and then = admin password,fooking getting all frustrated with this chit.By the way trying to unlock a wrt54gp2.. Help please..Thanks :huh:

Re: RT31P2 disable RE-LOCK

Wed, 25 Apr 2007 08:17:31 EDT

mazilo :

said by mujurip :

from what i can recall the instructions for unlocking the routers never state that u diable provisioning.

Perhaps, your memory recollection is no good on this matter ;) and it is time to go back and re-read more carefully on the posts to find out. I can assure you there is a mention to clear the provision area.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Wed, 25 Apr 2007 05:43:11 EDT

shaza : Hi Dogface05,

I read through all the thread and if dont mind keep me also in your mind coz i too have a PAP2 3.1.9 Locked with vonage.

Re: RT31P2 disable RE-LOCK

Sat, 21 Apr 2007 13:09:03 EDT

mujurip : Provisioning was enabled. from what i can recall the instructions for unlocking the routers never state that u diable provisioning.

Re: RT31P2 disable RE-LOCK

Sat, 21 Apr 2007 07:30:29 EDT

mazilo :

said by mujurip :

I got the unlock done and did the upgrade of the firmware to teh stable one. I then configured the router with vociestick settings and when all done I connected the router the internet. Once conneccted, i ddint get a dial tone so i went back to the router GUI page and I noticed that the rotuer was locked again! I can no longer access the voice page.

I could be wrong, but this sounded like you have the provision options enabled.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 disable RE-LOCK

Sat, 21 Apr 2007 01:04:58 EDT

mujurip : Ok somethign weird happpend.

I got the unlock done and did the upgrade of the firmware to teh stable one. I then configured the router with vociestick settings and when all done I connected the router the internet. Once conneccted, i ddint get a dial tone so i went back to the router GUI page and I noticed that the rotuer was locked again! I can no longer access the voice page.
ps. I never did a factory reset.

I'm gonna unlock it again for now. but ne ideas y it got locked again?

Re: RT31P2 disable RE-LOCK

Thu, 19 Apr 2007 14:04:02 EDT

Dan_voip :

said by mujurip :

thanks dan. Do i still need to get the .xml? I mean i got it unlocked and all..but will it matter not doing that 1 step?

It's not mandatory but should be easy to get it. More important is to have the FACTORY FRESH GPP_K key in case the router will be somehow reset to factory default settings.
In that case if you have that key you can build your encrypted xml file (with your own password inside) and feed the router. To get that key you have to be very carefully because you have to lock the device and have to be sure you can unlock it back.
Bottom line you can live without the original xml file and factory GPP_K key :)

Re: RT31P2 disable RE-LOCK

Thu, 19 Apr 2007 09:28:08 EDT

voipadmin4ik :

said by mazilo :

Wrong! Another indication of not reading the whole thread! You are going to be a sorry a$$ if you fail to read all the posts on that thread because there are some posts there mentioning the changes to new firmware.

Please be more polite and composed at first. At second ssory for my english.

I haven't read the all posts in this topic because I haven't time to did this and I had to unlock my RT31P2 as soon as possible.

I found the meister_sd's link on 26-th page to another site and information about unlocking there was more stucture.

This link:

»www.bargainshare.com/index.php?s···ic=88743

I have success with all steps exept 5-th.
In the fifth step of the long method of unlocking RT31P2 was

»www.bargainshare.com/index.php?s···ry741183

Obtain the FACTORY FRESH GPP_K key.

The reason "Why do I need the GPP_K value" you can to see using next link:

»www.bargainshare.com/index.php?s···p=644624

Do you think that information on that topic is wrong? Or I miss understand something?

Re: RT31P2 disable RE-LOCK

Thu, 19 Apr 2007 07:52:53 EDT

mazilo :

said by voipadmin4ik :

If you switch PAP2 over to SPA-1001 firmware, there is no chance of it re-locking even if it "phones home" to Vonage. This is because the PAP2 XML config files aren't compatible w/ SPA-1001 firmware.

Wrong! Another indication of not reading the whole thread! You are going to be a sorry a$$ if you fail to read all the posts on that thread because there are some posts there mentioning the changes to new firmware.

Also, performing a FACTORY RESET w/ the adapter in SPA-1001 mode wipes out all configured settings (including the Vonage settings) and keeps the adapter UNLOCKED.

Not a chance. Please read all posts on that thread to find out.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 disable RE-LOCK

Thu, 19 Apr 2007 05:19:26 EDT

voipadmin4ik : Thanks! Yes christcorp, you right! I haven't read the whole of this topic $-)

You mean if I perform a Factory Reset with unlocked RT31P2 while it's connected to the internet I can't or will have a great difficults with unlocking its again?

Also I have read :

If you switch PAP2 over to SPA-1001 firmware, there is no chance of it re-locking even if it "phones home" to Vonage. This is because the PAP2 XML config files aren't compatible w/ SPA-1001 firmware. Also, performing a FACTORY RESET w/ the adapter in SPA-1001 mode wipes out all configured settings (including the Vonage settings) and keeps the adapter UNLOCKED.

May be exist a firmware on RT31P2 like this?

Re: RT31P2 disable RE-LOCK

Thu, 19 Apr 2007 00:31:51 EDT

mujurip : thanks dan. Do i still need to get the .xml? I mean i got it unlocked and all..but will it matter not doing that 1 setep?

Re: RT31P2 disable RE-LOCK

Wed, 18 Apr 2007 23:35:08 EDT

Dan_voip :

said by mujurip :

p.s There was one thing that i did not follow while unlocking the router and i.e getting my .xml file from vonage. I tried going to httpconfig.vonage.net/spa000000.xml (replacing 0's w/ my MACad) and i get a page dat says "profile not found". This router was never activated by vonage and is brand new. I even let it provision and tried after that but still no go.
Anyhow I got the unlock process done but cant upgrade to latest firm.

To get the xml file try this command:
tftp -i ls.tftp.vonage.net get spaYOURMAC.xml

Your router is a Fonage one, that why you can't update (for the moment) with another type of FW (from Linksys).
Last Fonage FW: RT31P2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin
Where do you find it:
»httpconfig.vonage.net/
Put together the link and FW name and will get you the FW.

Re: RT31P2 disable RE-LOCK

Wed, 18 Apr 2007 22:12:24 EDT

mujurip : Hey guys. I've sucessfully unlocked the router. Thanks for all the help esp dan and corp.

One question however. I 'm unable to update the router's firmware to the latest stable one. I tried the one provided by linksys and the one provided here on teh boards. After the unlocking process, it tried upgrading the firmware and i get an error message saying "unable to upgrade". If i try the firm from linksys.com it says "unable to upgrade" and then something bout pattern error.

Any one else experience this?

p.s There was one thing that i did not follow while unlocking the router and i.e getting my .xml file from vonage. I tried going to httpconfig.vonage.net/spa000000.xml (replacing 0's w/ my MACad) and i get a page dat says "profile not found". This router was never activated by vonage and is brand new. I even let it provision and tried after that but still no go.

Anyhow I got the unlock process done but cant upgrade to latest firm.

Re: RT31P2 disable RE-LOCK

Wed, 18 Apr 2007 10:01:18 EDT

christcorp : You obviously didn't read all the instructions. After unlocking, the first thing mentioned is that it will relock if you factory reset it. And NOT TO DO IT. If you don't reset it, you can use the adapter until the cows come home. That's how I've been using mine.

To answer your question; there are only 2 ways to make it so it won't relock when you factory reset it. 1) Replace the chip with a different programmed chip that doesn't have the vonage code in it. 2) Have it reprogrammed via software. Currently, I only know of 1 or 2 people that know how to do that. If you read the posts in this thread again, you will see more details on both of these options. Later... Mike...

RT31P2 disable RE-LOCK

Wed, 18 Apr 2007 09:52:31 EDT

voipadmin4ik : Hello all!

Thanks to all with yours recommendation to unlock RT31P2. I have a success with it, but after factory reset RT31P2 re-lock again.

Is anybody know how to solve this problem?

Re: RT31P2 Unlock thoughts??

Wed, 18 Apr 2007 09:45:25 EDT

booBot : Well, since I bought it here, in Russia, the box has had the -EU label. But now the router has the -NA firmware in it.

How should I call my RT31P2 now?
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.07/v3.1.09LId)

Re: RT31P2 Unlock thoughts??

Wed, 18 Apr 2007 09:42:34 EDT

voipadmin4ik :

said by mujurip :

excellent link. Thanks a bunch.

btw. what if my adapter was never activated by vonage?
I tried going to »httpconfig.vonage.net/spa000000.xml in order to get my XML config file. However when i go to that page i get "profile not found". My adapter was given as a gift to me and it seems that it was never activated.

Any idea as to how i should get this config file?

You have to change spa000000 to spaMAC_ID in »httpconfig.vonage.net/spa000000.xml where MAC_ID is your adapter 12-th digits MAC address.

Re: RT31P2 Unlock thoughts??

Wed, 18 Apr 2007 09:40:51 EDT

toro :

said by mujurip :

Well neway I have a rt31p2 locked router w/ 1.25.00 firmware dat needs to be unlocked.

I have never tried to unlock a router with firmware 1.25. However, from my experience, if you factory reset it and leave it connected to the internet for a while, Fonage will get it upgraded to 1.30.01 and will set one of the known user passwords on it. After that you should have no problem unlocking it with the method described by meister_sd

Re: RT31P2 Unlock thoughts??

Wed, 18 Apr 2007 09:36:15 EDT

toro : I don't think it's the same. I have a couple that are specifically labeled as RT31P2-NA.

Re: RT31P2 Unlock thoughts??

Wed, 18 Apr 2007 09:29:31 EDT

booBot : As far as I can understand it - my RT31P2-EU is what everybody calls the -NA version.
I did not unlock it.
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.07/v3.1.09LId)

Re: RT31P2 Unlock thoughts??

Wed, 18 Apr 2007 00:17:12 EDT

mujurip : excellent link. Thanks a bunch.

btw. what if my adapter was never activated by vonage?
I tried going to »httpconfig.vonage.net/spa000000.xml in order to get my XML config file. However when i go to that page i get "profile not found". My adapter was given as a gift to me and it seems that it was never activated.

Any idea as to how i should get this config file?

Re: RT31P2 Unlock thoughts??

Tue, 17 Apr 2007 22:39:12 EDT

Dan_voip :

said by mujurip :

should i start reading thru all the 52 pages? I fear that since this thread was started in 2005.. there might now be an easier way to unlock it?

Right to the point:
»www.bargainshare.com/index.php?s···ic=88743

Re: RT31P2 Unlock thoughts??

Tue, 17 Apr 2007 22:28:05 EDT

DogFace05 :

said by vukyDSL1 :

Again, that is the problem. We can not use the Linksys firmware on our RT312P-VD. It works I guess on RT312P-NA and RT312P-EU versions.
But has anyone tried to downgrade to the the Meister_SD ver 1.17 firmware. It gives an error when you try this. I do not understand why, since that firmware was on the router for the unlock process prior to upgrade. Anyone has an idea about this??

What versions does the /SysInfo.htm page report for both the router and VM firmwares on your RT31P2? What error do you get when attempting to downgrade? Are you trying to downgrade via the web menu, through provisioning, or by tftp?

Can we apply a similar process like described above for the WRT router and modify the firmware to fit our -VD version as well?? Does anyone knows how to do this?

Are you're referring to the J-TAG method of the WRTP54G-ER? The provider locking customization of the RT31P2 is stored in the flash of the VM, which does not have a J-TAG interface, so no, it's not possible to apply the WRTP54G's J-TAG method to unlock the RT31P2.

Re: RT31P2 Unlock thoughts??

Tue, 17 Apr 2007 21:59:14 EDT

mujurip : I started reading this thread(started back in 2005) and wooww..it still continues..

Well neway I have a rt31p2 locked router w/ 1.25.00 firmware dat needs to be unlocked.

should i start reading thru all the 52 pages? I fear that since this thread was started in 2005.. there might now be an easier way to unlock it?

If not, whats my first step?
Play with the firmwares or Jtag it?

Re: RT31P2 Unlock thoughts??

Tue, 17 Apr 2007 18:59:23 EDT

toro : Is your RT31P2-VD already unlocked or you're trying to unlock it now ? What kind of error are you getting ? I've unlocked several RT31P2-VD with that firmware, all you you need to do is use the "user" account and try all the known user passwords until you get the right one (if you don't get the right password the first time, I recommend that you power cycle the router before you attempt another downgrade).

Re: RT31P2 Unlock thoughts??

Tue, 17 Apr 2007 17:36:37 EDT

vukyDSL1 : Again, that is the problem. We can not use the Linksys firmware on our RT312P-VD. It works I guess on RT312P-NA and RT312P-EU versions.
But has anyone tried to downgrade to the the Meister_SD ver 1.17 firmware. It gives an error when you try this. I do not understand why, since that firmware was on the router for the unlock process prior to upgrade. Anyone has an idea about this??
Can we apply a similar process like described above for the WRT router and modify the firmware to fit our -VD version as well?? Does anyone knows how to do this?

Re: RT31P2 Unlock thoughts??

Tue, 17 Apr 2007 14:55:53 EDT

toro :

said by booBot :

I did not patch the v1.30.07/v3.1.09, I just upgraded to it.
Rock-solid stable here.

Was it a Fonage router or a RT31P2-NA ?

Re: RT31P2 Unlock thoughts??

Tue, 17 Apr 2007 14:46:30 EDT

booBot : I did not patch the v1.30.07/v3.1.09, I just upgraded to it.
Rock-solid stable here.
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.07/v3.1.09LId)

Re: RT31P2 Unlock thoughts??

Mon, 16 Apr 2007 23:20:01 EDT

toro : Has anybody tried to patch the 1.30.07 / 3.1.09 firmware available for the RT31P2-NA on Linksys's web site in order to make it work on the Fonage RT31P2 ? Is it more stable ?

Re: RT31P2 Unlock thoughts??

Mon, 16 Apr 2007 01:48:24 EDT

DogFace05 : The protocol that the router and voice module (VM) use for communicating between eachother, underwent some significant changes between VM 3.1.3 and 3.1.6, and probably wasn't fully debugged, which probably accounts for many instability problems. Running router FW 1.30.01 with VM 3.1.3 or below, or router 1.28.00 or below with VM 3.1.6, often results in some rather interesting behaviors (besides instability) such as the VM assuming seemingly random MAC addresses, as several function ids that used to be for certain functions in the older firmware, now identify entirely different functions. For instance, the function id for cloning the MAC address in older firmware, overlaps with the one for requesting a provisioning resync in the newer code. Thus, if one tries to resync a 1.30.01 + 3.1.3 (or below) combo via the »rt31p2/resync?resync-url URL, the MAC address of the VM is changed instead, resulting in all kinds of odd VM problems.

Re: RT31P2 Unlock thoughts??

Mon, 16 Apr 2007 00:34:00 EDT

mazilo :

said by vukyDSL1 :

The problem is that even the RT31P2 is unlocked by the meister_sd method, it still only takes the vonage firmware only. So it is not a real -NA version, which is I think completely unlocked and you can download the firmware from Linksys directly. Am I right with this ???

AFAIC, you are right. I believe DogFace05 will be able to provide a more in-depth explanation here.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sun, 15 Apr 2007 23:11:49 EDT

vukyDSL1 : Well the firmware that appears to be unstable is from Vonage: »httpconfig.vonage.net/RT31P2_v1.···bin_code
Is there a different one I do not know about? The problem is that even the RT31P2 is unlocked by the meister_sd method, it still only takes the vonage firmware only. So it is not a real -NA version, which is I think completely unlocked and you can download the firmware from Linksys directly. Am I right with this ???

Re: RT31P2 Unlock thoughts??

Sun, 15 Apr 2007 09:47:52 EDT

mazilo :

said by vukyDSL1 :

I have upgraded the firmware to the latest Vonage ver. 1.30.01 as described here from vonage server. However, the router is INSTABLE. It drops the VoIP and the internet on occasions and reboots spontaneously. I thought it is my unit, but I now have a second RT312P doing the same on the newest firmware.

What version of newest firmware? My RT31P2 has been running solidly with v1.30.07-NA firmware since it was NAized in 11/2006. Since this isn't my main router and is connected behind my main router, I don't have any computer connected to its LAN switches, except just using its two FXS ports.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sun, 15 Apr 2007 08:33:19 EDT

vukyDSL1 : Hi, I have to thank meister_sd and everybody else here who managed to explain and help me unlock my Vonage RT31P2 Router. I am currently using the Router with Sipgate, a europaean VoIP provider.

I have upgraded the firmware to the latest Vonage ver. 1.30.01 as described here from vonage server. However, the router is INSTABLE. It drops the VoIP and the internet on occasions and reboots spontaneously. I thought it is my unit, but I now have a second RT312P doing the same on the newest firmware.

So, I tried to downgrade the firmware to the meister_sd provided ver. 1.17 or 1.25 and it gives me an error doing this. So you are kind of stuck with what you have. I remember the old firmware was not dropping calls. I do not remember missing anything in the meister_sd ver. 1.17, but I did not use it long enough to be 100% sure. So my advice is DO NOT UPGRADE FIRMWARE ON UNLOCKED RT31P2 unless you have trouble with it. Does anybody know how to downgrade, except of doing a hard reset ... which will destroy the unlock. I wish Dogface would somehow all help us make them all -NA version ...

Re: RT31P2 Unlock thoughts??

Thu, 12 Apr 2007 15:14:18 EDT

bommenarao : Hi,
I have VON unlocked router WRT54GP2 with firmwares: Firmware Version: 1.30.01 Voice Version: 3.1.6(LI). I saw in Linksys site that for WRT54GP2-NA version there is firmware version newer than on my router. (WRT54GP2_NA_v1.30.06_000_VM_3.1.09_LId_combin_code.bin)
My question is, can I install this new firmware on my VON unlocked router. If not can we modify it to make it work on VON unlocked router. ANy one tried it? The reason is, my router is not that stable currently. I have to reboot it atleast once every 3 days and sometimes it auto reboots itself in the middle of the call. May be the new firmware will help some of my issues. Plesae help.
Also, any disadvantages in installing the new firmware?
Thanks for your help and time,
Sri

Re: WRT54GP2-VD

Thu, 12 Apr 2007 13:44:57 EDT

mazilo :

said by nathanrdotca :

I bought it unlocked and while I consider myself a computer expert, I wouldn't mess with routers for fear of bricking them, no matter how easy the instructions may be.

Unlocked in what sense, i.e. completely Vonage removal as in safe for factory reset?

Anyway, I have the 1.30.01 firmware, ...

Sounds like the device needs a new firmware.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: WRT54GP2-VD

Wed, 11 Apr 2007 16:52:30 EDT

nathanrdotca : I can agree with having problems with this unit.

I bought it unlocked and while I consider myself a computer expert, I wouldn't mess with routers for fear of bricking them, no matter how easy the instructions may be.

Anyway, I have the 1.30.01 firmware, which seems to be giving other users problems as well - I get random disconnections from instant messengers. MSN disconnects me every 10-20 minutes, as an example. I've troubleshot (troubleshooted? troubleshot?) the problem as best as I could- it's not MSN (though anything Microsoft is debatable), it's not my firewall, it's not my OS.

I have no idea what my options are, no idea if I should try another firmware, even the guy I bought the router from suggested that I post here (big help that is - I need someone in real life to try to help me with this issue, not talking about it on a forum, that doesn't make the problem go away).

So I guess I'm pretty much stuck on trying to solve this problem or buying a different router and trying my luck there.

Re: RT31P2 Unlock thoughts??

Wed, 04 Apr 2007 13:08:42 EDT

Dan_voip : The link to download the firmware v3.1.24 for WRTP54G-NA:

OK, I'm not allowed to post direct link to a firmware; to find the link go to »www.linksys.com , the country should be US, in search field put WRTP54G-NA, take the first link and you are there.

Enjoy!

Re: RT31P2 Unlock thoughts??

Wed, 04 Apr 2007 13:00:21 EDT

toro :

said by toro :

said by booBot :

Recently the WRTP54G-NA box has got the v3.1.24

Does anyone know where to obtain that firmware ? I have a WRTP54G with FW 3.1.17 which is misbehaving, maybe the new FW will fix it.

Nevermind, I found it. Here's the thread for others that need it:
»New WRTP54G-NA firmware 3.1.24 released 3-27-07

Re: RT31P2 Unlock thoughts??

Wed, 04 Apr 2007 12:50:00 EDT

toro :

said by booBot :

Recently the WRTP54G-NA box has got the v3.1.24

Does anyone know where to obtain that firmware ? I have a WRTP54G with FW 3.1.17 which is misbehaving, maybe the new FW will fix it.

Re: RT31P2 Unlock thoughts??

Mon, 02 Apr 2007 10:46:39 EDT

mazilo :

said by booBot :

Is it possible to somehow extract the Voice firmware part and use it to update the RT31P2's voice firmware?

Yes, you can do that but your RT31P2 won't be able to run the code because an RT31P2 (based on an ESS(?) chipset) is not hardware compatible with a WRTP54G (based on a TI AR7 chipset).
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Mon, 02 Apr 2007 09:03:56 EDT

booBot : Recently the WRTP54G-NA box has got the v3.1.24

Is it possible to somehow extract the Voice firmware part and use it to update the RT31P2's voice firmware?
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.07/v3.1.09LId)

Re: WRT54GP2-VD from tigerdirect

Mon, 02 Apr 2007 06:58:13 EDT

mazilo :

said by havarian :

Has anyone tried this model, and is it locked or unlocked?

IIRC, this unit had received a lot of complains. I wouldn't waste my $$ on this unit.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: WRT54GP2-VD from tigerdirect

Mon, 02 Apr 2007 05:57:40 EDT

DogFace05 : WRT54GP2-VD is the Vonage-locked version.

WRT54GP2-VD from tigerdirect

Mon, 02 Apr 2007 00:51:53 EDT

havarian : WRT54GP2-VD is available in tigerdirect for 25$us final sale no return.
Currently, the site shows it's not available for sale and shows in the back that it doesn't have 2 phone ports.

I called tigerdirect branch and they said that they are still selling it, and confirmed that it has 2 phone ports, but they don't know if it's locked or unlocked.

Has anyone tried this model, and is it locked or unlocked?

Re: WRT54GP2's Unlocking Instructions

Sat, 31 Mar 2007 13:29:36 EDT

anon : Hi

I please somebody to send me firmware 1.27 for WRT54GP2 via email.

sierakowskim@wp.pl

Thanks

Re: WRT54GP2's Unlocking Instructions

Fri, 30 Mar 2007 19:00:09 EDT

anon : Hello,

Can anybody tell me where can I find firmware

wrt54gp2_v1.27.02_209_combin_code.zip

because following link is broken

»/r0/download/1···code.zip

Thanks for your help
MS

Re: RT31P2 Unlock thoughts??

Fri, 30 Mar 2007 18:30:51 EDT

nettoyeur :

said by Dan_voip :

I have 2 RT31P2, one VD(Fonage) and one AL(AOL), both unlocked. If I try to load the last firmware from Linksys (RT31P2_NA_v1.30.03_003_VM_3.1.07_LIa_combin_code.bin), I get an error:
"Upgrade action is not completed!
Upgrade file pattern error."

You can't upgrade -VD or -AL with -NA firmwares from Linksys.
For -VD use:
»httpconfig.vonage.net/RT31P2_v1.···code.bin
AOL totaltalk is dead, I have no idea where to find firmware for -AL sorry

Re: RT31P2 Unlock thoughts??

Thu, 29 Mar 2007 17:01:24 EDT

DogFace05 : Unfortunately, one needs to know the admin password to force a resync that way.

Re: RT31P2 Unlock thoughts??

Thu, 29 Mar 2007 15:03:36 EDT

mazilo :

said by hoolahoous :

rt31p2 could be asking for xml on non-default tftp port..

If you are sure your RT31P2 has Resync option enabled, you may be able to force it to resync with a TFTP server to grab the XML provisioned file as follows (something like this):

http:///resync?tftp:///

--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Thu, 29 Mar 2007 14:22:23 EDT

Dan_voip : I have 2 RT31P2, one VD(Fonage) and one AL(AOL), both unlocked. If I try to load the last firmware from Linksys (RT31P2_NA_v1.30.03_003_VM_3.1.07_LIa_combin_code.bin), I get an error:
"Upgrade action is not completed!
Upgrade file pattern error."
When I check the FW from Linksys has the first 4 characters 'P2NA' and the VD FW has 'R31P' exactly as in CodePattern:R31P from »192.168.15.1/SysInfo.htm; for AL is 'P2AL'. If I modify those characters to match the CodePattern I get another error: "Upgrade action is not completed!!
Upgrade failed."
I'm pretty sure the error is because of the checksum who seams to be located after the first 4 characters but I don't know what is the method to calculate it. I've tried MD5 and SVF, no luck. Any idea?
Thanks,
Dan

Re: RT31P2 Unlock thoughts??

Sun, 18 Mar 2007 17:20:36 EDT

hoolahoous : some more info for those whose rt31p2 is not asking for xml..
rt31p2 could be asking for xml on non-default tftp port..
(default it 69) but it could be asking for port 21 or 2400 .

one way to unlock would be
1) run ntp server locally and redirect time.vonage.net and other time servers to point to this server (in your DNS server)
2) once rt31p2 syncs up with time server, it will resolve the vonage tftp server name (for me it didn't even try to resolve vonage tftp server until it talked to NTP server)
3) make sure you have tftp server running on all three ports 21, 69, 2400

hopefully it work this time.

Re: RT31P2 Unlock thoughts??

Sat, 17 Mar 2007 14:08:04 EDT

hoolahoous : last night I was trying to unlock a rt31p2. I found a strange behaviour.. the rt31p2 would NOT request the xml if it was not able to reach couple of NTP servers..

Re: RT31P2 Unlock thoughts??

Sat, 17 Mar 2007 13:42:13 EDT

ogammo :

said by mazilo :

said by Ciel1 :

..., but can someone kindly inform me as to what is so good about NA-izing the RT31P2, and why it's so useful given that we are already able to unlock units and prevent them against reset button issues?

AFAICT, the answer is a NAized RT31P2/PAP2 = an RT31P2-NA/PAP2-NA. So, what is good about an RT31P2-NA/PAP2-NA? Honestly, you will have to own one to understand the goodies of either an RT31P2-NA or a PAP2-NA.

i do have both the rt31p2-na and the vonage one after unlocking. both do the work in the same manner no big difference

Re: RT31P2 Unlock thoughts??

Sun, 04 Mar 2007 16:05:42 EDT

booBot : Hmmm...
I do not know, but if you are not mistaken and it is three shorts, two longs and three shorts - for me is sounds like an "SMS" in the Morse code...

The "SOS" is 3 shorts, 3 longs, 3 shorts.
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.07/v3.1.09LId)

Re: RT31P2 Unlock thoughts??

Sat, 03 Mar 2007 00:20:34 EDT

chpalmer : Have you tried unplugging your phones from the unit?

Its flashing an error code. I dont know what it is but a call to Linksys might help.

Since most shops even close to the field charge $90 or so per hour to repair equipment...

good luck!

Re: RT31P2 Unlock thoughts??

Fri, 02 Mar 2007 22:21:27 EDT

anon : Ok, I have an rt31p2 with firmware 1.30.01, that was setup and worked on the vonage network for 2 years or so. Recently it stopped registerring on the vonage network. I called their tech support and they said buy a new router.
The two phone lights on it are blinking green 3fast2slow3fast.

Is it worth it to try and unlock it and use it with something like asterisk? Or is the SIP portion of the router totally hosed?

Re: RT31P2 Unlock thoughts??

Thu, 01 Mar 2007 22:43:30 EDT

mazilo :

said by No Skill :

Any chance I can get someone to unlock this router for me? I cant do this myself.

DogFace05 will be DaMan in this case.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Thu, 01 Mar 2007 22:34:01 EDT

anon : Any chance I can get someone to unlock this router for me? I cant do this myself.

Re: RT31P2 Unlock thoughts??

Tue, 27 Feb 2007 23:00:06 EDT

nathanrdotca : Hmm.

I've followed instructions exactly but the router isn't pulling anything from the TFTP server.

Maybe I need to leave it unplugged for a while?

- N.

Re: RT31P2 Unlock thoughts??

Mon, 26 Feb 2007 21:41:40 EDT

edg4 : Hello

I'm trying to find the xml file for WRT54gp2, I've been scroling through the pages but I just can't seem to find it. Please let me know.

Thank you very much.

wrt54gp2macid.xml

Re: RT31P2 Unlock thoughts??

Tue, 13 Feb 2007 23:50:32 EDT

meister_sd : There has been a request for the WRT54GP2 and FW v1.25 to incorporate voice v2.0.9 - well here it is. With these firmwares that the router version is the same as the unit being worked on, there is no need (from what I've seen) to put the unit on the internet to get provisioned first. Remember - this only applies if the upgrade firmware matches the firmware number already on the router.

WRT54GP2_v1.···code.zip 992,378 bytes
(WRT54GP2_v1.25.00_209_combin_code.bin)

Re: RT31P2 Unlock thoughts??

Tue, 13 Feb 2007 23:50:29 EDT

meister_sd : OK, to end the day - I'm going to post the firmware and a very brief way to get it to run. I will make a more detailed guide later.

The router must be provisioned in order to access the firmware upgrade. Let it sit on the internet for a few minutes if it has never been provisioned or it's been a while.

You will need a couple of things before you start. One is your XML file from vonage before you hook the RT31P2 to your network. You will also need Solar Winds TFTP server (or your choice) and Simple DNS Pro (or your choice). Install and configure these programs. Also, you will need two NICs. One NIC will be for the connection to your home network router and the other will connect to the WAN side of the RT31P2 using ICS (Internet Connect Sharing). Remember to turn off XP's firewall.

1) Before connecting the RT31P2 to your network, grab your XML file from vonage. Put this into your TFTP Server directory.

2) Disconnect your outside internet cable from your firewall/router so the RT31P2 doesn't access the internet.

3) Log into your router (not the rt31p2) and set a static IP and also program the DNS to your computers IP.

4) Start the TFTP server and with it running, plug the RT31P2 in and wait for the provisioning file to load if this has never been connected to the internet.

5) Log into the RT31P2 with what ever normal login you have, the Linksys default is admin/admin. Go to the Administration tab and then click on Firmware Upgrade. Search for the upgrade file and click the Upgrade button. After some time it will ask for a username nad password. Since it's been on the internet the username and password will be:

user/8995523
or
user/7756112

These are the same as the PAP2. If these don't work - try others for the pap2 factory reset. After a couple of minutes, the upgrade will be sucessful. You will now have Router version 1.17.02 and Voice version 2.0.9(LId).

6) You may notice the XML file loading into the rt31p2 again - that's fine. Pay attention to the 2nd download in the directory that is a set of random numbers and letters. Now you will have to feed your router the XML file that is plain text and has new passwords and screen permissions. I used Simple DNS Pro (14 day trial) to point DNS of "ls.tftp.vonage.net" back to my box. From there Solar Winds TFTP server fed the router.

Here is the flat file needed:


 

Yes
80
Yes
 


 
No

This file will need to be the same as the XML file downloaded from vonage, example: spa00121722CA00.xml
and this file goes into the second directory.

As you can see by the flat file - there are no passwords to the voice section. You click the Voice tab and you are in. The hidden directory is:
hxxp://192.168.15.1/Voice_adminPage.htm

This is a fast tutorial and is only intended for people with advanced unlocking knowledge. A more detailed description will be written soon.

-Enjoy!

RT31P2_v1.17···code.zip 970,460 bytes
v1.17.02 w/2.09
(RT31P2_v1.17.02_000_combin_code.bin)

Re: RT31P2 Unlock thoughts??

Tue, 13 Feb 2007 09:06:49 EDT

mazilo :

Re: RT31P2 Unlock thoughts??

Tue, 13 Feb 2007 01:13:48 EDT

DogFace05 : Ciel, I don't know where you came up with this obsession for thanking me, but it is Meister_sd you should be expressing your gratitude to for the RT31P2 unlocking method found on this thread. Unlike certain individuals on various message boards, I don't plagiarize and take credit for other people's work, and I'm certainly not going to accept any accolades for his effort.

To some of us, there are many advantages to a fully NAized RT31P2. However, if you are happy with your RT31P2 the way it is, then that's all that counts.

Re: RT31P2 Unlock thoughts??

Mon, 12 Feb 2007 22:19:29 EDT

Ciel1 : *posted at right location this time*

I did a brief bit of reading, but can someone kindly inform me as to what is so good about NA-izing the RT31P2, and why it's so useful given that we are already able to unlock units and prevent them against reset button issues? Thanks for all the help!

-still lovin' the unlock, thanks so much DogFace!

Re: After done unlocking.. do this to get current firmware loade

Mon, 12 Feb 2007 22:14:28 EDT

Ciel1 : edit: whoops, I think this is the wrong post, delete if so. :-/

I did a brief bit of reading, but can someone kindly inform me as to what is so good about NA-izing the RT31P2, and why it's so useful given that we are already able to unlock units and prevent them against reset button issues? Thanks for all the help!

-still lovin' the unlock, thanks so much DogFace!

Re: RT31P2 Unlock thoughts??

Wed, 07 Feb 2007 13:43:07 EDT

jessez : Thank you Sukru Bey!
Look like DogFace05 is my only chance.
DogFace05, would you please help me?
Thanks!

Re: RT31P2 Unlock thoughts??

Wed, 07 Feb 2007 02:12:10 EDT

Sukru Bey : jessez,

Your device doesn't look good to me. Because it doesn't ask for time.vonage.net or ntp1-nyc.vonage.net, it is not provisioned yet. Since it doesn't ask for xml file, you can't make any changes. Maybe others will have different ideas. Until then, I advice you to contact DogFace05 and ask him to put your email address in his waiting list. When he is ready offering -NAize service for RT31P2 adapters, you will be at the beginning.

Although my instruction worked well for my all RT devices and for some others, I am sorry it didn't work for you for some reasons.
--
SUKRU BEY, a Linksys PAP2 user

Re: RT31P2 Unlock thoughts??

Wed, 07 Feb 2007 00:11:23 EDT

jessez : Here is the part of the DNS log. It just repeats, no new server request after this.

23:54:41 Request from 216.15.31.100 for A-record for time.nist.gov.
23:54:41 Sending reply to 216.15.31.100 about A-record for time.nist.gov.:
23:54:41 -> Answer: A-record for time.nist.gov. = 216.115.31.140
23:54:41 Request from 216.15.31.100 for A-record for time.stdtime.gov.tw.
23:54:41 Sending reply to 216.15.31.100 about A-record for time.stdtime.gov.tw.:
23:54:41 -> Answer: A-record for time.stdtime.gov.tw. = 216.115.31.140
23:54:41 Request from 216.15.31.100 for A-record for time.chttl.com.tw.
23:54:41 Sending reply to 216.15.31.100 about A-record for time.chttl.com.tw.:
23:54:41 -> Answer: A-record for time.chttl.com.tw. = 216.115.31.140
23:54:52 Request from 216.15.31.100 for A-record for time.nist.gov.
23:54:52 Sending reply to 216.15.31.100 about A-record for time.nist.gov.:
23:54:52 -> Answer: A-record for time.nist.gov. = 216.115.31.140
23:54:52 Request from 216.15.31.100 for A-record for time.stdtime.gov.tw.
23:54:52 Sending reply to 216.15.31.100 about A-record for time.stdtime.gov.tw.:
23:54:52 -> Answer: A-record for time.stdtime.gov.tw. = 216.115.31.140
23:54:52 Request from 216.15.31.100 for A-record for time.chttl.com.tw.
23:54:52 Sending reply to 216.15.31.100 about A-record for time.chttl.com.tw.:
23:54:52 -> Answer: A-record for time.chttl.com.tw. = 216.115.31.140
23:55:03 Request from 216.15.31.100 for A-record for time.nist.gov.
23:55:03 Sending reply to 216.15.31.100 about A-record for time.nist.gov.:
23:55:03 -> Answer: A-record for time.nist.gov. = 216.115.31.140
23:55:03 Request from 216.15.31.100 for A-record for time.stdtime.gov.tw.
23:55:03 Sending reply to 216.15.31.100 about A-record for time.stdtime.gov.tw.:
23:55:03 -> Answer: A-record for time.stdtime.gov.tw. = 216.115.31.140

The attachment is the capture file from ethereal.

ethereal.zip 3,959 bytes
(ethereal.cap)

Re: RT31P2 Unlock thoughts??

Tue, 06 Feb 2007 23:21:17 EDT

Sukru Bey : Jessez? Can you type here exactly what the device asks? Type all of them. I am wondering if it asks for time.vonage.net or ntp1-nyc.vonage.net.
--
SUKRU BEY, a Linksys PAP2 user

Re: RT31P2 Unlock thoughts??

Tue, 06 Feb 2007 22:18:17 EDT

jessez : I don't remember if I turned the provision off after unlock, but I believe factory reset will turn the provision back to on if it was off.

Re: RT31P2 Unlock thoughts??

Tue, 06 Feb 2007 21:55:56 EDT

beancounter : Sukru Bey,

Do you know if jessez would face this problem if he turned provisioning off and then factory reset the unit? I just looked at my decrypted xml and see that time.fonage.net and ntp-1.nyc.fonage.net are in the Voice_adminPage.htm > System tab. So if provisioning is off maybe it will look for the time server but not the tftp server?

jessez any idea on this?

Re: RT31P2 Unlock thoughts??

Tue, 06 Feb 2007 19:41:24 EDT

Sukru Bey : Try to keep the adapter unplugged for at least 25 hours. Then disconnect from internet and see if it asks for an xml file.
--
SUKRU BEY, a Linksys PAP2 user

Re: RT31P2 Unlock thoughts??

Tue, 06 Feb 2007 16:03:16 EDT

jessez : Thank you beancounter. I do have all the HOST it asked for in my DNS entry. I even put it on the internet shared from the second network card, still no xml request. Ethereal shows it got all the answers from the servers, but no xml request. No http. No tftp. Only time server.
Is my router damaged? I guess I shouldn't reset it after unlock.

Re: RT31P2 Unlock thoughts??

Tue, 06 Feb 2007 13:30:10 EDT

beancounter : jessez

I noticed the same thing on my RT yesterday. As Sukru Bey said "do you have all the HOSTs the device is asking? If you are missing one of them, the device will not ask for the xml file till it sees all the HOST." So you need to setup the hosts it is asking for first.

In my case I noticed the RT was looking for a time server first. Once I set up the requested time server in Simple DNS it asked for the xml after that.

Re: RT31P2 Unlock thoughts??

Tue, 06 Feb 2007 09:45:13 EDT

jessez : I got "contact service provider..." when I click voice tab.
I have all the server running, that how I unlock it, but after reset, it does not ask xml anymore. From the DNS log and eathereal, I only see it asked for time server.

Re: RT31P2 Unlock thoughts??

Mon, 05 Feb 2007 21:44:36 EDT

beancounter : Sukru Bey,

Thanks for the step-by-step instructions. It worked perfectly and I have a 44 character GPP_K value that VFonage used to decrypt my admin and user passwords.

I've upgraded the firmware and am now running a couple of accounts on it.

Btw, minor correction - it seems like real GPP_K values are 44 characters long and end in the equal mark (=).

Re: RT31P2 Unlock thoughts??

Mon, 05 Feb 2007 16:31:02 EDT

Sukru Bey : What do you see when you click on "Voice" tab in the router menu? Restarting or something like that?

EDIT: Also, do you have all the HOSTs the device is asking? If you are missing one of them, the device will not ask for the xml file 'till it sees all the HOST.
--
SUKRU BEY, a Linksys PAP2 user

Re: RT31P2 Unlock thoughts??

Mon, 05 Feb 2007 16:20:14 EDT

jessez : I did the factory reset on the RT31P2 trying to get the real GPP_K after I downgraded and unlocked it. It never ask for xml file any more. I can not feed the plain xml file in anyway. What should I do now? The firmware is still the v1.17.02 w/2.09.
I do not have the password, and can not upgrade or downgrade.
I even expose it on internet for a day, and no provision happens.
I am stuck. Please help!

Re: RT31P2 Unlock thoughts??

Mon, 05 Feb 2007 15:26:26 EDT

Sukru Bey : Everyone...

If you want to follow the bellow steps to find the actual GPP_K value of your device, you are doing this on your own risk. Keep reading until the end of this page. You will understand better what I mean.

1- You should have unlocking fw in your device, which means RT31P2_v1.17.02_000_combin_code
2- Disconnect from internet
3- Go to 192.168.15.1/Voice_adminPage.htm
4- Click on "System" tab
5- Clear both admin and user PWs and save.
6- Press the reset button at the back and hold it for 5 seconds to factory reset your device.
7- Reunlock it and DO NOT use Fonage xml file anymore. Just feed it with your own plain-text XML file.
8- See your GPP_K value. It should be similar to
UZ85oYqY1SUlkY00ogwELrd45n4i1l/vgGr7AmcU67I=
9- All real GPP_K values are 44 characters long and finish with equation mark (=).

Good luck.
--
SUKRU BEY, a Linksys PAP2 user

Re: RT31P2 Unlock thoughts??

Mon, 05 Feb 2007 13:13:12 EDT

beancounter : Help... I have my RT unlocked but don't want to upgrade firmware or do anything further anything till I am sure I have correct the GPP_K info.

My post here outlines my unlocking process and my questions: »Re: RT31P2 Unlock thoughts??

Thanks

Re: RT31P2 Unlock thoughts??

Sat, 03 Feb 2007 07:39:39 EDT

bfrasure : Thank you floriantet, I finally unlocked my rt31p2!
The step I missed was letting it connect to the internet. So many guides I've read suggested factory reseting and sending a spaMAC.xml file to it directly for it to provision. This simply didn't work as the upgrade page's password was unguessable. floriantet pointed out that the upgrade page password should be one posted here so I thought 'why not actually let it connect to the internet to auto-provision'. After a couple of minutes of it sitting on the internet I checked the factory reset page and found that it asked for a password. This is a good sign as when I typically factory reset it, I am not asked for a password. I proceeded to run a firmware downgrade.

Now this is where I found a few strange things out about my setup - I had to use an older version of IE 6.0 as my current ie 6.1 and firefox would simply not ask for a password on the upgrade.htm page.I would just be moved onto the upgrade.cgi page with no real status update. This may have been machine specific but to get around this I stepped into a VirtualPC session of win98 and performed the downgrade there. I put in a supplied pass from here (user/89...) and walla - upgrade successful. From here I switched out my spaXML encrypted file with the plaintext xml file which did the trick.

It's unfortunate that these boxes are so difficult to unlock especially when one mistakenly pays outright for them.

Re: RT31P2 Unlock thoughts??

Thu, 01 Feb 2007 22:08:42 EDT

beancounter : Sukru Bey,

Thanks for your reply.

Here is the background on my unlocking process:

I initially factory reset the RT because I did not have the router admin password. I then let it go on the internet to provision itself. Once provisioned I got it off the internet and downgraded the firmware to 1.17.2 & VM 2.0.9(Lld).

In the process of setting up the DNS and TFTP server I connected it to the internet by mistake but I yanked it off soon after. I don't think any damage was done as the firmware remained unchanged and once I fed it the flat profile xml file, I disabled provisioning and deleted the primary and secondary DNS from the Voice_adminPage > System tab. I haven't deleted any of the other Vonage details from the provisioning tab yet. I now have it on the internet and the firmware remains the same 1.17.2 & 2.0.9.

I am not asked for any password when I click on the Voice tab or go to the »192.168.15.1/Voice_adminPage.htm

Can you please clarify, based on your post above:

- How do I clean the admin and user password? I only use one password at present - to login to the router. I am not asked for any other password.

- Do I need to "re-downgrade" the firmware again since I already have it on 1.17.2 & 2.0.9?

- If I factory reset the unit will I not get it locked and maybe not be able to unlock it?

- When I go to the provisioning tab I can see a bunch of GPP values. GPP_D is 10 characters long and GPP_K is 64 characters long. The size seems to indicate it is a Vonage GPP_K value and it is only alphanumeric (no special characters).

Just to be sure I used VFonage correctly yesterday:
Copied the 64 character GPP_K and 10 character GPP_D values from the provision tab of the RT. Put them in the respective boxes on VFonage. Put in the MAC address and filled tftp.vonage.net in the TFTP box. Decryption failed when i did not have the GPP_D value in VFonage. When successful VFonage returned 2 xml files, one encrypted and one plain_text.

I just noticed that the GPP_D and GPP_K values in the decrypted files is different from that in the RT's Provision tab.(The MAC id is identical though)

I tried to use VFonage just now but it fails to decrypt when I use only the GPP_K value, and says "TFTP server error #1:File not found" when I put in the GPP_D value too. This did not happen yesterday.

I'm confused, could you throw some light and point me in the right direction please.

I also recall a post by Mazilo where he mentioned something like that he checked the GPP_K values he got to make sure it worked with the encrypted file. Any ideas on how to do this and make sure I got the right GPP_K values?

Thanks

Re: RT31P2 Unlock thoughts??

Thu, 01 Feb 2007 18:05:26 EDT

Sukru Bey : That's because you don't have the actual GPP_K value. To find out your actual GPP_K value, disconnect from internet, clean both admin and user PWs first, downgrade to the unlocking fw, factory reset your device and reunlock it. That GPP_K value you see is the one you need.

Remember; after you feed the device with Fonage xml file, or after you connect it to internet and let the device be provisioned, you have the fake GPP_K value. The actual GPP_K value can only be seen if you unlock the device without letting it get the Fonage xml file right after factory reset.
--
SUKRU BEY, a Linksys PAP2 user

Re: RT31P2 Unlock thoughts??

Thu, 01 Feb 2007 15:41:10 EDT

anon : I found the answer to my first and second questions with riclink's post on page 25: »After done unlocking.. do this to get current firmware loade

I noticed a post by RT31P2 on page 38 : »Re: RT31P2 Unlock thoughts??
which describes the same situation that I have with the VFonage decrypted spaMAC.xml file. There is only a user name and password, no admin or admin password there.

Any ideas on this please?

Re: RT31P2 Unlock thoughts??

Thu, 01 Feb 2007 13:42:14 EDT

anon : My first post here, although I've been reading them for a while. Managed to unlock my RT31P2.

Thank you to everyone who posted on how to do this. I managed to avoid many of the problems others encountered because they posted their problems here and someone else suggested solutions.

Being a newbie, I used bommenraos guide (to set up the DNS and TFTP server) along with christcorps guide as starting points. I read through the posts over the course of a few days and now understand what each stage is supposed to achieve. Breaking this in blocks helped me work thru each stage.

Here are some of the places where I encountered problems. Most of the solutions I have provided are NOT my own but picked up from reading this forum:

1. Received it with router admin password changed. Once I factory reset it I could login to the router. However it did not seem to provision to Vonage when I connected to the internet. I finally held the reset button on the back while it was powered up and connected to the internet and it got the provisioning from Vonage. user / 899... password worked for me. Downgraded the frimware.

2. In addition to turning off the firewall (I only had Windows firewall) I also turned off the wireless LAN card. Not sure if others made it work using both the regular ethernet card as well as the wireless one.

3. I setup (and started) PumpKin and Simple DNS as suggested by bommenrao. I tried to ping ls.tftp.vonage.net to see if it would show my PC's IP address but it refused to work. I then noticed that PumpKin has a little check box on the bottom right which says "server is running". Make sure you check this box. Pinging after that worked. This took me many hours over sessions to notice ! Simple DNS is started / stopped by using the F5 key. Make sure both SDNS and PumpKin are running.

4. I noticed (IIRC in Simple DNS's View > Active log) that the RT31P2 was asking for time.vonage.net. It didn't seem to look for ls.tftp.vonage.net until it got a reply from time.vonage.net. (someone correct me if I am wrong about this).

I added time.vonage.net to Simple DNS and it worked for me after that. I suppose it makes sense to watch the active log of Simple DNS and see which vonage servers it is trying to access and make sure they are set up in Simple DNS.

PumpKin makes sounds when it receives a request. It might startle you, but isn't it a sweet feeling when it works.

5. I'm not sure if I needed to do this to finish the unlocking process, but I allowed remote upgrade and access for the RT31P2. This was mentioned in one of Christcorps posts.

6. Step 7 of Bommenraos guide: I preferred to do this step earlier and just connect the RT31P2 to my home router once configured. Someone might end up trying to access the router on 192.168.15.1 which will not work since it is connected to the home router by its WAN port.

7. I got the GPP_K value from the provisioning page, filled in the fields in VFonage and tried to decrypt. Didn't work. Once I put the optional GPP_D in addition to all the other fields, it worked.

Just my thoughts on how this worked. If it seems a little basic, It is... a newbie angle on how I got things to work.

I still have some questions now:
1. Can I upgrade the firmware from the one meister_sd provided to the one presently available on the Linksys site?

2. Will I be asked for a password to upgrade the firmware, and if yes what password do I use (I have not made any changes to the passwords after unlocking).

3. I have the decrypted VFonage file. I read through it and I cannot see any user name and passwords in there except user / 899.... What exactly do I look for in this decrypted file if I factory reset the box and need to unlock it?

Thanks again to everyone, I really enjoyed working through this, especially now that I succeeded.

Re: RT31P2 Unlock thoughts??

Thu, 01 Feb 2007 00:00:43 EDT

floriantet : bfrasure,
If your RT31P2 takes the spaMAC.xml (or 666666.xml as you name it) with success then two things should happen:
1) it will ask immediately for directory\spaMAC.xml (directory will be something like Qpm7qPXMjk)
2) you will be able to access the firmware upgrade with the posted passwords

Re: RT31P2 Unlock thoughts??

Sun, 28 Jan 2007 14:00:40 EDT

DogFace05 : The reason I don't offer the RT31P2 NAizing service at this time is that with the process as it is right now, it's taking on average 3-4 hours of my time to walk people through each unlock. Considering what could reasonably be charged for the service, I'd be far better off flipping burgers at Mickey D's. However, I am working on a better more efficient process, and once ready, I will consider making the service available.

Re: RT31P2 Unlock thoughts??

Sun, 28 Jan 2007 13:02:04 EDT

christcorp : You said you asked his rates, but I think what is more important, is that you consider your own rates. The reason I say this, is because if your are willing to pay to have it unlocked, then for a few dollars more, you could buy an unlocked one that isn't set for Vonage. They run around $50-$60. I bought some PAP2 and RT31P2 to unlock because they were early Firmware versions, they only cost me like $10-$20 each, I had spare time on my hand to learn what the others were doing to unlock them, and if I never unlocked them, then it was a fun adventure and worth the money I lost.

Guess what I'm saying is; If you can't unlock the adapter you have with any of the methods provided, and you are willing to pay to have it unlocked, then just go and buy a real unlocked one. Take the one you got and either sell it on ebay or keep it for future projects. Later... Mike...

Re: RT31P2 Unlock thoughts??

Sun, 28 Jan 2007 12:48:00 EDT

bfrasure : Dogface responded by saying he does not provide the NA service at this time (I asked his rates). I guess the RT31P2 is quite a bit tougher to unlock than the PAP2.
This is why I wrote the group.

Is anyone else able to respond and help? Symptoms: device never makes an http request. It will download the xml file but makes no further requests. I cannot downgrade the firmware due to none of the posted passwords working.

Re: RT31P2 Unlock thoughts??

Fri, 26 Jan 2007 11:35:06 EDT

Sukru Bey :

said by bfrasure :

Please help, I've spent many days on this, what a waste.

You just need to follow the unlocking process; but if I were you, wasting days to unlock the device, I would just contact to DogFace05 to let him do the job. Plus, DogFace05 not only unlocks your device, but also NAizes it where you can freely factory reset it and not worry about being locked again at all.

Matrix2310,

You can not unlock a device that doesn't ask for xml file. As you know, our xml file will change the PWs; but if your ATA doesn't ask for the xml file, then in my opinion, you can not unlock it. Some suggestions:

1- Reboot the device to see if it asks for the xml file.

2- Power it off for an hour and power it on to see if it asks for the xml file.

3- Power it off for more then 25 hours and power it on to see if it asks for the xml file.

4- Contact DogFace05 to NAize you device. Looks like you got no other choices.
--
SUKRU BEY, a Linksys PAP2 user

Re: RT31P2 Unlock thoughts??

Thu, 25 Jan 2007 10:36:26 EDT

matrix2310 : I am having difficulties unlocking my rt31p2

I was able to downgrade the firmware to the version that will accept unencrypted (plain) config file. I was able to successfully setup my tftp and dns server and make the other changes to the network. I am able to ping ls.tftp.vonage.net (my pc with the tftp server replys). I am even able to retrieve the config file via tftp from ls.tftp.vonage.net (yes my network is physically disconnected from the internet). I have restarted the rt31p2 many time and it does not attempt to retrieve the config file according to my tftp server log files and ethereal trace. The ethereal trace does reveal the rt31p2 requesting sip registration. Any ideas?

Re: RT31P2 Unlock thoughts??

Tue, 23 Jan 2007 22:48:27 EDT

bfrasure : Please help, I've spent many days on this, what a waste. I've been able to set up SimpleDNS, a DHCP server, a time server, http server, tftp server etc -I am getting plenty of messages from the box and my computer is responding perfectly. My RT31p2 is sucking up the encrypted 666666.xml (where 6 is my mac) file with no problems but it will not go to my web server to update. Every piece of instruction I read says this is naturally the next step. I've factory reset this box so many times now. I've not been able to use the upgrade.htm page because it always asks for a password (which does not work with any of the passwords posted anywhere) and rejects my updates.
I am using the following: firmware:1.28.00 Voice:3.1.3(LI)

I've tried using the Linksys modified TFTP uploader tool only to be notified that the voice module is locked.

Is there anyone who can let me know what to do next?
This box was purchased outright and has not been used with fonage.
Oh and one other thing, I have not been able to use the IVR portion of this box (the #### or **** codes do not work.. I am guessing this is for the PAP2 model)

Re: RT31P2 Unlock thoughts??

Tue, 23 Jan 2007 16:54:28 EDT

christcorp : Thanks for responding Dog. I spent close to an hour going through many of your posts trying to figure out what magic solution you provided that allowed him to factory reset and unlock again. Other than 2 available options, I thought that there was some DIY solution posted that I missed. Later... Mike...

Re: RT31P2 Unlock thoughts??

Tue, 23 Jan 2007 16:50:36 EDT

DogFace05 : I'm a little confused; to the best of my recollection, I've never posted any solution, so whatever worked for you must be someone else's--perhaps meister_sd's? Anyway, I'm glad you're enjoying an unlocked RT31P2. :)

Re: RT31P2 Unlock thoughts??

Tue, 23 Jan 2007 15:09:26 EDT

Ciel1 : That's awesome, DogFace05! Your solution worked beautifully for my li'l RT31P2! Next time when I visit my parents I'll have to update their router with a new openweb.xml file! Yay for FWD + RT31P2 = free calls. :)

I'm under the assumption that a factory reset from the router itself should revert all settings back to default locked mode in case things go wrong, right?*

edit: *just tested, yup

Thanks again!

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Wed, 17 Jan 2007 22:54:19 EDT

DogFace05 :

said by dariodario :

Sorry, :(
I didn't want to upset you.

You didn't upset me. I just don't make hacked firmwares at all.

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Wed, 17 Jan 2007 16:19:52 EDT

mazilo :

said by dariodario :

Please, all of you, accept my apologies :huh:

No need to apologize. You're not causing anyone angry here.

Is there any legal FW I can download somewhere?

The best way to download the firmware is from Linksys Firmware/Driver Archives and/or Vonage HTTP server. The link to the later one can be found on the XML file.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Wed, 17 Jan 2007 15:10:08 EDT

dariodario : Learning is a long process... :(
Please, all of you, accept my apologies :huh:

:uhh:Is there any legal FW I can download somewhere? :uhh:

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Wed, 17 Jan 2007 13:29:14 EDT

mazilo :

said by dariodario :

I didn't want to upset you.

DogFace05 has already made himself very clear about this issue of not distributing firmware as it is illegal. Please read all his posts to find out.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Wed, 17 Jan 2007 12:59:34 EDT

dariodario : Sorry, :(
I didn't want to upset you.
I only wanted to share with other users the way I found to unlock the rt31p2 using ONLY the TFTP server (and a bit of time), improving with your help :o to a full unkock instead of only a voice unlock.
I will try other FW, and I will keep posting my results/success :uhh:

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Tue, 16 Jan 2007 23:23:48 EDT

DogFace05 : I don't make any such "blank" FW, nor do I send or distribute any firmwares whatsoever to anyone, period. Sorry.

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Tue, 16 Jan 2007 16:06:10 EDT

dariodario : Dogface05,
I can unlock the voice part of the rt31p2, but I don't have a FW with blank or known passwords.
It seems to me that you are another star in this sky!
;)
Could you post or send me the "blank" FW for unlocked rt31p2? :uhh:
Thanks,
Dario

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Tue, 16 Jan 2007 14:01:52 EDT

Sukru Bey :

said by DogFace05 :

... here are my findings:

- if Protect_IVR_FactoryReset is set to NO, then the factory reset via reset button will always factory reset the VM as well;

- if Protect_IVR_FactoryReset is set to YES, and EITHER of the admin or user passwords (or both) is blank, the VM will factory reset too...

- if Protect_IVR_FactoryReset is set to YES, and BOTH admin and user passwords are defined, then the VM will NOT factory reset...

Note that Protect_IVR_FactoryReset can only be modified via provisioning, as there's no menu entry for it...

So in conclusion, to protect your unlocked RT31P2 (or WRT54GP2) against accidental factory reset and relock, make sure to set Protect_IVR_FactoryReset to YES, AND set BOTH admin and user passwords to non-blank values.

That's great findings DogFace05. Interestingly, I saved user PW as "user" and admin PW as "admin" and found out that after I login the router part (192.168.15.1) as admin, when I go to voice admin page (192.168.15.1/Voice_adminPage.htm), it doesn't ask for the voice PW again. I think that's because router side of admin PW is the same as Voice part of admin PW, which is "admin". So, it is like you don't have an admin PW for your voice part of RT31P2; because you will never been asked after you login to the router side.

Off course, if you save a different pw for your voice admin login, it does ask you admin PW even if you login to the router first.

So, I advice all Unlocked RT31P2 owners to save user and admin PWs as "admin" after you feed the device with an xml file, in which it says "Protect_IVR_FactoryReset" as "Yes". This will protect you from doing factory reset at the back button. Also, no one can perform fully factory reset even by using web admin login of the device, because it will ask for user PW.

Again, this is great findings DogFace05. Thanks for the hard work. :)
--
SUKRU BEY, a Linksys PAP2 user

Re: RT31P2 Unlock thoughts??

Mon, 15 Jan 2007 01:13:05 EDT

DogFace05 : There's no built in protocol for that in the RT31P2/WRT54GP2. You have to write your own and create your own firmware load image, or patch your code into an existing one, and install it using either Linksys' variation of the TFTP protocol, or the firmware upgrade function of the RT's Web menu.

The PAP2/SPA family of adapters have a bug that allows loading and executing arbitrary code in RAM, but I haven't found such a 'feature' in the RT. Essentially, my solution for the RT is a Win32 program that patches the voice module of an appropriate user supplied firmware image on the fly (I don't distribute any of Linksys' firmware--the user has to provide a legally obtained copy of the appropriate firmware file) with a small remote control monitor/debugger, and upgrades the RT with it. The program then communicates with this monitor/debugger using my own proprietary protocol, and uploads and runs a little program that reprograms the voice module flash, wipeing out any provider defaults, effectively unlocking it permanently. Finally, the RT is reupgraded with a normal, unpatched firmware image, which again must be supplied by the user.

Re: RT31P2 Unlock thoughts??

Sun, 14 Jan 2007 13:26:18 EDT

rdunaway :

said by DogFace05 :

said by havarian :

are you communicating with the bootloader to change this area?
I think you can even change the mac address of the device.

Some bootloaders (ex. Adam2) allows reading and writing to the flash memory using different protocols like tftp, ftp and pure ethernet protocol in case the device doesn't response to tcpip.

The router side's MAC addresses can be easily modified via TFTP. Unfortunately, however, they (Linksys) don't make it that convenient with the voice module, which holds the provider-locking settings. I load and run my own program that does the job. Anything stored in the voice module flash (MAC address, provider specific factory defaults, etc) can be changed that way.

I have an all in one device (VOIP - 3 FXS ports, PSTN - 1 FXO, WLAN, ADSL, Ethernet LAN and WAN, OS = Linux) that I broke. To fix it, I ftp'ed into the Adam2 bootloader and entered commands to change configs. Dogface05, What protocol do you use to load the program (tftp, ftp etc....)?

Re: RT31P2 Unlock thoughts??

Tue, 09 Jan 2007 21:59:31 EDT

DogFace05 :

Re: RT31P2 Unlock thoughts??

Tue, 09 Jan 2007 19:05:59 EDT

havarian :

said by DogFace05 :
The factory customized defaults that lock a unit to a provider such as Vonage, are not part of the firmware--they are stored in areas of the flash that are separate from the firmware, and completely unaffected by whether one installs the -NA labelled firmware on such a unit.

are you communicating with the bootloader to change this area?
I think you can even change the mac address of the device.

Some bootloaders (ex. Adam2) allows reading and writing to the flash memory using different protocols like tftp, ftp and pure ethernet protocol in case the device doesn't response to tcpip.

Re: RT31P2 Unlock thoughts??

Mon, 08 Jan 2007 22:58:42 EDT

mazilo :

said by listonr12 :

I have a RT31P2-NA that I got when I had Nuvio ... How would I go about unlocking this? I'm completely lost.

Read my post several posts above your post. Honestly, you should waste your time reading all the posts in this thread to get yourself familiar with how to unlock your RT31P2-NA. Otherwise, ask DogFace05 to NAize your RT31P2-NA.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Mon, 08 Jan 2007 20:30:43 EDT

listonr12 : I have a RT31P2-NA that I got when I had Nuvio. when I cancelled they told me there was no way for them to unlock it because of the firmware that's on it. When I go to the voice tab it says to contact the service provider. How would I go about unlocking this? I'm completely lost.
Thanks!

Re: RT31P2 Unlock thoughts??

Mon, 08 Jan 2007 10:14:27 EDT

rcilink : .

Re: RT31P2 Unlock thoughts??

Mon, 08 Jan 2007 05:53:30 EDT

mpho01 : Okay,

If what you say is true. Then what I am looking for is the ability to write to this memory location with the default variables and clear them out via a software method. I assumed that the NA versions would do this I guess they do not.

Cheers

Re: RT31P2 Unlock thoughts??

Mon, 08 Jan 2007 05:11:13 EDT

DogFace05 : With all due respect, but you are mistaken on all accounts.

said by mpho01 :

You are correct to say that functionally the NA and non-NA versions are the same except for two key points.
1) NA Firmwares come straight from Linksys rather than the voip provider, which depending on the provider can be very slow to change.

Historically, Linksys have been very slow to release new firmwares for the PAP2 and other ATAs. For the PAP2v1, there's at least a version 3.1.15 available from some provider(s) (some people have even said to have had their PAP2s upgraded to 3.1.16by their providers, but I haven't been able to verify this), whereas the latest version available from Linksys is 3.1.12. In fact, it wasn't until relatively recently that they started distributing PAP2v1 firmware at all at their downloads site.

2) The resetting of the firmware which would require it to be unlocked again. I know that the only difference in the NA and non-NA functionally is the default variables.

No, there's no such difference between the NA and non-NA firmwares. Putting NA firmware on a non-NA PAP2v1/RT31P2/WRT54GP2 and factory resetting, will NOT do away with the provider's factory customized defaults. The factory customized defaults that lock a unit to a provider such as Vonage, are not part of the firmware--they are stored in areas of the flash that are separate from the firmware, and completely unaffected by whether one installs the -NA labelled firmware on such a unit. There are many providers who distribute NA units that are locked through provisioning, but not factory customized. Such units can be unlocked permanently if one manages to factory reset them, but this is unrelated to the firmware on them.

A yes there is an NA version of the PAP2v1. Just do a Google search.

There're mountains of disinformation on the Net. The fact is that Linksys have never released a firmware specifically targetted for PAP2-NA (v1) units vs the non-NA counterparts. You may be able to find some firmware distribution files labelled with an NA, but if you compare these with the same non-NA labeled firmwares of the same version, you'll find that they are identical.

What I want to gain from the NA fix is to be truly untied to any provider. And be able to use the latest firmwares from the manufacturer for a device that I purchased. This is what I assumed this whole thread was about.

Putting NA labelled firmware on your non-NA device won't achieve what you're hoping for. Sorry.

Re: RT31P2 Unlock thoughts??

Mon, 08 Jan 2007 03:59:17 EDT

mpho01 : You are correct to say that functionally the NA and non-NA versions are the same except for two key points.
1) NA Firmwares come straight from Linksys rather than the voip provider, which depending on the provider can be very slow to change.

2) The resetting of the firmware which would require it to be unlocked again. I know that the only difference in the NA and non-NA functionally is the default variables.

A yes there is an NA version of the PAP2v1. Just do a Google search.

What I want to gain from the NA fix is to be truly untied to any provider. And be able to use the latest firmwares from the manufacturer for a device that I purchased. This is what I assumed this whole thread was about.

Any assistance or thoughts would be greatly appreciated.

Cheers.

Re: RT31P2 Unlock thoughts??

Mon, 08 Jan 2007 03:40:27 EDT

DogFace05 : I have a proof-of-concept, software-only, NAizing solution for the RT31P2, and it should be fairly simple to extend to support the WRT54GP2 as well. However, I've decided not to develop the project any further, as it has proved to be a terrible waste of time. You should note that there's no such thing as -NA firmware for the PAP2v1, and the -NA firmwares for the RT31P2 and WRT54GP2 are functionally identical to their non-NA counterparts, and will not unlock provider customized adapters.

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Mon, 08 Jan 2007 03:21:03 EDT

DogFace05 :

said by Sukru Bey :

Are you sure about that? My RT31P2 had a user PW, 1234, and Protect_IVR_FactoryReset was chosen as YES. I press the reset button for more than 30 seconds and now can't go to Voice_AdminPage. It asks for a PW. So, I am not sure if your above statement is true.

Looks like you proved me wrong! :D I went back to investigate the issue, and here are my findings:

- if Protect_IVR_FactoryReset is set to NO, then the factory reset via reset button will always factory reset the VM as well;

- if Protect_IVR_FactoryReset is set to YES, and EITHER of the admin or user passwords (or both) is blank, the VM will factory reset too. Since you said you had a user password defined, your admin password must have been blank;

- if Protect_IVR_FactoryReset is set to YES, and BOTH admin and user passwords are defined, then the VM will NOT factory reset. This is the case when provisioned by Vonage, and is the condition I had been testing under previously, and obviously rushed to a premature conclusion.

Note that Protect_IVR_FactoryReset can only be modified via provisioning, as there's no menu entry for it. Also, it is sufficient to press the reset button for just under 5 seconds to factory reset.

So in conclusion, to protect your unlocked RT31P2 (or WRT54GP2) against accidental factory reset and relock, make sure to set Protect_IVR_FactoryReset to YES, AND set BOTH admin and user passwords to non-blank values.

Re: RT31P2 Unlock thoughts??

Mon, 08 Jan 2007 00:45:43 EDT

mpho01 : Hi,

Has anyone come up with a way to NA a WRT54GP2 via software only. If any knows the checksum and compression algorithms for the firmware we should be able to make a stop gap firmware that will accept the NA version. This should work for the PAPv1, RT31P2 and WRT54GP2. I know the Pattern code ID is zipped up in the firmware and may also be a default variable. Thanks to the pap2info program this may be possible. Just need the checksum and compression tools.

Any thoughts? Please respond or pm me thanks.

Cheers

Re: RT31P2 Unlock thoughts??

Sun, 07 Jan 2007 23:58:26 EDT

mazilo :

said by Krozet :

CodePattern:P2NA

Looks like you have an RT31P2-NA.

Can I just press the reset button to reset the unit or do I need to go through the process of setting up a server, downgrade the firmware and feed it a new xml file to unlock it (and never press the reset button after that)?

I believe the RESET button on the back of an RT31P2 is only to factory reset the router. In this case, you will have to perform a firmware downgrade and feed it with the modded VM firmware v2.0.9d made by meister_sd to have it unlocked. Once unlocked, save the GPP_K as well as the provisioning values under the Provision folder. Then, go to the administrator folder to perform a complete (router + VM) factory reset. If your device is a real RT31P2-NA and is not factory configured/locked to any VoSP, it will now be unlocked once you have perform the reset. In this case, you can then safely perform a real firmware upgrade using the latest RT31P2-NA firmware. Since you are using this device with your VoSP, then it will get relocked if you let it get provisioned by your VoSP.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sun, 07 Jan 2007 23:13:38 EDT

Krozet : Hello;

My head hurts, I have read most of the replies in this thread... My first question is this :

When I check the SysInfo page for my RT31P2 I get the following :

Vendor:Linksys
Model Name:RT31P2
Firmware Version:1.30.05, Feb 7 2006
#:000
Voice Version:3.1.9(LId)
Boot Version:
CodePattern:P2NA

RF Status:Disable
RF Firmware Version:C_2.29.11PsV

I do not have a vonage adaptor but it was purchased through a VOIP provider and I have used it for a year without issue. I am planning on switching to a new provider but my current provider has hinted that the device will not work if I cancel my service. Let me say that the device was purchased and is not rented. Despite the argument that this is MY device to use with whatever service provider I want I am just wondering about reseting it...

The Voice page on my RT31P2 says "contact your service provider..." and when I try to access the Voice_Admin page I get a screen asking for a password that I do not know.

It has been hard reading through most of the posts as they all are geared towards an adaptor locked to vonage, mine is not.

Can I just press the reset button to reset the unit or do I need to go through the process of setting up a server, downgrade the firmware and feed it a new xml file to unlock it (and never press the reset button after that)?

Any help would be appricated...

Kroz

Re: RT31P2 Unlock thoughts??

Fri, 05 Jan 2007 23:29:36 EDT

ogdensburg : Finally I unlocked my 2nd RT31P2 by myself after 2 weeks(Dogface05 unlocked my first one remotely very quick). Here is my contribution to this forum.

1. My RT31P2 use HTTP server to get XML file instead of TFTP server;
2. The path is a random folder (xxxppYUdp) under root folder of HTTP server.

So if your RT31P2 didn't pickup XML in TFTP server after downgrade, check your HTTP server log.

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Fri, 05 Jan 2007 07:26:05 EDT

rdunaway :

said by DogFace05 :

This isn't a service I'm offering to the public at large currently. Occasionally, as time's permitted, I've helped some people free of charge. I can't promise anything, but I'll keep you in mind and when and if I find some spare time, I'll contact you.

I appreciate it. Also, have you or anyone else found a way to Na'ize or reconfigure the Motorola mt1000v/1005v from Vonage?

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Fri, 05 Jan 2007 07:21:13 EDT

DogFace05 : This isn't a service I'm offering to the public at large currently. Occasionally, as time's permitted, I've helped some people free of charge. I can't promise anything, but I'll keep you in mind and when and if I find some spare time, I'll contact you.

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Fri, 05 Jan 2007 07:05:33 EDT

rdunaway :

said by DogFace05 :

Ron, this isn't a procedure consisting of instructions that people can follow. It's done through specially developed software tools which I'm not willing to part with. Sorry.

I understand. How much will you charge to NA'ize my box?

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Fri, 05 Jan 2007 06:31:12 EDT

DogFace05 : Ron, this isn't a procedure consisting of instructions that people can follow. It's done through specially developed software tools which I'm not willing to part with. Sorry.

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Fri, 05 Jan 2007 05:05:58 EDT

rdunaway :

said by DogFace05 :

RT31P2, I have several people in line ahead of you and very limited amounts of time to dedicate to this, so I don't know when or if I'll be able to get to your case. As Mazilo suggested, you should register a user id here so that I can contact you when and if I find the time.

I now using a registered account. DogFace05, is there anyway you could PM me the instructions on how to perform the NA'ize locally? I would be willing to perform it remotely for others if you would like to reduce your workload unless you are charging for it. I would not want to take away from your business if you are charging for the service.

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Fri, 05 Jan 2007 04:34:45 EDT

DogFace05 : RT31P2, I have several people in line ahead of you and very limited amounts of time to dedicate to this, so I don't know when or if I'll be able to get to your case. As Mazilo suggested, you should register a user id here so that I can contact you when and if I find the time.

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Thu, 04 Jan 2007 12:37:57 EDT

anon :

said by mazilo :

said by RT31P2 :

DogFace05

Would you kindly NA'ize my rt31p2 via the internet (remotely)? If not could you email or PM the procedure to do so localing on my LAN.

An an anon poster, I don't think anyone, let alone DogFace05, will be able to contact you through your unknown e-mail address and/or PM.

The idea was that if DogFace05 agreed to either method (remotely or locally) I would provide email address or username to PM. If he decides he wants the info up front before he decides whether or not he will perform the NA'ize task then I will provide the info. Thanks for your input. Again thank you DogFace05 for discovering how to NA'ize the RT31P2.

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Wed, 03 Jan 2007 11:33:08 EDT

mazilo :

said by RT31P2 :

DogFace05

Would you kindly NA'ize my rt31p2 via the internet (remotely)? If not could you email or PM the procedure to do so localing on my LAN.

An an anon poster, I don't think anyone, let alone DogFace05, will be able to contact you through your unknown e-mail address and/or PM.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Wed, 03 Jan 2007 10:56:09 EDT

anon : DogFace05

Would you kindly NA'ize my rt31p2 via the internet (remotely)? If not could you email or PM the procedure to do so localing on my LAN. Thanks so much for your hard work and dedication in unlocking these devices.

Can I put my RT31P2 in a COMA/Brain Dead state?

Mon, 01 Jan 2007 14:48:38 EDT

markosjal : I have a RT31P2 that was unlocked and (see earlier posts) was somehow relocked mysteriously. Can I force it to the Coma / Brain Dead state, and restore to Vonage Locked factory Default?

Anyone know how?

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Fri, 29 Dec 2006 10:33:30 EDT

mazilo :

If you read posts by DogFace05 (a few pages back), he did mention the RESET button will only perform a factory reset on the router module without the Voice module (VM). If you have the Protect_IVR_Factory_Reset enabled, it will still be enabled even after a 40 secs press of the RESET button. As with your RT31P2 Voice_AdminPage gets locked after the RESET button is applied, unless you have your RT31P2 unit NAized by DogFace05, the unlocking process mention here will only let you remove the admin password set by Vonage, i.e. the factory default settings are still there.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Fri, 29 Dec 2006 10:25:57 EDT

Sukru Bey :

said by DogFace05 :

said by skypeuser :

How much was the cost? I don't think this was a free service. I am cuious. If you would rather not say, forget that I asked.

This isn't a service being offered to end users at this time, as it is far too time consuming to be cost effective.

On occasion, as time has permitted, I've performed the procedure free of charge for a few individuals who have kindly asked for it, and the particular case you referred to was just such an instance. However, it's not something I can do for everyone.

It's possible that at some point in the future I may be able to improve the process such that it becomes feasible to offer to the general public at a reasonable price, but unfortunately I can't for the time being.

For those interested in NAizing their PAP2v1/SPAxxxx, on the other hand, I do have a somewhat more efficient process in place, and am offering that service, which is also performed 100% remotely over the Internet. But here again, it still takes up quite a bit of my time, and the price may not appeal to everyone.

Good work body,

Many people will be interested in that. We all hope you will be up and running soon. I really wish you my best. You earned and deserved it.

I have a concern. You once said;

Factory resetting with the RESET button has no effect on the voice part, which handles the provisioning and XML file request. You have to factory reset via the web interface.

Are you sure about that? My RT31P2 had a user PW, 1234, and Protect_IVR_FactoryReset was chosen as YES. I press the reset button for more than 30 seconds and now can't go to Voice_AdminPage. It asks for a PW. So, I am not sure if your above statement is true.
--
SUKRU BEY, a Linksys PAP2 user

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Fri, 29 Dec 2006 01:27:00 EDT

DogFace05 :

said by skypeuser :

How much was the cost? I don't think this was a free service. I am cuious. If you would rather not say, forget that I asked.

Re: RT31P2 Unlock thoughts??

Thu, 28 Dec 2006 21:13:13 EDT

mazilo :

said by help :

I can factory reset it without being asked for user PW.

Did you mean you can just use the IVR to perform a factory reset by dialing ####73738#1? If so, then your unit still runs on an older VM firmware that supports for USER_MODE firmware upgrade. If this is the case, then I believe you can manually perform a firmware upgrade with a modded firmware posted here by Meister_SD a while back to unlock your RT31P2.

Mazilo, how can I NAize it? Where should I go? Thanks for all your help.

Read the posts by ogdensburg dated on 2006-12-21 23:13:05.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Thu, 28 Dec 2006 19:43:10 EDT

anon : Thanks sunrubey but that didn't help. It doen't ask for xml file at all. I connected it to internet for hours and it looks like didn't get the xml file from Vonage either because I can factory reset it without being asked for user PW.

Mazilo, how can I NAize it? Where should I go? Thanks for all your help.

Re: RT31P2 Unlock thoughts??

Wed, 27 Dec 2006 19:40:47 EDT

mazilo :

said by help :

Do you think my RT31P2 is worthless?

Honestly, if you have it NAized (turned into an RT31P2-NA), it will be an awesome router + PAP2v1.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Wed, 27 Dec 2006 18:15:49 EDT

Sukru Bey : I had the same problem too. As soon as I typed the HOSTS, it requested tftp server. Try to have following all hosts and let as know if it asked xml file.

httpconfig.vonage.net
vonage.net
ls.tftp.vonage.net
time.vonage.net
time.nist.gov
time.chttl.com.tw
time.stdtime.gov.tw
x.voncp.com (x is a letter between a and z, or a digit between 0 and 9)
--
SUKRU BEY, a Linksys PAP2 user

Re: RT31P2 Unlock thoughts??

Mon, 25 Dec 2006 19:23:32 EDT

anon : Do you think my RT31P2 is worthless? Looks like you can't even use it for Vonage. It doesn't ask for xml file. So, Vonage can't provision it.

I unlocked 2 before without a problem. This one is weird.

Any help will be appriciated.

Re: RT31P2 Unlock thoughts??

Mon, 25 Dec 2006 17:54:46 EDT

mazilo :

said by help :

Can't downgrade it 'cause it doesn't have user password. Even if I downgrade it, it doesn't ask for xml file.

Since you could not perform a firmware downgrade on your RT31P2, I presumed you just made a wild guess/assumption here unless you have another RT31P2 with an older version of firmware to test.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Mon, 25 Dec 2006 17:13:05 EDT

anon :

said by ogdensburg :

You need do the downgrade first. After that, it will ask for XML.

Can't downgrade it 'cause it doesn't have user password. Even if I downgrade it, it doesn't ask for xml file. How can I feed it with my xml file when it isn't looking for tftp server?

Any help will be appriciated.

Re: RT31P2 Unlock thoughts??

Mon, 25 Dec 2006 15:46:14 EDT

markosjal : I have a RT31P2 that went re-locked as I posted in this thread earlier . It serves me very well, as I although I can not reconfigure it it works for me locked.

I WILL offer however that if anyone wants to attempt an over the web re-unlock, as I have not been able to get back into it.

I had unlocked , removed Provision, upgraded to latest vonage firmware then after a week or so the router was inaccessible leaving me no choice but to reset..

PM me if interested, and include a phone number, FWD SIPPhone or SIP addresses OK

Re: RT31P2 Unlock thoughts??

Mon, 25 Dec 2006 08:31:29 EDT

ogdensburg : You need do the downgrade first. After that, it will ask for XML.

Re: RT31P2 Unlock thoughts??

Mon, 25 Dec 2006 04:12:20 EDT

anon : I know unlocking PAP2 with 3.1.9. I have the same settings. I connected RT31P2 in my local LAN. From Simple DNS, I see that it asks for something; but it never asks for ls.tftp.vonage.net at all. Therefore, it doesn't grap the xml file. Its router is 28 and voice is 3.1.3. I can do factory reset using website. It still doesn't ask for tftp server. From its IP addresses, I know that it is vonage device for sure.

I even connected it to internet and it doesn't grab the xml file.

Do you have any idea what's wrong with it?

Thanks

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Sat, 23 Dec 2006 09:15:09 EDT

TelSat : What does it take to make NA? I know it was done through the internet but can be done locally?
Can the process be public? if not why?

I have one RT31P2 that voice is ata 2.0.9 but it tells me to contact the provider.

Thanks,

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Sat, 23 Dec 2006 08:53:46 EDT

ogdensburg : Yes I saw "code pattern: P2NA" in SysInfo.htm and "Not Customization" in Status tab. It acts exactly as RT31P2-NA now. :):):)

said by mazilo :

This is exactly an RT31P2-NA. :)

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Fri, 22 Dec 2006 17:19:07 EDT

mazilo :

said by ogdensburg :

I won't believe it myself if I'm not involved in whole process. DogFace05 did a full unlock on my RT31P2 REMOTELY. Not only get the Voice_adminPage.htm, he also make my RT31P2 factory reset safe. EVERYTHING IS DONE REMOTELY by internet. Thanks DogFace05.

I guarantee you the SysInfo page on your RT31P2 should now show a P2NA instead of a P2. One more thing, the Customization on the Voice_adminPage (looks like the PAP2 Info page) will show Not Customized (meaning the device isn't customized to any specific VoSP, alias unlocked and/or NA version. For a PAP2v1 with firmware newer than v3.1.11, this field will show Open). This is exactly an RT31P2-NA. :)
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Fri, 22 Dec 2006 16:49:08 EDT

skypeuser : How much was the cost? I don't think this was a free service. I am cuious. If you would rather not say, forget that I asked.

:D

Amazing!! Unbelievable !! Fantastic!! - Remote Unlock RT31p2

Thu, 21 Dec 2006 23:13:05 EDT

ogdensburg : I won't believe it myself if I'm not involved in whole process. DogFace05 did a full unlock on my RT31P2 REMOTELY. Not only get the Voice_adminPage.htm, he also make my RT31P2 factory reset safe. EVERYTHING IS DONE REMOTELY by internet. Thanks DogFace05.

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Mon, 18 Dec 2006 22:25:50 EDT

mazilo :

said by ogdensburg :

Ok. I understand now. Unfortunately I don't know what's the DNS server on my RT31P2 because it's "locked" now. It will be in "System" tab if I can unlock it.

I believe the explanation by DogFace05 is pretty clear here.

If I can get the two dns sever ip address (to say 111.222.123.111 and 111.222.123.112) from someone has an unlocked RT31P2. What's the next step should I do?

Why do you want to get the DNS server IP addresses from someone? All you need is to configure your RT31P2 with your own DNS server. From your posts here, it looks to me you are completely lost. If so, perhaps pay someone to do this for you and your RT31P2 SysInfo page will look something like this:

Vendor:Linksys
Model Name:RT31P2
Firmware Version:1.30.07, Aug  9 2006
#:000
Voice Version:3.1.9(LId)
Boot Version:
CodePattern:P2NA

Which looks like an RT31P2-NA (the CodePattern isn't P2, but P2NA) and can be freely factory reset without fears of getting it relocked!

Ciel: Yes, you did not miss anything what DogFace05 said above.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Mon, 18 Dec 2006 21:33:13 EDT

Ciel1 :

said by DogFace05 :

Bear in mind that the procedure you are trying to follow will yield an RT31P2 that will only remain unlocked for as long as the unit isn't factory reset. If you ever factory reset it, it will relock, and you will have to redo the procedure. If you want it permanently unlocked such that it can be factory reset at your heart's content without ever being able to relock again, let me know.

I'm just a newbie, but did I miss something? Are you saying that you can unlock the unit totally, without any concerns about the reset issue? I couldn't find a method in this thread which could survive a reboot; if you can kindly point me to it that would be MUCH appreciated!

*edit* Oops, I guess this link tells me of the possibilities, which aren't really feasible for me. :( ( »Re: RT31P2 Unlock thoughts?? )

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Mon, 18 Dec 2006 20:49:56 EDT

ogdensburg : Ok. I understand now. Unfortunately I don't know what's the DNS server on my RT31P2 because it's "locked" now. It will be in "System" tab if I can unlock it.

If I can get the two dns sever ip address (to say 111.222.123.111 and 111.222.123.112) from someone has an unlocked RT31P2. What's the next step should I do?

said by mazilo :

said by ogdensburg :

No, I don't understand what's your question.

I've told you the ip address of the DNS server and the DNS server (dnsmasq, »thekelleys.org.uk/dnsmasq/doc.html).

OK. On your RT31P2, what IP addresses are shown on DNS server fields?

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Mon, 18 Dec 2006 18:26:27 EDT

DogFace05 : Ogdensburg, unless you started the capture after powering up the RT31P2, it is pretty evident that the RT31P2 WAN side is configured statically, and not dynamically as you say. In fact, the symptoms you are experiencing are precisely consistent with what's expected with static settings on the WAN port. The RT31P2's voice module, which is responsible for provisioning, ignores any statically set DNS server addresses, and only goes for the preset or previously provisioned Vonage DNS servers--precisely what your capture shows--which aren't reachable in your setup, and thus all the DNS resolution requests fail and the TFTP request for the XML never happens. You have to either configure the RT31P2's WAN side via DHCP, or add one of the Vonage DNS server's IPs to your NIC (in which case it will have to be set statically rather than by DHCP, so it can take on more than one IP).

Bear in mind that the procedure you are trying to follow will yield an RT31P2 that will only remain unlocked for as long as the unit isn't factory reset. If you ever factory reset it, it will relock, and you will have to redo the procedure. If you want it permanently unlocked such that it can be factory reset at your heart's content without ever being able to relock again, let me know.

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Mon, 18 Dec 2006 18:17:30 EDT

mazilo :

said by ogdensburg :

No, I don't understand what's your question.

I've told you the ip address of the DNS server and the DNS server (dnsmasq, »thekelleys.org.uk/dnsmasq/doc.html).

OK. On your RT31P2, what IP addresses are shown on DNS server fields?
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Mon, 18 Dec 2006 16:42:24 EDT

ogdensburg : No, I don't understand what's your question.

I've told you the ip address of the DNS server and the DNS server (dnsmasq, »thekelleys.org.uk/dnsmasq/doc.html).

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Mon, 18 Dec 2006 10:15:44 EDT

mazilo :

said by ogdensburg :

DNS server I'm using in my LAN is 192.168.2.1
My PC which runs TFTP is 192.168.2.168
RT31P2 ip address is dynamic which is 192.168.2.188

I connect other pc to LAN port of RT31P2 and I can ping ls.tftp.vonage.net. It will be redirected to 192.168.2.168 automatically.

said by mazilo :

Please kindly re-read and try to understand my question.

LOL. You didn't seem to really understand my question, did you?
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Mon, 18 Dec 2006 08:07:07 EDT

ogdensburg : DNS server I'm using in my LAN is 192.168.2.1
My PC which runs TFTP is 192.168.2.168
RT31P2 ip address is dynamic which is 192.168.2.188

I connect other pc to LAN port of RT31P2 and I can ping ls.tftp.vonage.net. It will be redirected to 192.168.2.168 automatically.

said by mazilo :

Please kindly re-read and try to understand my question.

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Mon, 18 Dec 2006 06:52:48 EDT

mazilo :

said by ogdensburg :

said by mazilo :

What DNS servers do you use for your Rt31P2?

I'm using dnsmasq, which is build-in light weight DNS server for OPENWRT on Linksys WRT54G. I've put all server name I saw in ethereal capture result in the hosts file as well. From a PC connected to lan port of RT31P2, I can ping these "faked" server and all point to my TFTP server.

Please kindly re-read and try to understand my question.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Sun, 17 Dec 2006 19:49:32 EDT

ogdensburg :

said by mazilo :

What DNS servers do you use for your Rt31P2?

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Sun, 17 Dec 2006 17:16:24 EDT

mazilo :

said by ogdensburg :

Can you see anything wrong on the ethereal result? Why I can't see RT31P2 go to 192.168.2.168 to get the XML? (I use ping ls.tftp.vonage.net and it works fine to go to 192.168.2.168).

What DNS servers do you use for your Rt31P2?
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Sun, 17 Dec 2006 16:43:48 EDT

ogdensburg : Need help on Ethereal capture result.

Finally I make Ethereal work and captured these packets. 192.168.2.188 is the WAN ip of RT31P2. It should be redirected to 192.168.2.168 which is the TFTP server. Can you see anything wrong on the ethereal result? Why I can't see RT31P2 go to 192.168.2.168 to get the XML? (I use ping ls.tftp.vonage.net and it works fine to go to 192.168.2.168).

RT31P2.zip 4,535 bytes
(RT31P2)

Re: RT31P2 Unlock thoughts??

Sun, 17 Dec 2006 13:56:44 EDT

Sukru Bey : Meister_sd,

You are the man of this thread. Your post on page 25 gave us a chance to unlock RT31P2 devices.

I just unlocked one. We are very luck that the RT31P2 with voice 2.0.9 version came to you. Not many people aware of that any Linksys/Sipura voice 2.0.9 version is able to get plain text xml file, while they have GPP_K code. That's why we are able to unlock those devices.

I just wanted to thank you for making RT31P2 devices possible to unlock.

Regards...
--
SUKRU BEY, a Linksys PAP2 user

Re: RT31P2 Unlock thoughts??

Sat, 16 Dec 2006 19:58:11 EDT

DogFace05 : If you had any problem whatsoever with the boot block such that it didn't run and failed to initialize the switch, like I said, the switch would operate in its default uninitialized mode, which is simply to operate as an unrestricted 7 port switch. You would then, barring the voice module being bad as well, see attempts from the voice module to communicate.

It is plausible that the switch is getting initialized to isolate the voice module, in which case voice module traffic won't be seen. That initialization isn't done by the boot code, but rather by the normal router code, so if that's the case, it means that there is nothing wrong with any of the firmware code. If there were any corruption in the main code, it simply wouldn't be executed as it would fail the checksum performed on it by the boot code, and the boot code would enter fail safe mode, where you would see any voice module traffic seeping through the uninitalized switch. So assuming then that the main router code is good, that would mean that some other hardware component could be bad and failing some check, to which the router code apparently responds by rapidly flashing the power LED, just as when the boot code is in fail safe. That's definitely a possibility, although I believe it more likely to be the switch.

There is a J-TAG interface and I believe a serial console posibility as well, but I've never connected either to it. I believe Rcilink may have done the serial connection, so you may want to contact him about it.

Re: RT31P2 Unlock thoughts??

Sat, 16 Dec 2006 08:31:23 EDT

toro :

said by DogFace05 :

Based on your information, although not 100% conclusive, I would venture to guess that your problem is with the ethernet switch component (Marvell 88E6063) in the RT31P2.

Could it actually be that the boot block is corrupted and doesn't get to initialize anything ? Is there a place where I can attach a serial console and see some boot messages ? Or a JTAG interface to re-flash the boot loader ?

Re: RT31P2 Unlock thoughts??

Sat, 16 Dec 2006 04:41:58 EDT

DogFace05 : Based on your information, although not 100% conclusive, I would venture to guess that your problem is with the ethernet switch component (Marvell 88E6063) in the RT31P2. If it were only the boot code being 'stuck' in fail safe mode, or even bad, the switch would be operating in its default uninitialized and unmanaged state, in which all its 7 ports (3 LAN, 1 WAN, 1 voice module, 2 unused) are wide open to talk to any of the other without restriction, and you would see network traffic coming from the voice module trying to establish a connection with the router. (Normally, during the router's initialization, it configures the switch to isolate the network portion connected to the voice module so that it can only communicate with the router, but not the outside.) Since you aren't seing any activity (other than from the PC), it looks very much like you have a faulty ethernet switch in it.

Re: RT31P2 Unlock thoughts??

Fri, 15 Dec 2006 23:21:05 EDT

toro : Sorry, I sent the previous message too early.
Here's the output from ipconfig /all and route print:

C:\>ipconfig /all
 
Windows IP Configuration
 
        Host Name . . . . . . . . . . . . : p4asrock
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Mixed
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
 
Ethernet adapter Onboard LAN:
 
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast Ethe
rnet NIC
        Physical Address. . . . . . . . . : 00-13-8F-9D-3C-0C
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.15.10
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . :
 
C:\>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 13 8f 9d 3c 0c ...... Realtek RTL8139 Family PCI Fast Ethernet NIC - P
acket Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
     192.168.15.0    255.255.255.0    192.168.15.10   192.168.15.10       20
    192.168.15.10  255.255.255.255        127.0.0.1       127.0.0.1       20
   192.168.15.255  255.255.255.255    192.168.15.10   192.168.15.10       20
        224.0.0.0        240.0.0.0    192.168.15.10   192.168.15.10       20
  255.255.255.255  255.255.255.255    192.168.15.10   192.168.15.10       1
===========================================================================
Persistent Routes:
  None

I tried to take an ethereal trace of the WAN while powering up. There was absolutely no packet at all. If I left it long enough I would see the NetBios browser announcements from the PC, but that's all.

Re: RT31P2 Unlock thoughts??

Fri, 15 Dec 2006 23:05:32 EDT

toro :

said by DogFace05 :

Liviutoma, you're not providing enough information to diagnose your problem. Do an Ethereal capture of the LAN port while attempting a TFTP transfer and/or pinging it. Also do another capture of the WAN side while powering up the RT31P2. Post the results here and also post the outputs of the "ipconfig /all" and "route print" commands.

Thanks for your reply. I am attaching the ethereal trace taken while I was running the tftp utility from Linksys. However it looks to me that only the computer is sending packets, there is no response whatsoever from the router.

rt31p2.zip 594 bytes
(rt31p2.cap)

Re: RT31P2 Unlock thoughts??

Fri, 15 Dec 2006 10:12:57 EDT

mazilo : If you have an RT31P2 and trying to upgrade with this firmware, your RT31P2 will give you exactly the error message you posted here because the firmware is for an RT31P2-NA unit. The SysInfo page will show you if your RT31P2 is an NA version with a P2NA.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Fri, 15 Dec 2006 04:23:41 EDT

borispr : I have downloaded 1.30.07/3.1.09 firmware from linksys site. When I try to upgrade from 1.30.01/3.1.07 I see an error "Upgrade action is not completed!! Upgrade file pattern error." What is wrong?

Re: RT31P2 Unlock thoughts??

Wed, 13 Dec 2006 00:43:12 EDT

DogFace05 : Liviutoma, you're not providing enough information to diagnose your problem. Do an Ethereal capture of the LAN port while attempting a TFTP transfer and/or pinging it. Also do another capture of the WAN side while powering up the RT31P2. Post the results here and also post the outputs of the "ipconfig /all" and "route print" commands.

Re: RT31P2 Unlock thoughts??

Tue, 12 Dec 2006 23:15:54 EDT

mazilo :

said by toro :

As for the other LEDs, the 2 phone LEDs flash once during initialization, the other ones are off, but they go on normally if I connect a device.

This was what my RT31P2 showing. You should be able to get the ping responses when your RT31P2 power cycling. I had the TFTP upped the firmware when I saw this ping response. The ping response window is pretty small (probably less than 2 seconds), so you have to act quickly.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Tue, 12 Dec 2006 23:11:53 EDT

toro :

said by mazilo :

said by toro :

Thanks everyone, I didn't have much luck. I also tried the IP 192.168.1.1 (the default for all the WRTxxx type routers), but no luck. Something must be broken in the hardware, or in the boot loader.

As soon as you see the response from ping, your TFTP should start sending the firmware to you RT31P2. I usually set the counter to 10 and let the TFTP run after power cycling my RT31P2. At least, this is how I recovered my RT31P2.

Thanks, actually I never get any ping replies during boot-up or if I leave it running for a while, that's why I thought it was dead. I tried all the LAN ports and even the WAN one, just in case...
As for the other LEDs, the 2 phone LEDs flash once during initialization, the other ones are off, but they go on normally if I connect a device.

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Tue, 12 Dec 2006 20:01:35 EDT

DogFace05 : If you don't have the voice (user or admin level) password to factory reset via the web interface, how were you able to downgrade the firmware? Firmware upgrades (downgrades) do require the same passwords.

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Tue, 12 Dec 2006 19:54:38 EDT

DogFace05 : Option 1 should work fine, but you can also connect directly from the PC to the RT31P2's WAN port. The RT31P2 and most modern NIC cards will autoadjust without requiring a cross over cable. Now, even with option 2, you should have seen DHCP messages; but since you're not seing anything, it makes me wonder if you're connected to the LAN port. If that's the case, you won't see any TFTP requests, as they are always made out of the WAN side.

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Tue, 12 Dec 2006 18:47:07 EDT

ogdensburg : YES it's exactly I did (use the button because I can't reset it with web interface (need password).

said by mazilo :

Did you press the RESET button for more than 30 secs to perform a factory reset?

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Tue, 12 Dec 2006 18:43:39 EDT

ogdensburg : Thanks. I'm new in this field. Is the Ethereal config is something like:
(option 1)
RT31P2 --------HUB--------PC with EThereal

(option 2)
RT31P2 -------Ethernet switch--------PC with Ethereal

I tried option 2 but can't catch any packets from RT31P2,just packets from the PC with Ethereal installed.

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Tue, 12 Dec 2006 18:35:05 EDT

booBot : Yes, their reset button is a very strange thing.
I was very much unpleasantly surprized to discover that the "configuration backup" allows to save the router's configuration only...
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.07/v3.1.09LId)

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Tue, 12 Dec 2006 17:43:41 EDT

mazilo :

said by DogFace05 :

Factory resetting with the RESET button has no effect on the voice part, which handles the provisioning and XML file request.

I believe you are right. I had done this RESET on my previous RT31P2 and the Vonage configuration was still there, IIRC.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Tue, 12 Dec 2006 17:39:40 EDT

DogFace05 : Factory resetting with the RESET button has no effect on the voice part, which handles the provisioning and XML file request. You have to factory reset via the web interface. It has also been reported, although I've never seen one myself, that some rare RT31P2s are customized to provision via HTTP instead of TFTP. If such units exist, perhaps you have one of them. An Ethereal capture will answer that.

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Tue, 12 Dec 2006 16:49:13 EDT

mazilo :

said by ogdensburg :

Thanks for the reply. I did factory reset a few times but no luck. I remember the 1st time it did go to a path to look for the XML file. Yes Vonage is the only VoSP for this RT31P2.

Did you press the RESET button for more than 30 secs to perform a factory reset?
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Tue, 12 Dec 2006 16:27:03 EDT

ogdensburg :

said by mazilo :

You may want to perform a factory reset once your downgraded the firmware.

No, because Vonage isn't the only VoSP uses Rt31P2.

Thanks for the reply. I did factory reset a few times but no luck. I remember the 1st time it did go to a path to look for the XML file. Yes Vonage is the only VoSP for this RT31P2.

Re: RT31P2 didn't goto TFTP to grab XML file after downgrade

Tue, 12 Dec 2006 13:02:14 EDT

mazilo :

said by ogdensburg :

I downgraded the firmware to firmware1.17 & 2.09(voice). Wait for 5 minutes but I still didn't see the TFTP request to grab the XML file.

You may want to perform a factory reset once your downgraded the firmware.

Is LS.TFTP.VONAGE.NET the only place to get the XML file? Or some RT31P2 go somewhere else?

The answer is yes/no. Yes if your device is provisioned by Vonage. No, because Vonage isn't the only VoSP uses Rt31P2.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

RT31P2 didn't goto TFTP to grab XML file after downgrade

Tue, 12 Dec 2006 11:07:46 EDT

ogdensburg : I downgraded the firmware to firmware1.17 & 2.09(voice). Wait for 5 minutes but I still didn't see the TFTP request to grab the XML file.

When I unlock OTHER RT31P2, it did send a request to a random folder for the XML.

Is LS.TFTP.VONAGE.NET the only place to get the XML file? Or some RT31P2 go somewhere else?

Re: RT31P2 Unlock thoughts??

Tue, 12 Dec 2006 02:16:24 EDT

DogFace05 : If your RT is in fail safe, and that's what the rapid flash of the power LED indicates, it is hard coded to respond on IP 192.168.15.1. Do make sure that you are connecting to one of its LAN ports (preferably LAN1), and not the WAN port. (You should keep the WAN port unplugged.)

It's unlikely that you have a boot loader problem, given that the power LED flashes. If your boot loader were bad, the LED wouldn't flash, but would rather be steady on or off. There could be some hardware problem--what indication do you have on the other LEDs?

You may want to do an Ethereal capture while trying to TFTP the firmware upgrade, which will tell if there is any network activity from the router's side. Also, do a factory reset of the router by pressing and keeping the reset button depressed for some 20 secs.

And no, in fail safe there is no need to start the TFTP immediately. You could wait 24 hrs before starting it if you so chose. I know. I've deliberately put mine in fail safe over a 100 times while testing certain stuff.

One thing you must not do, is have another RT31P2 connected on the same network as one that is in fail safe. It causes both to go unstable and flood the network with massive amounts of garbage. In fact, you should never have the WAN side of two or more RT31P2s connected on the same network segment, as it usually results in the same instability.

Re: RT31P2 Unlock thoughts??

Mon, 11 Dec 2006 23:23:45 EDT

mazilo :

Re: RT31P2 Unlock thoughts??

Mon, 11 Dec 2006 23:10:11 EDT

toro : Thanks everyone, I didn't have much luck. I also tried the IP 192.168.1.1 (the default for all the WRTxxx type routers), but no luck. Something must be broken in the hardware, or in the boot loader.

Re: RT31P2 Unlock thoughts??

Mon, 11 Dec 2006 15:23:56 EDT

DogFace05 : In fail safe mode the RT31P2 waits indefinitely for a TFTP transfer, so there's no need to hurry and start the transfer immediately upon detecting a ping response. Just power on the RT31P2 and start the TFTP transfer after at least some 10 seconds. Also, there's no need to run ping. It will only create unnecessary network traffic and increse the risk of the TFTP transfer failing. Do however make sure that your PC's network interface is set in the same subnet, ie 192.168.15.x. Finally, once the TFTP program reports success, allow another 10 secs for the RT31P2 to actually flash the unit and reboot itself. Don't powercycle it before, or you may interrupt the flashing and at best be back in fail safe and have to redo the procedure, or at worst have created an unbootable brick.

Re: RT31P2 Unlock thoughts??

Mon, 11 Dec 2006 07:39:21 EDT

mazilo :

said by DogFace05 :

Looks like it's in the fail safe mode of the router boot code. What you need to do is download the Linksys TFTP application from "ftp://ftp.linksys.com/pub/network/tftp.exe", and use it to upload the firmware anew. The password to give it should be "admin", and you have to rename the firmware file to "code.bin". The IP address in fail safe mode is hard coded to 192.168.15.1.

You may also want to consider to perform the following:

ping -t 192.168.15.1

ping -f 192.168.15.1

SysInfo

Good luck.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Mon, 11 Dec 2006 01:42:27 EDT

DogFace05 : Looks like it's in the fail safe mode of the router boot code. What you need to do is download the Linksys TFTP application from "ftp://ftp.linksys.com/pub/network/tftp.exe", and use it to upload the firmware anew. The password to give it should be "admin", and you have to rename the firmware file to "code.bin". The IP address in fail safe mode is hard coded to 192.168.15.1.

Re: RT31P2 Unlock thoughts??

Sun, 10 Dec 2006 23:30:07 EDT

toro : I apologize if my question is somewhat off-topic: I unlocked a fonage RT31P2 sometime ago and used it for a while. Then all of the sudden it doesn't boot anymore, the power LED keeps flashing without going solid. Any idea what might be wrong and how to recover it ? I am guessing the router part of the firmware or the boot loader got corrupt somehow. Is there a way to re-flash the router part with a JTAG ?

Re: RT31P2 Unlock thoughts??

Mon, 04 Dec 2006 08:37:02 EDT

skypeuser : :D I'm interested in this information. If someone could lead me the the website or thread I would greatly appreciate it.

:)

Re: RT31P2 Unlock thoughts??

Mon, 04 Dec 2006 01:46:53 EDT

christcorp : Any reason why not? Is it something that can be accomplished in the "Do it yourself" environment such as we discuss here? I'm sure if there is another means of unlocking the adapters, and it becomes a true -NA, without hardware/chip replacement, then a lot of people would be interested. Later... Mike....

Re: RT31P2 Unlock thoughts??

Mon, 04 Dec 2006 01:05:41 EDT

DogFace05 : It's not discussed in any threads.

Re: RT31P2 Unlock thoughts??

Mon, 04 Dec 2006 00:37:00 EDT

christcorp : It has? Cool. I was under the impression that any of the firmware unlocking methods would relock if you did a factory reset. I must have missed those threads. I'd be interested in looking at it again. Can you tell me which one we are talking about. Thx... Mike...

Re: RT31P2 Unlock thoughts??

Mon, 04 Dec 2006 00:24:46 EDT

DogFace05 : Actually, it has already been accomplished through software means alone.

Re: RT31P2 Unlock thoughts??

Sun, 03 Dec 2006 22:44:17 EDT

christcorp : If you read through this post, you'd realize that you can't make it a true -NA with the firmware unlock method. Most people don't have any need to be doing factory resets, so it's not an issue.

The only known method, that I know of, is to actually swap out the chip in the adapter. There are some people that have done that. It requires having a new chip that you can program and replacing it with the original one. Or, you can just buy a real -NA version that isn't locked. Later.... Mike....

Re: RT31P2 Unlock thoughts??

Sun, 03 Dec 2006 22:39:33 EDT

kanata2004 : I unlocked a RT31P2 sucessfuly. But each time I do a factory reset, it will go back to locked Vonage mode. I did google search but can't find a way to change RT31P2 to a real RT31P2-NA. Anybody can help? I can pay you for doing that if you tell me how to do it. Thanks.

Re: RT31P2 Unlock thoughts??

Thu, 30 Nov 2006 21:16:39 EDT

mazilo :

said by hrickpa :

the sjp1 enables/disables the voice part of the router

What is "sjp1"? Is this a jumper set? If so, can you try to disable the VM and then flash it with an -NA firmware to see if it will unlock the device. I believe it is not going to work; however, I haven't heard/seen anyone doing this and who knows this will work. ;)
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Thu, 30 Nov 2006 16:58:29 EDT

hrickpa : i have a rt31p2-al is there away to unlock this model
it used to be Aol total talk service
they no longer have the service
the internals are the same
i would like to unlock
the sjp1 enables/disables the voice part of the router

Re: RT31P2 Unlock thoughts??

Wed, 29 Nov 2006 19:28:44 EDT

MannyL : I originally had a RT31P2 which failed Dec of 05. They origianlly refused to do replacement because it was was out of warranty. When it failed I had to buy a new one out of pocket so I am not locked in on anything. i did not get the rebate because they said it was for new users.

I did complain and they did pay me the money but it was not through the rebate company

Re: RT31P2 Unlock thoughts??

Wed, 29 Nov 2006 09:24:35 EDT

mazilo :

said by MannyL :

I am not under contract with any VOIP provider. I have been with them for over one year. I do appreciate the concern, and would suggest that anyone under contract with them not do anything to risk a termination of said contract.

That's good to hear. However, considering a VTA-VR just came out to the market less than a year, how did you get this VTA-VR to use with Vonage for more than a year unless you had Vonage switched to this device recently? OTOH, you are also taking a risk to get your contract terminated by Vonage for tempering your (own) device.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Wed, 29 Nov 2006 08:01:17 EDT

MannyL : I am not under contract with any VOIP provider. I have been with them for over one year. I do appreciate the concern, and would suggest that anyone under contract with them not do anything to risk a termination of said contract.

Re: RT31P2 Unlock thoughts??

Wed, 29 Nov 2006 07:28:00 EDT

mazilo :

said by MannyL :

I'm trying to setup line 2 for use with voicestick and keep line 1 on vonage ( for now)

You are playing with fire! It is not recommended to hack your ATA that is still servicing with certain VoSP through a contract, especially if there is a penalty for earlier termination. If I were you, I would get myself another PAP2v2 and/or VTA-VR. I believe Micro Center still has this VTA-VR FAR (without any Vonage activations to submit the rebates) before 12/1/6. This way, you can leave your current VTA-VR alone.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Wed, 29 Nov 2006 01:17:15 EDT

MannyL :

Re: RT31P2 Unlock thoughts??

Wed, 29 Nov 2006 01:14:53 EDT

christcorp : Oh, I see said the blind man to the deaf girl, who was listening quite intensely. Not sure I can help you on that one. Parts of the regional and SIP sections are neutral for both lines. Not sure if there are some settings in there to make Vonage work that would stop voicestick from working. I'll look around and see what I come up with. later... Mike....

Re: RT31P2 Unlock thoughts??

Wed, 29 Nov 2006 01:02:50 EDT

MannyL : I must be blind ( or tired) I looked over the liked thread two times but I must have overlooked something. I'm trying to setup line 2 for use with voicestick and keep line 1 on vonage ( for now) when I put the phone cord in line 2 and pick up the phone I just get a busy signal

Re: RT31P2 Unlock thoughts??

Wed, 29 Nov 2006 00:42:09 EDT

christcorp : I use voicestick on my RT31P2 without any problems. Today is your lucky day. Just so happens that people from voicestick are looking into supporting BYOD and posted a thread right here asking people who have successfully put voicestick on their own adapters, what the settings were. Most of the people who wrote back are using the PAP2. The settings are pretty much exactly the same for the RT31P2. Go to this thread and check it out. Later... Mike....\

»[VoiceStick] BYOD configurations needed

Re: RT31P2 Unlock thoughts??

Wed, 29 Nov 2006 00:32:29 EDT

MannyL : Yes umm err as far as that goes. I tried using VuckFonage but I don't know that port to specify for it to tftp file file down. I did save the gppk key I saw in the router itself.

What I have to do now (and google searches aren't helping me find it) is find the changes I need so I can use voicestick with the unit. I get mostly inbound calls with very few outbound calls.

Re: RT31P2 Unlock thoughts??

Wed, 29 Nov 2006 00:20:04 EDT

christcorp : Manny, glad everything worked out. Remember however rule #546 and #643. Make sure you have a copy of your "G" code and decrypt it with Rizzo's info so you can get the user name and password. Also, DON'T do a factory reset on it unless it's the last choice in the world. It will relock itself and sometimes, it won't want to re-unlock. Congrats again. Later... mike...

Re: RT31P2 Unlock thoughts??

Tue, 28 Nov 2006 23:42:29 EDT

MannyL : Success have been achieved!

First I want to thank everyone who posted their info on this thread and at bensbargians. Without that I would never have made it to this point

Mazilo and danlr if I wore a hat I'd be taking it off to you. I was finally able to get the router to ask for the file via tftp. What I had to do was not in any post and by a stroke of luck i figure it out.

My router was trying to talk to a vonage server called atlas4.atlas.vonage.net I decided to put an entry in my dns pointing to the tftp server for that name and lo and behold I saw it tey to make a sip registration to that name once it resolved to an IP and then and only then did it look up ls.tftp.vonage.net and grab the xml file.

I now have full access to the voice tab.

What I have to do next is disable provisioning so i don't get locked out.

I assume it is now safe to upgrade to the latest firmware in the thread on the bargain site?

Again I thank you all for the help including christcorp who gave me a well deserved minor flame when I asked for a walk-through right off the bat

Re: RT31P2 Unlock thoughts??

Tue, 28 Nov 2006 22:59:59 EDT

MannyL : I ***think*** I see part of my problem.

According to packet captures I see a request going out to time.vonage.net and ls.tftp.vonage.net but I don't see a reply from my DNS software I do ICMP responces from 192.168.1.100 (laptop) to 192.168.1.1 (Vonage unit) that say Destination Unreachable (Port unreachable)

is it possible even with my XP firewall disabled my port is still closed?

I'm online using the laptop now with a USB nic instlled (not bridged)

Re: RT31P2 Unlock thoughts??

Tue, 28 Nov 2006 22:30:56 EDT

MannyL : Danlr I have changed the password to 4321 and now can log into the router using admin and the name and 4321 as the password.

I am using 3COM's TFTP server and SimpleDNS. I am using 192.168.1.1 as the wan port and 192.168.1.100 as the IP on my laptop.

I have ls.tftp.vonage.net pointed to 192.168.1.100 but it doesn't seem to make contact to the DNS server. I can run another packet capture log if you want

Re: RT31P2 Unlock thoughts??

Mon, 27 Nov 2006 15:50:10 EDT

danlr : Connect the computer to LAN connection. Log in at 192.168.15.1 with admin/admin. Go to setup tab and change to static IP then change the ip to 192.168.X.1 and DNS server AND Gateway to 192.168.X.10 . Disable Dhcp local server. Go to administration tab and change the password to 4321 and check allow remote administration, upgrade.. Save new settings. Connect the computer to WAN, Change the computer IP to 192.168.X.10 and save. Log in to 192.168.X.1:8080 with the password 4321. if the log in is succesful and you see the page, now you can go on and open DNS server and TFTP server. Make sure you have hosts file in the TFTP root folder with the IP 192.168.X.10 and DNS is pointed to this hosts file(check option of DNS server)

Re: RT31P2 Unlock thoughts??

Sun, 26 Nov 2006 07:44:59 EDT

mazilo :

said by MannyL :

The WAN port on the RT31P2 is 192.168.15.1 it is assigned staticly

I don't know if this is true or not. When you have a router whose WAN and LAN IP addresses fall into the same subnet (in this case, it is 192.168.15.0/24), your router may not function properly unless it is configured as a transparent bridge. I just hope someone out here can prove me wrong and gives a better explanation.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sun, 26 Nov 2006 03:42:54 EDT

MannyL : I feel like I'm talking to myself but I'm hoping someone will come by and point out my error.

I'm running Simple DNS on my system. The IP is 192.168.15.100

The WAN port on the RT31P2 is 192.168.15.1 it is assigned staticly and has 192.168.15.100 as it's DNS server. It is connected directly to 192.168.15.100 via a standard patch cable.

Mt TFTP server is not showing any traffic and the Apache logs are not showing any traffic from 192.168.15.1

Any suggestions to look into?

etherdump2.zip 7,849 bytes
Ethereal Dump
(etherdump2)

Re: RT31P2 Unlock thoughts??

Sun, 26 Nov 2006 03:10:12 EDT

MannyL : and thats another problem. It's VONAGE.NET not VONAGE.COM now it may work

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 23:05:32 EDT

MannyL : I disabled 2003's dns server and installed easy DNS so I could monitor the DNS requests. I see many requests to the various root servers but no request for ls.tftp.vonage.net I stopped etheral after running for 8 minutes I see many ARP requests from 192.168.2.203 wanting to know who has 192.168.3.4 and to various time servers but no requests to ls.tftp.vonage.com

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 22:53:27 EDT

mazilo : Hopefully, your RT31P2 should be able to request a spoofed IP address of ls.tftp.vonage.net from your DNS server.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 22:28:12 EDT

MannyL :
Correction: 2003 DNS setup to direct all requests for ls.tftp.vonage.com to 192.168.3.4

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 22:25:51 EDT
MannyL : Again my stupidity comes into play DNS was set to 192.168.4.1 which is not the IP of my DNS server. I have changed it to 192.168.3.4 which is the IP of the internal network.

I now have it set to the following and am going to re power cycle and re-run etheral

SolarWinds TFTP running on 192.168.4.4

2003 DNS setup to direct all requests for ls.tftp.vonage.com to 192.168.4.4

IP of the added nic 192.168.4.4
IP Of Original nic 192.168.3.4

IP of RT31P2 is 192.168.3.203
DNS on RT31P2 is 192.168.3.4

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 21:59:11 EDT
mazilo :
said by MannyL :

It doesn't appear to me that it's requesting any DNS information from the local server
Did you configure your RT31P2 to point to your DNS Server?
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 21:49:52 EDT
MannyL : Well I assigned 192.168.4.1 to the second nic and am using 192.168.4.100 for the static IP of the Internet Connection on the RT31P2.

After starting Etheral and plugging in power to the RT31P2 I see many requsts go out to different time servers. At about 49.5 seconds I see the first request to 216.115.24.230 for a dns query to ls.tftp.vonage.net then there are more time requests and at 75.9 seconds and 79.9 seconds from startup are two more dns requests to the .230 for ls.tftp.vonage.net

It doesn't appear to me that it's requesting any DNS information from the local server

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 20:59:18 EDT
MannyL : Ok my last two quetions were stupid after thinking about them.

I now have a 3COM PCI Nic installed connected to the WAN (Internet port on the RT31P2.

What IP do you suggest assigning to the new card?

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 18:29:15 EDT
MannyL : I wouldn't happen to be able to do this using VMWARE and a virtual PC with 2 NIC's so I don't have to go out buy another nic and a crossover cable

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 18:05:24 EDT
MannyL : Alright. I don't happen to have a hub here so I will have to go the two nic route. This means I need to purchase a crossover cable correct?

Once I go out and purchase the cross over cable if it turns out it is not making DNS querys what would I do?

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 16:01:23 EDT
mazilo :
said by MannyL :

I have the WAN port (internet) on the RT31P2 connected to port 2 on the WRT64GS using a standard ethernet cable (not cross over)
So far, it looks like you are on the right track.

Just to give you a big picture here. I split this unlocking process into two categories:
•Firmware Upgrade: This process will flash your RT31P2 with the modded firmware. The reason is this modded firmware has a flaw where it will be able to process plain-text XML file.•Feeding XML config file: This process requires a proper setup of DNS server to spoof Vonage TFTP servers. Your RT31P2 will be configured to point to this DNS server of yours so it will be fetched with the right IP address of your TFTP server to grab the plain-text XML config file of your choice.
So far, you have done the first part and your RT31P2 which is currently running with VM v1.29. Your problem is you don't know if RT31P2 does issue DNS queries. In order to really find out, you have to sniff the traffics between your RT31P2 and your router. This is usually done by adding a HUB with a computer running ethereal to capture the traffics. There is another way to do this by using a computer with two NICs acting as a bridge. Whichever approach you take, you should be able to find out if your RT31P2 does really issue a DNS query and to which DNS server.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 14:48:49 EDT
MannyL : Giving it some more thought I'm wondering if I missed a step.

This is what I've done so far

1) Installed SoalrWinds TFTP server
2) in C:\TFTP-Root I copied the spaXXXXXXX.xml file, the flatfile.txt which was copied and pasted in notepad, and the following 2 bin files RT31P2_v1.17.02_000_combin_code.bin and »httpconfig.vonage.net/wrt54gp2_v···ode.bin" >www.bargainshare.com/goto.php?ht···code.bin
3) With the router disconnected from the internet I uploaded the RT31P2_v1.17.02_000 firmware (v1.17.02 w/2.09) firmware. and rebooted the router
4) I logged in using my old user name and password and verified the firmware is 1.17.02 and voice is 2.09

it is at this point that I am trying to get it to load the XML file and do not see it contacting the tftp server at all.

I have the WAN port (internet) on the RT31P2 connected to port 2 on the WRT64GS using a standard ethernet cable (not cross over)

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 14:29:30 EDT
MannyL : Mazilo I appreciate the help you are giving me, While part of me feels that I cam clogging up this thread another part feels that someone else may have the same problems that I did.

I'm not sure what else to check at this time to see why the TFTP server is never contacted

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 14:05:11 EDT
mazilo :
said by MannyL :

From what I understand reading the entire thread and links I don't want my RT31P2 to see the internet until the unlocking is complete.
This is correct.

I've let the unit sit for about 30 min now and it has not connected the TFTP server according to the status screen so I must be over looking something
Usually, a PAP2/RT31P2 will right away to look for DNS server upon booting.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 13:49:55 EDT
MannyL : From what I understand reading the entire thread and links I don't want my RT31P2 to see the internet until the unlocking is complete.

I've let the unit sit for about 30 min now and it has not connected the TFTP server according to the status screen so I must be over looking something

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 12:49:13 EDT
mazilo : Yes, your wirings make more sense because you don't want your RT31P2 connects to live Internet feed.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 12:38:08 EDT
MannyL :

No my network is now as follows

----

--------------------------
|
|
|

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 12:33:54 EDT
mazilo :
said by MannyL :

I normally use the RT31P2 as the main NAT/Firewall router but I have moved it to connect to a WRT54GS which has an IP of 192.168.3.2
So, now your LAN connection is as follows:
192.168.3.1 192.168.3.2
<---> modem <---> WRT54GS <---> RT31P2
|
192.168.3.100 |
DNS Server ---+--- computers

I have instructed the RT31P2 to use 192.168.3.100 as its DNS server.
These look good to me. If you configured your DNS server correctly, then your RT31P2 should be able to see and get the IP address of your TFTP server when it tries to query for Vonage TFTP servers from your DNS server.

--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 12:20:24 EDT
MannyL : I normally use the RT31P2 as the main NAT/Firewall router but I have moved it to connect to a WRT54GS which has an IP of 192.168.3.2

I have instructed the RT31P2 to use 192.168.3.100 as its DNS server.

Your questions made me think that I may be using an IP for the WAN port in the wrong range. I have changed it to 192.168.3.200 and am going to power cycle it again

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 07:10:22 EDT
mazilo :
said by MannyL :

Using Static IP of 192.168.4.1 for Internet
I supposed this is the IP address of your main NAT/Firewall router where your RT31P2 and DNS server are connected to, right? If not, then what is the IP address of your RT31P2 and how do you connect it to your LAN?

Fron the 2003 server prompt if I do ping ls.tftp.vonage.com from the 2003 box it resolves to 192.168.3.100
This means your DNS server is working. However, you will need to make sure your RT31P2 is configured to use this DNS server so that it will know where to look to get the IP address of your spoofed Vonage TFTP servers.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sat, 25 Nov 2006 04:51:59 EDT
MannyL : Ok I've done the following but have not had success.

2003 Server running DNS has it's IP set to 192.168.3.100
RT31P2 is now running version 1.17.02

Using Static IP of 192.168.4.1 for Internet with DNS server of 192.168.3.100
and 192.168.3.1 for internal IP

Fron the 2003 server prompt if I do ping ls.tftp.vonage.com from the 2003 box it resolves to 192.168.3.100

Running SolarWinds TFTP server I see nothing in the log screen

I have the WAN port on the RT31P2 connected to a LAN port on another switch, which is not connected to the internet.

I've power cycled the vonage unit twice. I don't know why it won't access the TFTP server for files

Re: RT31P2 Unlock thoughts??

Thu, 23 Nov 2006 22:09:11 EDT
mazilo :
said by christcorp :

I've had a lot of people tell me that I'm not the one put in all this time and effort, so why am I being so defensive?
AFAIC, you've done this right and I should thank you for your time to write this up.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Thu, 23 Nov 2006 20:10:54 EDT
MannyL : Christcorp thank you for the non-rude reply. I did re-re-read the thread and noticed there is a way without opening the unit and bringing certain data lines to a different state then default. I am confident that I will be able to do this now because it seems all software level and that I have no issues with

Re: RT31P2 Unlock thoughts??

Thu, 23 Nov 2006 16:53:54 EDT
christcorp : Look, I am not trying to be rude or anything. Please believe be. There are a lot of people who have put in a lot of time and effort, and even money, into unlocking the RT31P2. This ENTIRE THREAD we are in, is devoted to unlocking the RT31P2. How to unlock the RT31P2 is right here in this thread. Did you even try reading any of these posts?

Don't get me wrong. While I may have contributed a little by doing experiments and providing some feedback, there is no way in the world that I or anyone else can come close to the amount of contributions people like Meister_SD, Mazilo, rcilink. and Rizzo have put into this and many other projects. I affectionately refer to these guys as the "FAB-4". This is not to say that others haven't helped out. Many people have contributed to these unlockings. It's just that I feel that these 4 have probably FORGOTTEN more about these adapters than many of us will ever learn in a life time.

That's why I am responding in this post. Out of respect for all the time and effort that has gone into the unlocking of all of these adapters, at least have the respect to read the posts for yourself. If after you read it, if you are still confused about something, plenty of people are willing to assist you. The idea of looking for someone to "Do it for you", or to provide some magical "10 Step Checklist" is not the right answer. Especially the checklist. There are so many variables involved in unlocking an adapter, that if you do follow the procedures in this thread, that doesn't guarantee you will be able to unlock the adapter. That's why reading the entire thread is so important. Many of the variables have been encountered, worked out, and posted in this thread. No one should have to reinvent the procedure. You'll find it if you read the thread.

Again, sorry if I seem insensitive. I've had a lot of people tell me that I'm not the one put in all this time and effort, so why am I being so defensive? Well, I have in my time done this type of stuff. Hardware, software, firmware, etc... I like hacking, cracking, and any other decription you want to call it. It is fun. I'm also sure that it's fun for all the guys who have made these adapters accessible. That doesn't take away from the pride they get for a job well done. The least we can do to show that respect, is to read what they have written. No different than meeting a well known author and asking him to tell you all the details of his/her latest book. That is tasteless and totally disrespectful. Go out and read the book for yourself. I believe the same thing here. Go out and read the instructions yourself. If after reading, you have difficulties and questions, I guarantee you that the Fab-4, myself, and every other person on this forum will be willing to help out. Later... Mike....

Re: RT31P2 Unlock thoughts??

Thu, 23 Nov 2006 16:07:53 EDT
MannyL : I have a RT31P2 with Firmware Version: 1.30.01 I have been with Vonage for over a year and would like to leave them. I have almost no knowledge of electronics but I do know this unit is unlockable so I can change the voice settings to another provider. Is there anyone willing to help me off the board in unlocking my unit

Re: RT31P2 Unlock thoughts??

Mon, 20 Nov 2006 22:20:15 EDT
christcorp : Real unlocking requires more than just a step by step set of procedures. It would be nice, but there are so many variables, that it doesn't always work the way you plan. What is more important that to know "What to do", is to know "Why you are doing it". Once you understand why, you will understand how.

But, because this thread has indeed gotten quite extensive, let me assist you in saying that at least start on page 23 of this thread. If you will go through until at least page 30, you should have an understanding of "What" and "Why". If it makes sense, then do it. If it doesn't make sense, then you will need to "Evolve" just like the rest of us. That means starting at page 1. Later... Mike...

Re: RT31P2 Unlock thoughts??

Mon, 20 Nov 2006 21:55:47 EDT
anon : I have tried to unlocking my rt31p2 a lot of times, without success.
I think in this forum there are some instructions.
Could someone help me to find this?
Thanks...

Re: RT31P2 Unlock thoughts??

Fri, 10 Nov 2006 18:53:04 EDT
tommy13v : Just wanted to say thanks for all the hard work everyone has done on getting this working. I successfully unlocked 2 RT31P2's and am using them now.
--
Asterisk Scripts

Re: RT31P2 Unlock thoughts??

Fri, 10 Nov 2006 16:51:41 EDT
myvoip07 :
said by mazilo :

IIRC, someone posted here earlier in this forum about v3.1.16 firmware for a PAP2v1. For me, all PAP2v1 units I have run on a v3.1.15 firmware.
What are the new features or updates in 3.1.15 for PAP2v1? Please comment.

Re: RT31P2 Unlock thoughts??

Fri, 10 Nov 2006 15:45:09 EDT
meister_sd :
said by mazilo :

asking him how to manage to repackage the hacked firmware to unlock RT31P2 if a PAP2v1 firmware is 100% compatible with an RT31P2 VM firmware.

There are some mods that Linksys did to the firmware that makes the RT31P2 voice module talk to the router module. If this isn't present, the two can't talk. I tried putting the RT's VM on the pap2 and it would just reboot all the time.

Re: RT31P2 Unlock thoughts??

Fri, 10 Nov 2006 14:23:21 EDT
mazilo :
said by booBot :

I saw PAP2s have the voice module ~v3.1.12 - are there any chances that RT31P2 will catch up?
IIRC, someone posted here earlier in this forum about v3.1.16 firmware for a PAP2v1. For me, all PAP2v1 units I have run on a v3.1.15 firmware. Honestly, I really don't know how compatible a PAP2v1 firmware is to an RT31P2; however, you may be able to PM to meister_sd asking him how to manage to repackage the hacked firmware to unlock RT31P2 if a PAP2v1 firmware is 100% compatible with an RT31P2 VM firmware.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Fri, 10 Nov 2006 10:23:03 EDT
booBot : Thank you very much!

(I was looking for a product first and then for the downloads available for it. It should have been the other way around - look for the downloads collection and then search the product there...)

Yes, seems v1.30.07/v3.1.09LId is the latest - I been to all other countries on Linksys's site, either they have an older version or no such file at all...
I saw PAP2s have the voice module ~v3.1.12 - are there any chances that RT31P2 will catch up?
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.07/v3.1.09LId)

Re: RT31P2 Unlock thoughts??

Thu, 09 Nov 2006 19:39:04 EDT
DogFace05 : Here's is the link to the firmware download page for the RT31P2, but you can get there yourself just by going to the main US downloads page, selecting "RT31P2 v1.0" (or something like that) from the drop down list, and so on...

»www.linksys.com/servlet/Satellit···rWrapper

Re: RT31P2 Unlock thoughts??

Thu, 09 Nov 2006 18:37:11 EDT
booBot : Hmm...
I can't find the RT31P2 there at all.
Just the PAP2 and SPA2002-ER.

Can you post the link?
Or, can you mail me the file? (kb2wjw@Gmail.com)

Thank you in advance.
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.05/v3.1.09LId)

Re: RT31P2 Unlock thoughts??

Thu, 09 Nov 2006 17:17:47 EDT
DogFace05 : Yes, last I checked Linksys' US site (Nov 2), they had 1.30.07/3.1.09(LId) for download.

Re: RT31P2 Unlock thoughts??

Thu, 09 Nov 2006 13:36:39 EDT
booBot : Has anybody seen a more recent firmware for the RT31P2 than the one on Australian Linksys's site (v1.30.05/3.1.09LId)?
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.05/v3.1.09LId)

Re: RT31P2 Unlock thoughts??

Thu, 02 Nov 2006 09:02:40 EDT
mazilo :
said by danlr :

... but maibe it is good to buy a HT426 from ebay instead of paying for NAnization.
This may not be a bad idea, except you will need to consider how reliable is an HT426 as compared to a PAP2v1, let alone the features an HT426 can offer to compare from a PAP2v1. If you take into consideration on what I just said here, perhaps the best solution for you is still to pay someone to NAnize your PAP2v1, YMMV. Once NAnized, your PAP2v1 is completely clean from Vonage; thus, it will become like a PAP2-NA and won't be able to phone home again.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Wed, 01 Nov 2006 19:26:51 EDT
danlr : Thank you guys for your answer. I, personally, do not have any problems, except, getting tired, unlocking it again. However my cousin cannot do it at all, so I gave one to him and he reseted once, so I had to unlock again. I want to send one to one other country so it is hard to get back and forth to unlock. PAP2 V1 does not have a reset button so it is better for people who does not know anything. Maibe it is good to disable somehow the reset button, unsoldering from the board. Probably installing a jtag and flash could be the solution but maibe it is good to buy a HT426 from ebay instead of paying for NAnization.

Re: RT31P2 Unlock thoughts??

Tue, 31 Oct 2006 22:07:19 EDT
mazilo :
said by danlr :

How can I use that password in the future if gets factory reset again. I do not want to unlock it again and again.
As DogFace05 has pointed out in this recent post, your best option is to pay someone to NAnize your Linksys/Vonage locked RT31P2 unit. IIRC, sometimes ago someone sold this service on e-bay for about $30 and the owner had to pay for S/H of his RT31P2 to/from the seller to manually remove, reprogram, and solder back the flash ROM to turn the unit into an RT31P2-NA. If you do the math, this approach would have easily amounted for at least a total of $40.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Tue, 31 Oct 2006 14:21:18 EDT
DogFace05 : That password won't do you any good after a factory reset as it is a provisioned password. To achieve what you want, and not have to unlock it again and again, you have to remove all V*nage customization from the device, or in other words convert it to -NA.

There are two possibilites here. One is to remove the voice module flash and reprogram it without the customization data--hardly worth the effort except as an exercise for those who like tinkering with this kind of stuff and are willing to invest in the necessary tools. The alternative is to do it via software means. But there is only one person doing that as of this writing, and the method and software tools used are proprietary and are never going to be made public, so your options are rather limited.

Let me ask you something. If you were able to pay someone to perform the -NAization for you, would you? And if so, what would you be willing to pay for the service?

Re: RT31P2 Unlock thoughts??

Tue, 31 Oct 2006 06:30:07 EDT
danlr : I had the same problem with one RT31P2. Did not want to provision it self from vonage anymore after reset. What I did: I downloaded spaxxxx.xml encripted from vonage, I put it in the tftp root and I feed the router with it. Tftp told me that it took it. Then I had to rename 1.17 firmware to 1.30 because otherwise wouldn't accept downgrade. After I downgraded I feed the plain xml and bingo unlocked again. Probably just a crazy router. The question is: I decrypted xml file from vonage and I found an admin password - How can I use that password in the future if gets factory reset again. I do not want to unlock it again and again.
Thanks!

Re: RT31P2 Unlock thoughts??

Tue, 31 Oct 2006 03:25:36 EDT
markosjal :
said by greekunter :

Hello guys,keep up the good work.
I have also unlocked my rt31p2,but change it to static ip and i couldn't access it,so i reset it offline.
I thought that if i used the same procedure,setup tft and dns,and feed the flat-xml would work unlock again,but..
I think i'm missing something...
Any help?

P.s It has the the 1.30 fw.Also try for downgrade ,but previous usrn and pass didn't work.

I think you have run into the same snag as I

Re: RT31P2 Unlock thoughts??

Mon, 30 Oct 2006 10:24:24 EDT
meister_sd :
said by greekunter :

I don't understand as i don't have put it on the internet,why cannot feed the flat xml?
It depends on firmware version?

Yes, the only firmware that can take plain text is voice version 2.0.9. All other versions require the XML file to be encrypted, if encryption is turned on - which it is with vonage. Putting it on the internet will give it the password 8995523 or 7756112, which may be needed to downgrade to firmware version 1.17. Once you have done this again, you can feed it the plain text file.

Make sure that when you make the router a static IP that you either renew your IP or make sure you are on the same subnet by changing your IP (if needed).

Re: RT31P2 Unlock thoughts??

Mon, 30 Oct 2006 07:04:08 EDT
anon : Any suggestion,please?
Have any to unlock it again or take it away?

I don't understand as i don't have put it on the internet,why cannot feed the flat xml?
It depends on firmware version?

Re: RT31P2 Unlock thoughts??

Sun, 29 Oct 2006 22:54:26 EDT
toro : I've downloaded 2 so far, and the Line1 and Line2 settings are reset to the server ccivr.fonage.net:5066, with dialplan S0 which basically would make the adapter tell you "Your phone is plugged in to the incorrect port, blah blah...". The standard for adapters that are not associated with any Fonage account.

Re: RT31P2 Unlock thoughts??

Sun, 29 Oct 2006 20:57:47 EDT
mazilo :
said by toro :

Thanks mesiter. I know all the stuff about the config files, but I truly believe that any subsequent config file will not contain the password anymore, since the account has been disabled.
Have you seen any subsequent XML config files without a password?
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Sun, 29 Oct 2006 20:26:04 EDT
anon : Hello guys,keep up the good work.
I have also unlocked my rt31p2,but change it to static ip and i couldn't access it,so i reset it offline.
I thought that if i used the same procedure,setup tft and dns,and feed the flat-xml would work unlock again,but..
I think i'm missing something...
Any help?

P.s It has the the 1.30 fw.Also try for downgrade ,but previous usrn and pass didn't work.

Re: RT31P2 Unlock thoughts??

Sun, 29 Oct 2006 19:29:30 EDT
toro : Thanks mesiter. I know all the stuff about the config files, but I truly believe that any subsequent config file will not contain the password anymore, since the account has been disabled.

Re: RT31P2 Unlock thoughts??

Sun, 29 Oct 2006 16:52:17 EDT
meister_sd :
said by toro :

So my question is: can I somehow read the SIP password from the router and use the account with Asterisk ?

You can't read it directly from the web interface. Vonage is getting smarter in that they have a second directory to download the XML file from and that second directory only last 2-3 seconds so you will need to get it before the window closes. If you are able to make calls, the account may not be turned off but you just need to grab the second (or maybe third) file and decode it. I've had vonage accounts that were "valid" that I got the password to and even had dial tone but the calls wouldn't go through, so this is what I'm basing my opinion on.

If you are able to get to the point of decoding the files and getting the password, then technically yes - you can use your Asterisk box for the vonage account but there is a problem. When making voip calls, there are identifiers that go out in the call. This identifier tells the receiving computer what you are using, ie PAP2, SPA1001, Asterisk, etc.... So if you put this vonage account on Asterisk - they will know right away and the account will get suspended because there are no legit vonage accounts on Asterisk. So there is a way to spoof the identifiers and that is what you will have to do. Change them to say it's an RT31P2 - since that is what the account is on now. I don't know how to change it, but there is a discussion on doing it for the people who had their VoiceStick accounts suspended - look through that thread.

Re: RT31P2 Unlock thoughts??

Sun, 29 Oct 2006 12:41:37 EDT
toro : Thanks to all who worked hard figuring out how to unlock the RT31P2. I bought one yesterday (used) and I was able to unlock it without problems. Then I noticed something interesting: the Vonage credentials are still programmed in the router and I can make calls. However, if I download and decrypt the configuration XML file from Vonage, it has different settings which means the router didn't have a chance to update it's configuration after the account was disabled.
So my question is: can I somehow read the SIP password from the router and use the account with Asterisk ?

Re: RT31P2 Unlock thoughts??

Fri, 27 Oct 2006 11:44:54 EDT
mazilo :
said by skypeuser :

Who is this masked someone??? :o
I was just thinking someone may be able to do this for some $$$.

I wonder what the price is??? :hmm:
The question is how much are you willing to pay for the service, i.e. $25, $30, etc. I had seen someone sold this service on e-bay for at least $30 and that required the RT31P2 owner to mail the device to this individual so he can remove, reprogram, and solder the chip to turn the RT31P2 into an RT31P2-NA. If someone can do this over the Internet, I reckon it will be more likely to cost you at least $30 and still be able to save $$$ in S/H costs.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Thu, 26 Oct 2006 23:50:02 EDT
skypeuser : Who is this masked someone??? :o

I wonder what the price is??? :hmm:

Re: RT31P2 Unlock thoughts??

Thu, 26 Oct 2006 22:21:54 EDT
mazilo :
said by booBot :

So, to make a box 100% "factory reset"-proof one needs to desolder the voice FLASH and erase those (previously mentioned) areas in it?
If you are willing to pay, I am sure someone will be able to NAnize* your Linksys/Vonage locked RT31P2 over the Internet, i.e. no need to do the dirty work of soldering chips. This way, you can freely factory reset your unit and it will no longer get locked by Vonage. ;)

* NAnize means to turn your RT31P2 into an RT31P2-NA.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Thu, 26 Oct 2006 19:12:35 EDT
christcorp :
said by booBot :

So, to make a box 100% "factory reset"-proof one needs to desolder the voice FLASH and erase those (previously mentioned) areas in it?

Actually, it's faster and easier to just get a blank chip and program it with the unlocked "NA" code. Then just replace the chip. Yes, soldering is required. Also, unless you know what you are really doing, it is usually easier and cheaper to just buy a normally unlocked version. But yes, it can be done. Some on this forum have already done it quite a bit. Later... Mike....

Re: RT31P2 Unlock thoughts??

Thu, 26 Oct 2006 17:04:15 EDT
booBot : So, to make a box 100% "factory reset"-proof one needs to desolder the voice FLASH and erase those (previously mentioned) areas in it?
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.05/v3.1.09LId)

Re: RT31P2 Unlock thoughts??

Thu, 26 Oct 2006 13:34:46 EDT
markosjal : I could not say for sure, I think I changed it to NO.

Here are some other thoughts:

Intentional need to reset in some firmware versions to keep
the units locked, or relock an unlocked unit.

Perhaps What is needed is the code modified from the NA model, and not from the Fonage model?? This may prevent factory defauil from being a Locked state??

Re: RT31P2 Unlock thoughts??

Thu, 26 Oct 2006 07:56:40 EDT
havarian : what was the value of
"Resync From SIP"

Re: RT31P2 Unlock thoughts??

Wed, 25 Oct 2006 21:41:34 EDT
markosjal : Mazillo,

Yes I know what the provision feature is and it was disabled for both firmware and configuration. I had turned them on for the generic PAP2 config file , as well as the Fo*age current firmware. They were immediately disabled after doing so. I am inclined to believe as someone suggested that it is a bug. That would also explain why Fo*age is so quick to replace units.

Christcorp,

If you read my post the factory reset was performed AFTER thew web interface became unavailable, with no further recourse. In other words it was a last resort. Interesting however that it retained MY programming and will not Fo*age provision. I guess since it has never been on a Fonage account it should be expected, as there is nothing to provision. It may be different had it at one time been on an account.

It does not bother me too much at least it is locked to where I can use it.

BTW I am no Newbie at unlocking. I have never unlocked a PAP2 but many others.

Re: RT31P2 Unlock thoughts??

Wed, 25 Oct 2006 21:18:15 EDT
christcorp : Well, ALL of the different unlocks for the different adapters pretty much all have one thing in common. You do a factory reset, and all bets are off. They revert back to the way they were.

There are two exceptions to this, possibly more. 1st: When unlocking the PAP2, once it is unlocked, because the adapter is pretty much the same as a Sipura SPA1001, there is a modified version of the SPA1001 firmware that can be loaded into the unlocked PAP2. Now, you can factory default it all you want. Because it thinks it is a Sipura SPA1001, it doesn't know how to phone home to Vonage.

The 2nd exception is that the RT31P2 has had the actual code broken, so that means you can actually program a new chip and replace it in the RT31P2. Then, for all intent and purposes, you have a truly unlocked version. Obviously, this takes a little more doing.

So, for all thos who want to salvage your vonage adapters so you can use them with other providers, once you are done unlocking the firmware, bypassing the passwords, and have turned provisioning off, DON'T FACTORY RESET THE ADAPTERS!!! Later... Mike....

Re: RT31P2 Unlock thoughts??

Wed, 25 Oct 2006 20:52:23 EDT
anon : Long time lurker, first time poster, keep up the good work! :)

I followed through with unlocking my unit, but I've noticed that whenever I do a factory-reset everything reverts back to locked settings. Am I missing an important step or is this just how things are? (Mind you, I don't sit around resetting my modems all day, of course. :) )

Thanks in advance!

Re: RT31P2 Unlock thoughts??

Wed, 25 Oct 2006 08:03:55 EDT
mazilo :
said by danlr :

I don't think they will bother to do that. Some of the boxes are thrown away. There are thousands boxes not connected and they must use time and resources to do it. I don't think so.
It would be nice if they can send them to me to use instead of throwing them away. ;)
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Wed, 25 Oct 2006 08:02:42 EDT
mazilo :
said by booBot :

I once asked if Fonage (or any other VoSP) is able to hijack an RT31P2.
What did they tell you?

Now I'd like to know if and why they seem to be able to reclaim the unlocked box back?

How could they do it - provided we erase all provision-related settings?
Officially or unofficially? For the later part, you will have to find a loop hole and use it to exploit to hijack the device.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Wed, 25 Oct 2006 08:00:40 EDT
mazilo :
said by markosjal :

It seems almost as if somehow , perhaps a countermeasure has been taken on unlocked units??
Do you know what a [i]Provision[i] feature is and if it is enabled?
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Wed, 25 Oct 2006 06:29:39 EDT
danlr : I don't think they will bother to do that. Some of the boxes are thrown away. There are thousands boxes not connected and they must use time and resources to do it. I don't think so. But you can lose the access to the router because of some glitches in the software which is not perfect that's why they keep issuing new versions. Some of the routers are really coffee machines.

Re: RT31P2 Unlock thoughts??

Mon, 23 Oct 2006 09:16:27 EDT
booBot : I once asked if Fonage (or any other VoSP) is able to hijack an RT31P2.

Now I'd like to know if and why they seem to be able to reclaim the unlocked box back?

How could they do it - provided we erase all provision-related settings?
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.05/v3.1.09LId)

Re: RT31P2 Unlock thoughts??

Sat, 21 Oct 2006 02:16:11 EDT
markosjal : Like another here , I unlocked my rt31p2 about a month ago. Somehow in the last 24 hours the router section password has seemed to to have changed!

I had unlocked it and upgraded to the latest fonage firmware which seemed to work fine.

I then used the PAP2 Pseudo Reset on it.

I had accessed the router YESTERDAY with a known password, and did not change the password at all.

All provisioning has been disabled!

After finding out I could not access the Router section, I did a factory reset. The unit is not locked on the accounts for which it was programmed when unlocked. Yes it still works with the accounts I set up. I had saved the GPP key if that may help but it is a mystery as to how the router became inaccessible. It acted as if I did not have the password , but I know what the password was set to!

It seems almost as if somehow , perhaps a countermeasure has been taken on unlocked units??

I will leave it disconnected tonight and see if it will provision from fonage in the morning

Re: RT31P2 Unlock thoughts??

Thu, 19 Oct 2006 17:47:58 EDT
anon : I have about (1500) Vonage locked RT31P2's, if someone has a working unlock scenario, and wants to make some $$ unlocking these, please shoot me an email slushfund2005@yahoo.com

Re: RT31P2 Unlock thoughts??

Thu, 19 Oct 2006 15:19:06 EDT
peve : Just wanted to express my appreciation to all those that have worked on solving this problem with special thanks to meister_sd for his work and advice and christcorp and bommenarao for posting written "How-to" manuals to unlock the RT31P2 and WRT54GP2 units.

I have been able to succesfully unlock both following their instructions. Now to get them setup for a different provider!!

PV
--
.98M DW6000 G11 91W 1070 Small Business Level - 1.2M DW7000 Access 300 Plan G11 1050 V-Uplink - Unasat 1.2M 4W 3M/256K IA8 Babytel VoIP

Re: RT31P2 Unlock thoughts??

Thu, 19 Oct 2006 14:46:03 EDT
luckyxie : I unlocked my WRT54GGP2 about couple weeks ago, and today I found I am not able to access to network neither LAN or wireless LAN, I power cycled the box couple time with no help, so I press and hold the reset buttom for about one minute, the box became locked, and bad thing is the backup file for the GPP_K key was destoryed by formatting harddrive on my old computer.

Re: RT31P2 Unlock thoughts??

Thu, 19 Oct 2006 14:31:30 EDT
luckyxie : I unlocked my WRT54GGP2 about couple weeks ago, and today I found I am not able to access to network neither LAN or wireless LAN, so I press and hold the reset buttom for about one minute, the box became locked.

Re: RT31P2 Unlock thoughts??

Thu, 19 Oct 2006 14:11:28 EDT
christcorp : I can't directly answer your question, but maybe one of the "FAB-4" can. I however just have to ask. How do you "Accidently Facotry Reset" the adapter? It takes an act of congress for most people to figure out "HOW" to do it. If there is an "Accident" way of doing it, it would definitely be nice to know, so it doesn't happen to others. I'm sure what you meant to say was that after unlocking your adapter, you had a brain fart and forgot that you shouldn't do a factory reset.

But, being you are asking, when you did the unlock and had access to the adapter's voice section, did you write down all the important info that is recommended like the GPP_K key? If you have all the correct information, you can then just get the admin username and password and you don't have any worries. Like I said, I don't really have an answer for you, but maybe one of the Fab-4 will chime in. Later... Mike...

Re: RT31P2 Unlock thoughts??

Thu, 19 Oct 2006 13:58:18 EDT
luckyxie : I need some help here, I unlocked my WRT54GP2 follow instruction with no issue, but I accidently did Factory reset on the box,now the box is locked again and the user password is not working when for the downgrade firmware, anyone has ideal?

Thanks

Dual Server - open source DNS & DHCP server

Tue, 17 Oct 2006 12:05:13 EDT
havarian : I made small modifications to the GPL DualServer (DNS & DHCP) to build under windows, and to accept non standard dns names.

the source and binary are attached.

I didn't try the dhcp part.

you can use the attached ini file, set your device to Static ip
ip 192.158.0.100
mask 255.255.255.0
gateway 192.168.0.1

Re: RT31P2 Unlock thoughts??

Mon, 16 Oct 2006 10:47:22 EDT
borispr : It's everything fine with unlock procedure, but now I think about provisioning for myself.
I want to configure provisioning section so if I'll forget password, I just start tftp server and restart the device. Device will connect to my tftp server and will get the magic unlocking xml file.
Could anybody explain what I should place in provisioning tab and can I use that unlocking xml file?

Re: RT31P2 Voice Administrsation page Unlock thoughts??

Sat, 14 Oct 2006 01:48:36 EDT
tbishop1 : I am trying to get to the Voice Administrsation page on a
RT31P2, I have read all the info that I can find on here about it but has anyone actually got a working username and password?? I'd like to tweak some setting :) :) :)

Any help on how to get into this thing would be great, i'd like to use it for something other then vonageeeeeeee.

Thanks,
T Bishop

Re: RT31P2 Unlock thoughts??

Thu, 12 Oct 2006 06:59:20 EDT
anon : Before an unlocked methods was discovered I tried brute forcing the Voice admin password with AccessDiver.

Once a method was discovered, I connected my box to the internet and made a few calls. Then I followed the unlock procedures provide by meiser_sd and other and was successful. I unlocked my rt31p2 and then unencrypted provision file from the vonage tftp server. In the provisioning file the voice admin account was disabled (means there was no admin password to be brute force). There was only a user account active. I guess V0nage3 is becoming craftier. Also, this means my brute forcing efforts were never going to work. I read some posts in this thread and unencrypting the provision file by others provided an admin account and associated password. Has anyone else discovered that the Voice admin account was disabled?
Thanks meister_sd and company for discovering the unlock method.

Re: admin password

Tue, 10 Oct 2006 12:18:34 EDT
danlr : This was the password found after I decrypted the spaMAC.htm file from Vonage tftp server. Of course they pushed in my box the last version but I downgraded to 1.17 to feed the box with the plain text xml file. This password is not related to any version of the firmware.

Re: admin password

Tue, 10 Oct 2006 09:41:57 EDT
anon : do you know which firmware version it had when you used this password?

mine was user 7756112 and firmware version 1.30.01

Re: WRT54GP2's Unlocking Instructions

Mon, 09 Oct 2006 20:41:37 EDT
anon : Thanks mazilo, i just did that to 2 of my 3 wrt54gp2 and one upgraded and i was able to downgrade with the hacked firmware, now im provisioning it with the dummy xml file, but the other one havent upgraded in 2 days, i have read something about low ram memory i dont remember where so i have disabled wlan and leave it connected all night. tomorrow i will see if it upgraded.

Re: WRT54GP2's Unlocking Instructions

Mon, 09 Oct 2006 20:26:56 EDT
mazilo :
said by enzomx :

i have same issue, i cant upgrade firmware, so i cant login to voice admin page with any of these passwords.
I believe you need to let your RT31P2 connect to the Internet to get it provisioned by Vonage. Then, use one of the user password to perform the firmware upgrade to unlock.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: admin password

Mon, 09 Oct 2006 17:52:35 EDT
danlr : I decrypted mine too and has the password 49630528. So I think that the password is variable.

Re: WRT54GP2's Unlocking Instructions

Mon, 09 Oct 2006 11:05:34 EDT
anon : i have same issue, i cant upgrade firmware, so i cant login to voice admin page with any of these passwords.

i installed apache and tftp on my pc and it only provision the xml file, never asks for the firmware file, im using ethereal to monitor the lan and no clues of firmware asked from the router.

any one has another method to upgrade firmware or force router to upgrade??

Re: RT31P2 Unlock thoughts??

Sun, 08 Oct 2006 03:25:29 EDT
markosjal : I did not use simple DNS, as I kept getting errors in it (in windows 2000)and found it difficult to understand. Instead I used Winproxy and edited the hosts file in Winproxy (not windows). It at least gives you 30 days as I recall. I posted this procedure at one time to unlock a lingo UTSRACOM ian-02ex, »Unlocking from Windows!

Also I upgraded to the current Vonage Firmware and had some issues with pages loading in the web interface.

I then downloaded the vonage firmware again, as well as the PAP2 Pseudo reset files (Link below) to clear out the vonage crap. Unfortunately , still the SIP page came up blank. and would nt work till I copied all the default settings out of my sipura field for field on the SIP page.

»Re: [Unlocked PAP2] Now you can PSEUDO factory reset it
anyone who wants to modify this and post it it would be a welcome addition

Great boxes, I bought 20 off of ebay at less than 10 dollars each with shipping! I never did unlock a PAP2 they really had little to offer. These units on the other hand rule!

Now what I want to know are about the comments in red at the bottom of the hacked firmware. It seems to imply that the pages are not to be used.

Once arriving at the unlocked point , has anyone tried the generic firmware?

it appears as though very soon , I will have extensive experience unlocking these as I will be unlocking 10 more units and an associate the other 10 units. Hopefully I will not make too many bricks out of them!

Re: Bricked WRT54gp2

Sat, 07 Oct 2006 07:21:47 EDT
mazilo :
said by havarian :

if anybody think that he can fix it, I'll send it to him, and I'm willing to pay for the shipment and any other cost.
If you mean to give it away, then count me in and we will take it from here through the PM. I can always make use of this as a hacking tool. ;)
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Bricked WRT54gp2

Sat, 07 Oct 2006 01:12:14 EDT
havarian : I have a bricked WRT54gp2, the power light keeps flashing. when it power on, it does a self test, and the 2 voip lights flash once.
the ethernet is up when I connect the pc to the LAN or wan.
however, it doesn't send or respond any packets.
I tried to access it by mac address using static ARP but without success. I also tried TFTP, linksys recovery tool while reboot, also without success.

if anybody think that he can fix it, I'll send it to him, and I'm willing to pay for the shipment and any other cost.

Re: admin password

Mon, 02 Oct 2006 14:06:15 EDT
christcorp : It doesn't work that way. Unless I am still having flashbacks from the early 70's. LOL!!! While there are generally only 6 or 7 user passwords to get into the firmware upgrades and such, that doesn't mean that there are only 6 or 7 admin passwords to get into the voice provisioning section.

Your admin password is unique. It is decrypted when you know your GPP_K key. Remember, it's a circle that you are going around. We unlock the adapter, so we can get the GPP_K key, so we can decrypt the admin password, so we can unlock the adapter. (Basically, the last step is so we don't have to go through the first 3 steps again in case of a factory reset). Of course, with the PAP2, I am lazy. I convert the PAP2 to a SPA1001 adapter. (Thx Rizzo). This way you can reset it, factory reset, etc... all you want and it won't get reset again.

But, as far as I know, which doesn't neccessarily mean a lot unless compared to people without modern technology, your admin password isn't linked to certain ones based on the user password. Later... Mike....

P.S. "Lord, forgive me for picking on people without modern technology. And bless the starving pygmies in New Guinea".

admin password

Mon, 02 Oct 2006 13:19:03 EDT
havarian : I decrypted my xml file, the password is
admin 41958027, user 7756112
has any one decrypted the admin password for 8995523

Re: RT31P2 Unlock thoughts??

Sat, 30 Sep 2006 10:35:37 EDT
skypeuser : Thanks! DogFace05,

I might have to go for this. I am looking into a few other options first. I appreciate you help.

:D

Re: RT31P2 Unlock thoughts??

Sat, 30 Sep 2006 02:02:30 EDT
DogFace05 : If you want something completely free and don't mind editing zone files, etc, by hand, then you can get BIND from "http://www.isc.org". Be aware though that this app is lightyears away from user friendly--definitely not for the faint at heart.

Re: RT31P2 Unlock thoughts??

Fri, 29 Sep 2006 22:19:15 EDT
skypeuser : Thanks! mazilo,

I do not run linux, but I will keep looking for a windows application.

:huh:

Re: RT31P2 Unlock thoughts??

Fri, 29 Sep 2006 21:40:14 EDT
mazilo :
said by skypeuser :

How are you guys continuing to do this unlock process once your tril expires??? Any help is appreciated.
If you use a Linux, this DNS/TFTP/FTP/HTTP servers come for free and no expiration date. As a matter of fact, they all come with the source code, too.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Fri, 29 Sep 2006 20:16:14 EDT
skypeuser : What DNS server is everyone using for Windows once your 14 day trial for SimpleDNS expires. Is there a way to remove what ever way SimpleDNS is recognizing me. I cleaned out everything but some how they know my trial period has expired. How are you guys continuing to do this unlock process once your tril expires??? Any help is appreciated.

:D

Re: RT31P2 Unlock thoughts??

Fri, 29 Sep 2006 19:28:25 EDT
anon : reply to meister_sd
Two possibles. One is when you use the HOST file, you may need to reboot for it to take effect. The other is on the router handling your DHCP/DNS, make sure DNS is hand coded to your computers IP running all the stuff.

I have successfully setup the tftp server and simpledns. I am using the router, rt31p2, pc combination instead of pc, rt31p2 combo. The rt31p2 requested the spa file from location NBfW9wmg2T\spaxxxxxxxxxxxx.xml. I then place the spa file into the afore mention location and restart the rt31p2. I receive the error below:

:Transmit error while sending to 192.168.4.3 : The connection is reset by remote side

I have tried XP's tftp client with the following command:

tftp -i ls.tftp.vonage.net get \NBfW9wmg2T\spaxxxxxxxxxx.xml

and the transfer occurs flawlessly. Any ideas?

Re: RT31P2 Unlock thoughts??

Thu, 28 Sep 2006 06:26:31 EDT
danlr : Thanks christcorp. I did it and now is faster and the pages look better.

Re: RT31P2 Unlock thoughts??

Wed, 27 Sep 2006 09:23:19 EDT
christcorp : Did you unlock your RT31P2? If so, did you use the instructions by meister_sd on page 25 of this thread? If so, did you read the very next post after the unlock instructions; by rcilink? That might be the question that you answer no to.

As far as should you upgrade or not, that is a personal decision. Obviously, firmware upgrades are put out for a reason. Usually to fix a problem with the product. If you are having issues with the product, then upgrade. If the product is doing everything you expected, and you are happy with it, then don't upgrade. Later... Mike...

Re: RT31P2 Unlock thoughts??

Wed, 27 Sep 2006 07:16:11 EDT
danlr : After unlocking RT31P2 is worth to upgrade to the last firmware? If yes How? Thanks!

Re: RT31P2 Unlock thoughts??

Wed, 27 Sep 2006 05:55:41 EDT
anon :
said by meister_sd :

Two possibles. One is when you use the HOST file, you may need to reboot for it to take effect. The other is on the router handling your DHCP/DNS, make sure DNS is hand coded to your computers IP running all the stuff.

I will try the reboot. But the Router DNS is N/A b/c I forgot to mention that I am connecting from PC to RT31P2 WAN port for this process (no router). I have both the RT31P2 and PC set to static IP's. I set the default gateway for the PC to the IP of the RT31p2 and default gateway of RT31P2 to IP of PC. I set DNS for both to IP of PC.
When you mention reboot do you mean PC reboot or SDNS software reboot? I did do a SDNS software reboot, but not a PC reboot. I will try PC reboot when I make it home.
I tried with and without the XP DNS client of being disabled. I pointed the Simple DNS server at the host file provided, is this correct?
Thanks for your help meister_sd

Re: RT31P2 Unlock thoughts??

Tue, 26 Sep 2006 20:00:16 EDT
meister_sd :
said by RT31P2 :

I am stuck. Help.

Two possibles. One is when you use the HOST file, you may need to reboot for it to take effect. The other is on the router handling your DHCP/DNS, make sure DNS is hand coded to your computers IP running all the stuff.

Re: RT31P2 Unlock thoughts??

Tue, 26 Sep 2006 19:35:50 EDT
anon : I was able to downgrade to the firmware posted by meister_sd for my rt31p2. I installed solarwind tftp server and simple dns server. I created the flat xml file with no extra spaces and placed it in the root tftp directory. I used the host file that was posted with changes by me to reflect the address of my pc which ran the two servers. Using simple dns, I can perform a lookup of ls.tftp.vonage.net and receive a reply with the address of my pc. Also, I have disabled my firewall. I restart the rt31p2 to allow it to grab the flat xml file, but according to the tftp server it never downloads it. Simple DNS is seeing DNS requests during startup, but a closer analysis with ethereal reveals that the rt31p2 never asks for the xml file at all. I am stuck. Help. Thanks in advance to all.

Re: RT31P2 Unlock thoughts??

Tue, 26 Sep 2006 16:35:26 EDT
meister_sd :
said by ugul :

here you go :)

Vendor:Linksys
Model Name:WRT54GP2
Firmware Version:1.28.03, May 10 2005
#:000
Voice Version:2.0.13(LIb)
Boot Version:
CodePattern:WKP2
Country:USA

The WKP2 means you have a -NA. This is usually an already unlocked unit. You should be able to access the voice area and if you can't - unplug the router, hold down the reset button in the back and plug it back in. Keep holding the button for 30-40 seconds and then after that you should have access to the voice area. Remember - this totally erases all your configuration.

If you just need the latest firmware, go here:
»autoprov.ionosphere.net/firmware···code.bin

Re: RT31P2 Unlock thoughts??

Tue, 26 Sep 2006 11:02:14 EDT
ugul : here you go :)

Vendor:Linksys
Model Name:WRT54GP2
Firmware Version:1.28.03, May 10 2005
#:000
Voice Version:2.0.13(LIb)
Boot Version:
CodePattern:WKP2
Country:USA

RF Status:Enable
RF Firmware Version:C_2.16
RF Domain:USA (Channel 1 ~ 11)
RF channel:6
RF SSID:linksys

-----Dynamic Information
RF Mac Address:xx-xx-xx-xx-xx-xx
Device Mac Address:xx-xx-xx-xx-xx-xx
WAN Mac Address:xx-xx-xx-xx-xx-xx
Hardware Version:
Device Serial No.:
cal_tbl:332d5041 5b7a0078 09441b01 00000000 00000000 00000000 bfffbfff bbffbbff
bbffbbff b7ffbbff ffffffff ffffffff ffff4010 ffffffff 00000000 1ebd0000
Free buf = 533

Re: RT31P2 Unlock thoughts??

Tue, 26 Sep 2006 10:32:28 EDT
meister_sd :
said by ugul :

Is there some way to unlock without getting provisioned first?

Maybe. Can you post the information in SysInfo.htm?

Re: RT31P2 Unlock thoughts??

Tue, 26 Sep 2006 06:23:33 EDT
ugul : I have a virgin WRT54GP2 and it has firmware 128.03 / 2.0.13(Llb).
I tried to downgrade firmware to 1.27 2.09 and also tried 1.20 via web interface and about half way through it says "Upgrade action is not completed! Upgrade file pattern error" Is it ok trying this firmware with a device not locked to vonage?

Is there some way to unlock without getting provisioned first?

Upon startup it is immediately looking for 2 DNS Servers by IP and does not fallback to its DHCP assigned DNS server.

Re: RT31P2 Unlock thoughts??

Mon, 25 Sep 2006 18:15:45 EDT
danlr : Finally I got my vonage RT31P2 unlocked. Thanks MEISTER and all other here you posted. I had problems in every step but thanks to you guys I succeded. after I downgraded to 1.17 using the password 899... I instaled dns plus and solar wind. I connected the WAN port directly to my laptop after enabling remote admin in administration tab, Then I used the host file posted here and when the adapter requested the file I feeded from the directory it wanted. I don't know what was wrong first but then I changed the xml file with one other and voila - the voice_adminPage was open. I turned provisioning to of and removed everything has vonage in it. The time is updated to time.nist.gov.

Re: RT31P2 Unlock thoughts??

Mon, 25 Sep 2006 14:12:24 EDT
crju : First of all, THANKS.

I kept using the same xml file each time and did not notice I had put an extra line space that was screwing the whole process up.

I made a fresh xml file and it worked perfect.

Thanks for the help,

crju

Re: RT31P2 Unlock thoughts??

Mon, 25 Sep 2006 13:55:44 EDT
crju : Tangojoker,

I used bommenarao's xml file. I never have problems. I typically sit on the side lines and follow the directions and all is good.

I will try it again with a fresh file,

crju

Re: RT31P2 Unlock thoughts??

Mon, 25 Sep 2006 13:55:07 EDT
meister_sd : Remember, leave no spaces at the top or bottom. Here is the code again:

Yes
80
Yes

No

Re: RT31P2 Unlock thoughts??

Mon, 25 Sep 2006 13:52:15 EDT
tangojoker : crju,

which XML file did you use ?
i had similar issues.
i then used the XML file as specifed in bommenarao's instructions. it worked for me.

Re: RT31P2 Unlock thoughts??

Mon, 25 Sep 2006 13:52:12 EDT
crju : meister_sd

I copied all info via notepad. Double and triple checked.

The info in the xml file (via notepad)is as follows:

Yes
80
Yes

No

Let me know if I missed something.

Regards and thanks for the help,

crju

Re: RT31P2 Unlock thoughts??

Mon, 25 Sep 2006 13:46:29 EDT
meister_sd : Make sure the code was copied into Notepad and not Wordpad. You need everything that is in the blue box I put up.

Re: RT31P2 Unlock thoughts??

Mon, 25 Sep 2006 13:44:42 EDT
crju : I have the WRT54GP2. I have followed the instructions to the letter. I have downgraded the firmware as advised and confirmed it downgraded properly. I have sent the xml file via solar winds and it shows that it was sent. When I attempt to access the hidden voice page, I still get a request for a user/password.

I have followed the process 4 times. I am guessing that the xml page is not taking for some reason (although I show it was sent via solar winds).

Any advise would be appreciated.

Re: RT31P2 Unlock thoughts??

Mon, 25 Sep 2006 00:55:20 EDT
meister_sd :
said by testQ :

Here it is. Just changed the mac id info

I looked all over and couldn't find the firmware upgrade. It isn't on vonage's http or tftp site.

»httpconfig.vonage.net/WRT54GP2_v···code.bin

What is the serial number of the unit?

Re: RT31P2 Unlock thoughts??

Sun, 24 Sep 2006 16:41:27 EDT
testQ : Here it is. Just changed the mac id info

Vendor:Linksys
Model Name:WRT54GP2
Firmware Version:1.25.00, Nov 16 2004
#:000
Voice Version:2.0.12(LI)
Boot Version:
CodePattern:WP31
Country:USA

RF Status:Enable
RF Firmware Version:C_2.16
RF Domain:USA (Channel 1 ~ 11)
RF channel:6
RF SSID:linksys
-----Dynamic Information
RF Mac Address:00-xx-xx-xx-xx-xx
Device Mac Address:00-xx-xx-xx-xx-xx
WAN Mac Address:00-xx-xx-xx-xx-xx
Hardware Version:
Device Serial No.:
cal_tbl:332d5041 00120078 09441b01 00000000 00000000 00000000 b7ffb7ff b3ffb3ff
abffafff a7ffabff ffffffff ffffffff ffff4010 ffffffff 00000000 1d9e0000
Free buf = 535

Re: RT31P2 Unlock thoughts??

Sat, 23 Sep 2006 14:43:52 EDT
meister_sd :
said by testQ :

These units were never talked to service provider before and brand new from the box.

Thanks for your help.

Please post the SysInfo.htm page also. I may be able to create a firmware for you without needing to put them on the internet.

Your welcome. ;)

Re: RT31P2 Unlock thoughts??

Sat, 23 Sep 2006 14:41:35 EDT
meister_sd :
said by aup2 :

(I hadn't accessed it in a while), but clicking the "continue" button took me to the page. Thanks.

I only meant that if you keep getting the message then there is something wrong. This message should go away in a few seconds and if it doesn't, this usually means it's dying.

Re: RT31P2 Unlock thoughts??

Sat, 23 Sep 2006 14:32:43 EDT
skypeuser : Anyone know of a good replacement for the simple dns server. I have tried everything to get another free 14 day
trial, deleted everything on my computer that I could find from simple dns. They some how still know who I am. If you know how I could redownload the simlple dns without having them realize that my 14 day trial has expired.

Thanks for your help,
skypeuser

Re: RT31P2 Unlock thoughts??

Sat, 23 Sep 2006 14:03:35 EDT
christcorp : It is my understanding, is that for the flat xml file to work, it had to be done on the lower firmware version. It is also my understanding, that in order to do a firmware upgrade, downgrade, etc... you had to use the proper user name and password. Admin/Admin is NEVER the right user name and password for Firmware upgrades. It is also my understanding, that once the firmware downgrade has occurred, then the flat file can be inputted which will take OUT the user name and password, which then allows for access to the SIP section, as well as future firmware upgrades, without the need of a user name and password. Later.... Mike...

Re: RT31P2 Unlock thoughts??

Sat, 23 Sep 2006 13:52:04 EDT
testQ : Hi friends,

Here is my situation:
Router/ATA Box model: WRT54GP2
Voice Version: 2.0.12 (Li)
Router Version: 1.25.00 Nov 16 2004

1) Can access the router functionality using user/pass as admin/admin
2) When tried for the 192.168.15.1/Voice_adminPage.htm pops up with userid/passwd and does not take admin/admin
3) Can access and start firmware upgrade with admin/admin but in the middle of process asks for userid/passwd and does not take any mentioned userid/password in the thread including admin/admin or userid/xxx (where xxx is a numeric passcode)
4) Can able to upload the XML file but, seems no effect on the box.

I am looking help desperately and tried so far a week on this and absolutely no progress on this.

Your help on this is very much appreciated. These units were never talked to service provider before and brand new from the box.

Thanks for your help.

Re: RT31P2 Unlock thoughts??

Sat, 23 Sep 2006 10:14:44 EDT
aup2 : said by meister_sd :

I often get this message "Router is synchronizing services. Please wait a moment." with a continue button.

Your box is dying. This device has two parts to it, the router and the voice. It seems Linksys "spliced" two of their products together to make this. The message says the router is trying to talk with the voice and it is still working things out. If the message keeps appearing, the device isn't working right. Now - if you check voice right after plugging it in or after a factory reset, you may just have to wait a few more seconds but it shouldn't take but a few seconds. This isn't a browser issue or a cookie issue - this is a live message.

Just to clarify: You mean the box is dying only if the message keeps reappearing without taking you to the Voice Admin page, right? I happened to get this message just now when I accessed the Voice_adminPage.html (I hadn't accessed it in a while), but clicking the "continue" button took me to the page. Thanks.

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 17:00:06 EDT
meister_sd :
said by supercool1 :

Anything that i can download? ideas...

When you try to do an upgrade, two things are upgraded. One is the router chip and the other is the voice chip. If the device keeps telling you it's syncing then it's not talking to the voice module which means an upgrade/downgrade won't work because it can't perform the upgrade. If you get past the message you may have luck with upgraded firmware so go with the latest, the v1.30.

said by booBot :

Is Fonage able to hijack my (never locked to them) RT31P2-EU? Is any VoSP able to do this?
Providers don't "hijack" they provision. This is a useful tool to program many different boxes and subscriptions. You can take the programming information of another box and put it in yours and the provider will lock your box too - because that command is in the provisioning. If you unlock a box, usually there is a tab (In the RT31P2/WRT54GP2 it's in the provisioning tab) that says Enable Provisioning Yes/No and you can choose. Also, if you erase the provisioning information then it won't matter if you have provisioning on or off since there isn't anything to transmit back to a server (it's blank). If a device doesn't have an off/on or yes/no to provisioning (like the pap2v2), then you can set the provisioning servers IP to 127.0.0.1 and that will basically shut off provisioning because it's looking to itself for information.

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 12:27:16 EDT
ogammo :
said by christcorp :

Did you get rid of the vonage dns? Put in your regular ISP dns, or at least a generic Level 3 DNS like 4.2.2.1 and 4.2.2.2. Later... Mike...

i did cancel them and i didnt put anything there , it is working now and i ahve dial tone and i called allready, the last problem is the lid which is not lit. but this is another issue will see laso why. thanks a lot for all
miester_sd,mazilo,chris,champler and sorry if i forgot somebody

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 12:10:31 EDT
christcorp : Did you get rid of the vonage dns? Put in your regular ISP dns, or at least a generic Level 3 DNS like 4.2.2.1 and 4.2.2.2. Later... Mike...

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 11:03:59 EDT
ogammo :
said by christcorp :

Ogammo. As far as you canceling those entries, that is a separate issue. I just told you how to get into the SIP section. In the other post, I showed you how to get your xml file from vonage. I haven't followed what it is you are having problems with. Sorry about that. You'll have to put the pieces together, or pick back up your Q&A with the guys who have been helping you. I was just getting you past a speed bump. It's probably not good to have another person jumping in. But I will go back later when I have some more time and try and look at what your original problem is. Like I said, I just saw that you had a problem getting your xml and getting into the SIP page. That was a quick answer. later... Mike....

my problem is i cant get a dial tone , i do have another rt31p2-na and the page inside is different thats why i am asking if i do the vonage one like that -NA

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 10:46:15 EDT
B : Well it's also the hidden admin page on at least some Sunrocket Innomedias. I've never used a Linksys.

My best guess is that Sunrocket did that themselves (the Voice_adminPage link) to try to get some consistency across adapters. Either that, or the Innomedias share more with the Sipura lineage than I would have thought. Hmm.

-- B

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 10:39:24 EDT
christcorp :
said by B :

Huh? That's the URL syntax for the Innomedia. I thought it and the Sipura/Linksyses were completely unrelated?

-- B

What are you talking about B? The 192.168.15.1/Voice_adminPage.htm That I put in??? That's the default web page for a linksys voip adapter/router. The voice admin htm is the hidden page for SIP access for the router version. The PAP2 doesn't need that, because there isn't a default router section.

Ogammo. As far as you canceling those entries, that is a separate issue. I just told you how to get into the SIP section. In the other post, I showed you how to get your xml file from vonage. I haven't followed what it is you are having problems with. Sorry about that. You'll have to put the pieces together, or pick back up your Q&A with the guys who have been helping you. I was just getting you past a speed bump. It's probably not good to have another person jumping in. But I will go back later when I have some more time and try and look at what your original problem is. Like I said, I just saw that you had a problem getting your xml and getting into the SIP page. That was a quick answer. later... Mike....

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 10:23:12 EDT
B : Huh? That's the URL syntax for the Innomedia. I thought it and the Sipura/Linksyses were completely unrelated?

-- B

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 10:19:48 EDT
ogammo : ok, thank u , i didnt know about this

now should i cancel these

time.vonage.net
ntp1-nyc.vonage.net

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 10:12:33 EDT
christcorp : It's not in the regular menu. It's a "Hidden" menu. If you followed the unlocking procedure, at the end, Meister noted the location. Assuming you still have the adapter at the default IP address, it at:

»192.168.15.1/Voice_adminPage.htm

Make note that capital letters and little are important. Later... Mike...

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 10:06:04 EDT
ogammo :
said by christcorp :

Very first entry on provisioning page allows for provisioning: Yes or No. Change it to NO. Later... Mike...

in the rt31p2 there is no page for provisioning , there is the pages for line one or line 2 with the setting for it but no such thing about provisioning (yes or no).

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 09:26:50 EDT
christcorp : Very first entry on provisioning page allows for provisioning: Yes or No. Change it to NO. Later... Mike...

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 08:55:59 EDT
borispr : Finally got it!
RT31P2 was sending DNS requests directly to 216.115.24.230 and another address that are vonage dns servers and was completely ignoring DNS setting in network setup. In that case I couldn't give it my address of tftp server.
Finally I have added 216.115.24.230 as another address to router and my DNS got a chance to answer. After that it successfully got spaMAC.xml and know it is UNLOCKED!!!
Thanks to meister_sd!

Tell me please what should be changed in Provisioning tab to prevent RT from provisioning from vonage.

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 08:36:21 EDT
booBot : No, the box is "clear" - never was locked to any of VoSPs. But I noticed - the Provision settings are "ON" by defaulf (with all relevant fields blank). And once I saw "the device is resyncing" page while trying to log-in - that's what got me scared.
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.05/v3.1.09LId)

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 08:24:16 EDT
mazilo :
said by booBot :

Is Fonage able to hijack my (never locked to them) RT31P2-EU? Is any VoSP able to do this?
Is this a Vonage device? If so, I believe it can be done should Vonage want to. If no, then you have to not worry about this issue unless the device has a factory default settings for other VoSP which that VoSP may be able to do so. This is just my opinion.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 08:08:36 EDT
booBot : A bit of off-topic, just curious.

Is Fonage able to hijack my (never locked to them) RT31P2-EU? Is any VoSP able to do this?
I mean - if by mistate someone leaves the "Provision" enabled or "resync on SIP" or something...

(I do not have .NET here, so I cant try it myself. What will VuckFonage fetch from there if I use MAC of mine?)
--
Saint-Petersburg, Russia.
RT31P2-EU(v1.30.05/v3.1.09LId)

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 06:11:53 EDT
mazilo :
said by supercool1 :

What are my options? Can i downgrade to a lower firmware from vonage and try to upgrade back. I could find a vonage lower firmware for wrt54gp2. Anything that i can download? ideas...
I have just posted this, steps needed to perform a factory reset and re-unlock an RT31P2 without letting it provision to Vonage, for ogammo. Perhaps, the post will also help you to replace your WRT54GP2 current settings with factory default configurations. Who knows this will help you to resolve the problems you are facing with your WRT54GP2.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: busy tone

Fri, 22 Sep 2006 02:58:30 EDT
ogammo :
said by floriantet :

Hey ogammo, I had a similar symptom when Registration Time-out was empty (probably equivalent to 0 seconds), I do not know if that is your case - just check that (default for PAP2 3600).

there is nothing inside the rt31p2 that require time out for registration. unless i dont see it. could u please give details where it is hidden
thanks

Re: RT31P2 Unlock thoughts??

Fri, 22 Sep 2006 00:08:02 EDT
supercool1 :

Your box is dying. This device has two parts to it, the router and the voice. It seems Linksys "spliced" two of their products together to make this. The message says the router is trying to talk with the voice and it is still working things out. If the message keeps appearing, the device isn't working right. Now - if you check voice right after plugging it in or after a factory reset, you may just have to wait a few more seconds but it shouldn't take but a few seconds. This isn't a browser issue or a cookie issue - this is a live message.

I have never opened my box. That figures I have never been able to connect to FWD. What are my options? Can i downgrade to a lower firmware from vonage and try to upgrade back. I could find a vonage lower firmware for wrt54gp2. Anything that i can download? ideas...

Re: stuck partially unlocked

Thu, 21 Sep 2006 22:32:10 EDT
dmost :
quote:
Is this a vonage box? If not - then you need to get the passwords for that system.

Yes, it was locked to vonage before I read this forum ;)
I had it unlocked, and re-updated to latest firmware, but had issues with the web admin pages (they were not saving changes), so I did a factory reset and tried to repeat the unlock. I think in the process I uploaded a config file that was not the flat file, but a partially hacked up version I'd been playing with. (oops)

quote:
What is the firmware for your box? I've had good luck changing the voice module by keeping the router version the same. It seems the box will take the firmware and not ask for a password and then you just have to feed it the plain text XML file.

I'm using RT31P2_v1.17.02_000_combin_code.bin

Vendor:Linksys
Model Name:RT31P2
Firmware Version:1.17.02, Jul 22 2004
#:000
Voice Version:2.0.9(LId)
Boot Version:
CodePattern:R31P

RF Status:Enable
RF Firmware Version:C_2.15b

-----Dynamic Information
Device Mac Address:00-xx-xx-xx-xx-13
WAN Mac Address:00-xx-xx-xx-xx-14
Hardware Version:
Device Serial No.:
VM profile rule:

Which firmware has matching versions for voice and router? I'd love to give it a whirl. I've tried these so far:
RT31P2_v1.17.02_000_combin_code.bin
RT31P2_NA_v1.30.05_000_VM_3.1.09_LId_combin_code.bin
RT31P2_NA_v1.30.04_000_VM_3.1.07_LIa_combin_code.bin
RT31P2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin

But tried them with the linksys firmware uploader, not web admin page (yet).

Re: Setup FWD

Thu, 21 Sep 2006 22:19:26 EDT
thaychuari : I have no ideas what I am doing. It has been like this and working for over a year now. I don't know what STUN for or Outbound proxy. If it works leave it alone.

Re: stuck partially unlocked

Thu, 21 Sep 2006 21:58:25 EDT
meister_sd :
said by PhuptDuck :

Does anyone have ideas?

Is this a vonage box? If not - then you need to get the passwords for that system.

What is the firmware for your box? I've had good luck changing the voice module by keeping the router version the same. It seems the box will take the firmware and not ask for a password and then you just have to feed it the plain text XML file.

Re: RT31P2 Unlock thoughts??

Thu, 21 Sep 2006 21:56:21 EDT
meister_sd :
said by supercool1 :

I often get this message "Router is synchronizing services. Please wait a moment." with a continue button.

Your box is dying. This device has two parts to it, the router and the voice. It seems Linksys "spliced" two of their products together to make this. The message says the router is trying to talk with the voice and it is still working things out. If the message keeps appearing, the device isn't working right. Now - if you check voice right after plugging it in or after a factory reset, you may just have to wait a few more seconds but it shouldn't take but a few seconds. This isn't a browser issue or a cookie issue - this is a live message.

Now if you opened your box and messed around inside then you have that to work out.

Re: Setup FWD

Thu, 21 Sep 2006 21:27:06 EDT
mazilo : Just curious, unless you don't know what you are doing, is there any reasons why your configurations use STUN and Outbound proxy?
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: stuck partially unlocked

Thu, 21 Sep 2006 21:19:55 EDT
anon : ack, so my rt31pt is still locked.
I've snooped traffic using ethereal (wireshark).
I see traffic from the router in my DNS server log, and I see all traffic via ethereal. This box is not asking for its provisioning file.
I've held the red button down until my fingers were red. It resets the router settings, but not the voice settings.
I try to do factory reset. If I use administrator/8995523 the router hangs until I unplug it. When I plug it back it, it's not factory reset.
I tried to use firmware_upload_tool.exe, but after the last packet is sent up I get an error message (seen in ethereal) saying "voice module is locked !!".
I tried reloading firmware using web admin, but won't take any passwords. Tried 7756112, 8995523, 8995523, 8995523, 50274537, 78196365, 5465866 as user, admin, administrator. No luck.

In ethereal (and my dns server), I see requests DNS requests for time.nist.gov and time.windows.com, these are values I put into the config file before I locked myself out... If I lift up the phone receiver, I get DNS requests for fwd.pulver.net. There are no DNS requests for any other domains.

I've checked all traffic coming from the the router (both it's lan and wan addresses), there are no DNS, TFTP, or HTTP requests being made to an address other than my PC (except as noted above).

I've examined all HTTP requests as well. The box isn't making any except as a result of my using the admin pages. It had been making UPnP reqests, but I turned them off.

All the above is to say I'm pretty stuck. I suppose I could try to brute-force the password. Ho hum.

Does anyone have ideas?

Re: Setup FWD

Thu, 21 Sep 2006 20:56:17 EDT
thaychuari : I attached the pics of my setup.

Re: RT31P2 Unlock thoughts??

Thu, 21 Sep 2006 20:27:03 EDT
supercool1 : My WRT54GP2 has the latest Von firmware 1.30.01/3.1.16. When i try to access the voice admin page via 192.168.15.1/Voice_adminPage.htm I often get this message "Router is synchronizing services. Please wait a moment." with a continue button. On clicking it only takes me to the router admin page. I tried deleting cookies etc but it works rarely. My voice admin page has no password so it should pop up immediately. Any ideas. Is it some issue others are facing too. Please let me know.

Thanks

Re: RT31P2 Unlock thoughts??

Thu, 21 Sep 2006 20:09:50 EDT
meister_sd : If anyone has a device locked to Ionosphere, I can help you unlock it.

Re: Setup FWD

Thu, 21 Sep 2006 19:45:46 EDT
supercool1 : thaychuari,

if its not too much trouble could you just post the details for FWD connection. With my setting its always showing offline.

Thanks

Setup FWD

Thu, 21 Sep 2006 18:32:06 EDT
thaychuari : Use the setting from pap2 and it will work. If you dont have the setting from pap2, let me know.

Re: RT31P2 Unlock thoughts??

Thu, 21 Sep 2006 17:39:46 EDT
supercool1 : Finally got my WRT54gp2 unlocked. Does any one have a working Freeworld (FWD) setting for WRT54gp2. I have tried a few and dont seem to work. Anyone got this going?

Re: busy tone

Thu, 21 Sep 2006 14:37:32 EDT
floriantet : Hey ogammo, I had a similar symptom when Registration Time-out was empty (probably equivalent to 0 seconds), I do not know if that is your case - just check that (default for PAP2 3600).

Re: RT31P2 Unlock thoughts??

Thu, 21 Sep 2006 14:27:12 EDT
mazilo :
said by ogammo :

i repost and said i did the procedure again and the same is that i dont have a dial tone
R U able to access its SIP page that was previously locked by Vonage? If so, then you have unlocked your RT31P2. Whether you get the dial tone or not depends on how you configure the VM part. IIRC, my RT31P2 won't give me any dial tone if it is not provisioned. So, if you have failed to configure your RT31P2 to register with any VoSP, it may not give you a dial tone. This is definitely beyond the scope of unlocking as Meister_SD had pointed out. I hope you do understand this.
--
Mazi (UK Non-Geo Phone: +44-703-194-2574)

Re: RT31P2 Unlock thoughts??

Thu, 21 Sep 2006 12:26:39 EDT
ogammo :
said by meister_sd :

said by ogammo :

should i do the procedure of unlocking againm or what
thanks

Once it's unlocked, you are on your own to configure it. Each provider has it's own requirements and from here you will need to contact them or post a new thread asking for help. The RT31P2 has the same configuration as a PAP2 so if you see help on configuring a PAP2 - use that information.

i repost and said i did the procedure again and the same is that i dont have a dial tone , and i have all the requirments of the provider i am willing to connect and i also have the same router which is -NA and with the same reqiurment i can log to them, but with this unlocked one i cant. this is the problem. and thank you , i will try to post in another thread and see.
but i can receive a call not dialling one ??? strange

Re: RT31P2 Unlock thoughts??

Thu, 21 Sep 2006 12:08:07 EDT
meister_sd :
said by ogammo :

should i do the procedure of unlocking againm or what
thanks

Once it's unlocked, you are on your own to configure it. Each provider has it's own requirements and from here you will need to contact them or post a new thread asking for help. The RT31P2 has the same configuration as a PAP2 so if you see help on configuring a PAP2 - use that information.