[cron]

This thread is for the discussion of the Linksys RT31P2 and Linksys WRT54GP2 voip adapters

Please note that this unlock guide is in beta and relatively untested, so use at your own risk.

Linksys RT31P2 Unlock Methods

Linksys WRT54GP2 Unlock Methods

_______________________________________________________________
Recommended Reading: meister_sd posts @ DSLreports (Original Source of unlock methods)

Missing Firmwares: Posts @ DSLreports (many links to firmware are available here)

[cron]

Linksys RT31P2 Unlock Methods:

RT31P2 Unlock - meister_sd Method - original meister_sd method
Other Guides - Other Guides that add more detail to meister_sd's method

_______________________________________________________________

Alternate Unlock Guides (w/o Internet Provisioning) - untested for the RT31P2

RT31P2 Alternate Unlock - Short Method (Beta) - If unlocking firmware version matches existing firmware version number.
RT31P2 Alternate Unlock - Long Method (Beta) - Advanced instructions based on TheDiggler PAP2 3.1.9 method.

_______________________________________________________________

The following Assumptions and Things to Do can be useful during the unlock process.

Assumptions: (You may have a slightly different setup, so alter the directions accordingly)

RT31P2 Web Interface IP: >>http://192.168.15.1
RT31P2 Voice Web Interface: >>http://192.168.15.1/Voice_adminPage.htm (for use after unlock)
PC IP address 192.168.15.100 when connected to LAN port of RT31P2
PC IP address 192.168.0.1 when connected to WAN port of RT31P2
Do not connect the RT31P2 to the internet until you are absolutely sure it's unlocked properly. (meister_sd's RT31P2 method requires internet provisioning)

Things to Do Before Unlocking:

1) Download the Unlocking RT31P2 Firmware (Modified 2.0.9) to your PC. RT31P2_v1.17.02_000 firmware (v1.17.02 w/2.09)
2) Download the Latest RT31P2 Firmware to your PC (For use after unlock process is completed) (Latest Firmware Link)
3) Download a HTTP server like Apache Server : Win32 Binary (MSI Installer): apache_2.2.3-win32-x86-no_ssl.msi
4) Download a TFTP server like SolarWinds: SolarWinds TFTP server
5) Download VuckFonage (Download Page)
6) Download your encrypted XML config file for your adapter: >>http://httpconfig.vonage.net/spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your RT31P2)

[cron]

Linksys WRT54GP2 Unlock Methods:

WRT54GP2 Unlock - meister_sd Method - Original meister_sd method using part of RT31P2 procedure
Other Guides - Other Guides that add more detail to meister_sd's method

_______________________________________________________________

Alternate Unlock Guides (w/o Internet Provisioning)

WRT54GP2 Alternate Unlock - Short Method - Should work for most virgin adapters where the unlocking firmware version matches existing firmware version number
WRT54GP2 Alternate Unlock - Long Method - Advanced unlock instructions based TheDiggler's PAP2 3.1.9 method

_______________________________________________________________

The following Assumptions and Things to Do can be useful during the unlock process.

Assumptions: (You may have a slightly different setup, so alter the directions accordingly)

WRT54GP2 Web Interface IP: >>http://192.168.15.1
WRT54GP2 Voice Web Interface: >>http://192.168.15.1/Voice_adminPage.htm (for use after unlock)
PC IP address 192.168.15.100 when connected to LAN port of WRT54GP2
PC IP address 192.168.0.1 when connected to WAN port of WRT54GP2
Do not connect the WRT54GP2 to the internet until you are absolutely sure it's unlocked properly. (meister_sd's WRT54GP2 method requires internet provisioning)

Things to Do Before Unlocking:

1) Download the Unlocking WRT54GP2 Firmware (Modified 2.0.9) to your PC. wrt54gp2_v1.27.02_20 firmware (v1.27.02 w/2.09)
2) Download the Latest WRT54GP2 Firmware to your PC (For use after unlock process is completed) (Latest Firmware Link)
3) Download a HTTP server like Apache Server : Win32 Binary (MSI Installer): apache_2.2.3-win32-x86-no_ssl.msi
4) Download a TFTP server like SolarWinds: SolarWinds TFTP server
5) Download VuckFonage (Download Page)
6) Download your encrypted XML config file for your adapter: >>http://httpconfig.vonage.net/spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your WRT54GP2)
7) (Optional) Download Other Unlock Firmwares

- 1.20 version of Unlocking WRT54GP2 Firmware (Modified 2.0.9) to your PC. wrt54gp2_v1.20.01_20 firmware (v1.20.01 w/2.09)
- 1.25 version of Unlocking WRT54GP2 Firmware (Modified 2.0.9) to your PC. wrt54gp2_v1.25.00_20 firmware (v1.25 w/2.09)

[cron]

RT31P2 Unlock - meister_sd Method

According to meister_sd, "this is a fast tutorial and is only intended for people with advanced unlocking knowledge." A more detailed description may be written at some point later.
___________________________________________________________

Unlock Instructions:

Unlocking Firmware: RT31P2_v1.17.02_000 firmware (v1.17.02 w/2.09)

The router must be provisioned in order to access the firmware upgrade. Let it sit on the internet for a few minutes if it has never been provisioned or it's been a while.

You will need a couple of things before you start. One is your XML file from vonage before you hook the RT31P2 to your network. You will also need Solar Winds TFTP server (or your choice) and Simple DNS Pro (or your choice). Install and configure these programs. Also, you will need two NICs. One NIC will be for the connection to your home network router and the other will connect to the WAN side of the RT31P2 using ICS (Internet Connect Sharing). Remember to turn off XP's firewall.

1) Before connecting the RT31P2 to your network, grab your XML file from vonage. Put this into your TFTP Server directory.

2) Disconnect your outside internet cable from your firewall/router so the RT31P2 doesn't access the internet.

3) Log into your router (not the rt31p2) and set a static IP and also program the DNS to your computers IP.

4) Start the TFTP server and with it running, plug the RT31P2 in and wait for the provisioning file to load if this has never been connected to the internet.

5) Log into the RT31P2 with what ever normal login you have, the Linksys default is admin/admin. Go to the Administration tab and then click on Firmware Upgrade. Search for the upgrade file and click the Upgrade button. After some time it will ask for a username nad password. Since it's been on the internet the username and password will be:

user/8995523
or
user/7756112

These are the same as the PAP2. If these don't work - try others for the pap2 factory reset. After a couple of minutes, the upgrade will be sucessful. You will now have Router version 1.17.02 and Voice version 2.0.9(LId).

6) You may notice the XML file loading into the rt31p2 again - that's fine. Pay attention to the 2nd download in the directory that is a set of random numbers and letters. Now you will have to feed your router the XML file that is plain text and has new passwords and screen permissions. I used Simple DNS Pro (14 day trial) to point DNS of "ls.tftp.vonage.net" back to my box. From there Solar Winds TFTP server fed the router.

Here is the flat file needed:

CODE

<flat-profile>

<Restricted_Access_Domains ua="na"></Restricted_Access_Domains>
<Enable_Web_Server ua="na">Yes</Enable_Web_Server>
<Web_Server_Port ua="na">80</Web_Server_Port>
<Enable_Web_Admin_Access ua="na">Yes</Enable_Web_Admin_Access>

<Admin_Passwd ua="na"></Admin_Passwd>
<User_Password ua="na"></User_Password>

<Protect_IVR_FactoryReset ua="na">No</Protect_IVR_FactoryReset>

</flat-profile>

This file will need to be the same as the XML file downloaded from vonage, example: spa00121722CA00.xml
and this file goes into the second directory.

As you can see by the flat file - there are no passwords to the voice section. You click the Voice tab and you are in.
The hidden directory is: hxxp://192.168.15.1/Voice_adminPage.htm

___________________________________________________________

Things To Do After Unlocking:

Upgrading to the latest firmware: (Thanks rcilink)

1. Go to Voice_adminPage.htm
2. In provision tab, change UPGRADE RULE to:

CODE

http://httpconfig.vonage.net/RT31P2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin

3. If you did not do it already, set provision to NO (or clear the tftp "provision rule")
4. Save Settings
5. Reboot
6. Wait. Power led will flash and eventually whole router reboots.

___________________________________________________________

[cron]

WRT54GP2 Unlock - meister_sd Method

Unlock Instructions:

Please note the following firmware is unstable and you MUST upgrade to a stable firmware after unlocking.

Unlocking Firmware: wrt54gp2_v1.27.02_20 firmware (v1.27.02 w/2.09)

THIS FIRMWARE MOD FOR THE WRT54GP2 IS *ONLY* FOR UNLOCKING

First, download the latest firmware for this device from vonage. This is the latest stable release, save this to your desktop:

»http://httpconfig.vonage.net/wrt54gp2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin

Then you downgrade your firmware to v1.27 you downloaded here. After you downgrade your firmware to v1.27.02 - there are issues with the voice screen and values may not be able to be changed. So after you have downgraded the firmware and fed the WRT with the plain text file to unlock it using the same procedures as the RT31P2 that is described on the first page, disconnect it from the internet. After this - login to your router and goto the Voice_adminPage.htm and copy your GPP_K key and don't turn off provisioning because there are mapping issues with this hacked firmware.

Now with your router disconnected from the internet and your GPP_K key safe - upgrade to the version you just saved on your desktop. After it's upgraded and rebooted - go back into the voice screen and make whatever changes you need/want to. Remember to turn off provisioning now.

Now you can program what ever provider you want into the router.

[cron]

RT31P2/WRT54GP2 Alternate Unlock - Short Method

The basic premise of this method works if your unlocking firmware version number matches your existing firmware version number. If that is the case, you won't need internet provisioning. This Short Method only loads the modified firmware followed by a dummy xml file.

This method is untested for the RT31P2.If this method does not work, then use meister_sd's Original Method or the Long Method mentioned in the other posts.

Pre-Unlock Setup:

RT31P2 - See Post #2 (Link)
WRT54GP2 - See Post #3 (Link)

STEP 1: Get Access to the WRT54GP2 Web Interface:

1) Do Not Connect your internet connection to the RT31P2/WRT54GP2
2) Connect your PC to the Lan portion of the RT31P2/WRT54GP2 via a standard ethernet cable.
3) In a web-browser, navigate to the RT31P2/WRT54GP2's IP address. Probably 192.168.15.1.
4) Username/Password is usually admin/admin
5) You should now have access to the Web Interface
6) Check and write down the version numbers of the existing firmware (for reference) (ex: 1.20.01 w/2.0.13 voice)

STEP 2: Upgrade the RT31P2/WRT54GP2 Firmware to the 2.0.9 modified firmware from meister_sd:

1) Now that your in the Web Interface, go to the Administration tab and navigate to the Firmware Update page.
2) Update the firmware with the modified 2.0.9 unlocking firmware that you downloaded previously.

RT31P2 Unlocking Firmware: RT31P2_v1.17.02_000_combin_code.bin
WRTP54GP2 Unlocking Firmware: wrt54gp2_v1.27.02_209_combin_code.bin

(It may ask for a password if your unit is not a virgin adapter. Since it's been on the internet the username and password will be: user/8995523 or user/7756112. If these don't work, try other passwords from the pap2 factory reset thread.)

3) If you're having problems with this method of firmware updating:

Try Optional 1.2.0.1 Modified Unlocking firmware for the WRT54GP2. (WRT54GP2 v1.20.01 w/2.09)
Try Optional 1.25 Modified Unlocking firmware for the WRT54GP2. (WRT54GP2 v1.25 w/2.09)

If it's still not working (i.e. it's not updating with this modified firmware), then you need probably need to factory reset the device using the button on the back and then follow up with either meister_sd's original method (with internet provisioning) or the Long Method described in the next post.

4) After the firmware update is complete, go to the RT31P2/WRT54GP2 Web interface and check both the firmware version and then the voice version. You should have a 2.0.9 voice loaded now.
5) If the firmware update is successful, then please continue with the rest of the unlock procedure.

STEP 3: Setup the HTTP/TFTP/DNS/DHCP servers to load dummy xml file:

1) See Server Setup Post #8 (Link)

STEP 4: Setup Dummy XML file in TFTP Folder:

1) Create a TEXT FILE called spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2) as follows:

CODE

<flat-profile>

<Restricted_Access_Domains ua="na"></Restricted_Access_Domains>
<Enable_Web_Server ua="na">Yes</Enable_Web_Server>
<Web_Server_Port ua="na">80</Web_Server_Port>
<Enable_Web_Admin_Access ua="na">Yes</Enable_Web_Admin_Access>

<Admin_Passwd ua="na"></Admin_Passwd>
<User_Password ua="na"></User_Password>

<Protect_IVR_FactoryReset ua="na">No</Protect_IVR_FactoryReset>

</flat-profile>

2) Copy the new spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2) file to your TFTP ROOT directory (or directories if running multiple TFTP servers)
3) Reconnect the standard ethernet cable between the RT31P2/WRT54GP2 WAN port and the PC ethernet port. (I don't think you should need a crossover cable.)
4) Make sure all your servers are started and then power cycle the RT31P2/WRT54GP2.
5) Check your TFTP Server's log to see when the file has been grabbed. It should be.

Note: The Unlocking 2.0.9 firmware allows PLAIN TEXT config files to be loaded and processed. That is why this unlock "trick" works.

STEP 5: Check if Unlock Procedure Worked and Restore PC:

1) Disconnect the ethernet cable from the PC running the HTTP/TFTP/DNS servers
2) Disable the servers and undo the changes you made to your PC in Step 3
3) Once things are reverted back on your PC, you want to check to see if it worked.
4) Reconnect your PC to a LAN port on the RT31P2/WRT54GP2
5) In your web browser, go to the RT31P2/WRT54GP2 Voice Web Interface: >>http://192.168.15.1/Voice_adminPage.htm
6) If the Voice Section of the RT31P2/WRT54GP2 adapter loads, then you successfully unlocked your RT31P2/WRT54GP2.
7) At this point, you don't want to make any changes in the Voice Tab as the modified RT31P2/WRT54GP2 firmware is unstable.

STEP 6: Obtain the FACTORY FRESH GPP_K key (recommended)

Why do I need the GPP_K value? (Linked Post for Details)

1) Locate the Provisioning tab on the Voice Admin page.
2) Copy down the GPP_K value into a text file and save. This GPP_K should be the Factory Fresh value.
3) To verify that this is the Factory Fresh value, use VuckFonage to download and decrypt the XML file.

How do I use VuckFonage? (Link)

STEP 7: Upgrade to a Stable Firmware:

1) Go to the Firmware Update page of the Web Interface
2) Update to the Latest Stable Firmware

RT31P2 Stable Firmware: (Latest Firmware Link)
WRT54GP2 Stable Firmware: (Latest Firmware Link)

3) After the firmware update, you should still have access to the Voice Admin page.
4) You should now be able to disable provisioning and remove the Vonage DNS entries as this is a stable firmware.

[cron]

RT31P2/WRT54GP2 Alternate Unlock - Long Method

This is the Long Method unlock instructions which involve extra tasks like loading an encrypted xml file w/o using internet provisioning.

Please Note: This is an advanced unlock process. meister_sd's original methods in Post 4/Post 5 or the Guides in Post 10 may be easier.

Pre-Unlock Setup:

RT31P2 - See Post #2 (Link)
WRT54GP2 - See Post #3 (Link)

STEP 0 : Factory Reset the adapter (Optional):

1) This step probably isn't necessary unless you had a number of problems with your adapter or your adapter has already been on the internet. You could probably skip it unless you have further issues during the unlock process.
2) There are two methods of reset if you need to use it:

- Hold the reset button on the back for 5 seconds (Some say 30 seconds)
- In the Web Interface at 192.168.15.1, reset to factory defaults under the administration tab.

STEP 1: Setup the HTTP/TFTP/DNS/DHCP servers to load encrypted xml file and firmware:

1) See Server Setup Post #8 (Link)

STEP 2: Prepare your local file structure:

Encrypted XML:

1) In your TFTP ROOT directory (or directories if running multiple TFTP servers), copy your adapter's ENCRYPTED config file to that directory as spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2)

To download it: >>http://httpconfig.vonage.net/spa000000000000.xml (where 000000000000 is the MAC ADDRESS)

2.0.9 Unlocking Firmware:

2) In your HTTP ROOT directory (typically htdocs for Apache, docs for IPlanet/Netscape, wwwroot for IIS), create sub-directory: +000000000000 (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2)
3) Rename Unlocking Firmware 2.0.9 filename:

RT31P2: RT31P2_v1.17.02_000_combin_code.bin to "RT31P2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin"

WRT54GP2: wrt54gp2_v1.27.02_209_combin_code.bin to "wrt54gp2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin"

4) Copy the modified unlocking v2.0.9 firmware to the HTTP-ROOT/+000000000000/ directory (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2)
5) Double check to make sure that the renaming of the modified 2.0.9 unlocking firmware filename was completed.

STEP 3: Start the UNLOCK PROCESS (i.e. load the unlocking 2.0.9 firmware into your RT31P2/WRT54GP2):

1) Disconnect the ethernet cable from the PC running the HTTP/TFTP/DNS servers
2) Disconnect the POWER cable from the RT31P2/WRT54GP2
3) Reconnect the standard ethernet cable between the WRTGP2 WAN port and the PC ethernet port. (I don't think you'll need a crossover cable.)
4) Make sure the PC is powered up and that the DNS, TFTP and HTTP servers are running
5) Power on the RT31P2/WRT54GP2
6) If all goes well, your TFTP server's log will show the RT31P2/WRT54GP2 grabbing the encrypted file.
7) Shortly thereafter, the HTTP server's log should show the RT31P2/WRT54GP2 grabbing the modified SPA2000 v2.0.9 firmware file.
8) Once the RT31P2/WRT54GP2 has loaded the 2.0.9 Unlocking Firmware, you may want to double check that the firmware is updated by checking the web interface.
9) You should now be ready to proceed with re-opening the Voice Section of the Web Interface

STEP 4: Setup Dummy XML file in TFTP Folder to (Re-)Open WEB access:

1) Create a TEXT FILE called spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2) as follows:

CODE

<flat-profile>

<Restricted_Access_Domains ua="na"></Restricted_Access_Domains>
<Enable_Web_Server ua="na">Yes</Enable_Web_Server>
<Web_Server_Port ua="na">80</Web_Server_Port>
<Enable_Web_Admin_Access ua="na">Yes</Enable_Web_Admin_Access>

<Admin_Passwd ua="na"></Admin_Passwd>
<User_Password ua="na"></User_Password>

<Protect_IVR_FactoryReset ua="na">No</Protect_IVR_FactoryReset>

</flat-profile>

2) Copy the new dummy spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2) file to your TFTP ROOT directory (or directories if running multiple TFTP servers)
3) Make sure the encrypted xml config file is REMOVED from your TFTP root. You only want the dummy file now.
4) Reconnect the standard ethernet cable between the RT31P2/WRT54GP2 WAN port and the PC ethernet port. (I don't think you'll need a crossover cable.)
5) Make sure all your servers are still started and then power cycle the RT31P2/WRT54GP2.
6) Check your TFTP Server's log to see when the file has been grabbed

If the TFTP Server's log shows a FILE NOT FOUND error message, and if the file attempting to be grabbed was requested from an obscurely named sub-directory (i.e. /a12BcdeFgH/spa000000000000.xml), create that sub-directory (a12BcdeFgH) underneath the TFTP Root and move (or copy) the spa000000000000.xml file to that sub-directory. Then re-Power Cycle the RT31P2/WRT54GP2 and re-check the TFTP Server's log.

7) You should now have access to the Voice_adminPage.htm of your adapter.
RT31P2/WRT54GP2 Voice Web Interface: >>http://192.168.15.1/Voice_adminPage.htm
8) At this point, you don't want to make any changes in the Voice Tab as the modified RT31P2/WRT54GP2 firmware is unstable.

Note: The unlocking 2.0.9 firmware allows PLAIN TEXT config files to be loaded and processed. That is why this unlock "trick" works.

STEP 5: Obtain the FACTORY FRESH GPP_K key (recommended)

Why do I need the GPP_K value? (Linked Post for Details)

1) On the Provision page in the Voice section of your Web Interface copy down the Vonage GPP_K value. This is NOT the value you need, but it may be worth writing down in a text file for future reference.
RT31P2/WRT54GP2 Voice Web Interface: >>http://192.168.15.1/Voice_adminPage.htm
2) In STEP 3, the encrypted Vonage Config File got loaded into the adapter. This caused the adapter's FACTORY FRESH GPP_K value to be overwritten w/ one supplied by Vonage.
3) With the adapter disconnected from the internet and loaded with the 2.0.9 unlocking firmware, FACTORY RESET THE ADAPTER (Using Web Interface if possible). This will cause the FACTORY FRESH GPP_K value to be re-loaded, but it will also re-lock the adapter. Before FACTORY RESETTING the adapter though, delete your Vonage Encrypted spa000000000000.xml file from your TFTP ROOT! Otherwise, upon performing a FACTORY RESET, your adapter will request and process this file, a file which DISABLES THE ADAPTER'S WEB INTERACE!
4) Repeat STEP 1 (Setup Servers) and STEP 4 (Load Dummy XML file) to Re-Open your Web Interface. (Step 1 and Step 4 ONLY)
5) After the adapter has been re-unlocked, extract the GPP_K value and save it!
6) Copy down the GPP_K value into a text file and save. This GPP_K should be the Factory Fresh value.

How do you tell the difference beween the FACTORY FRESH GPP_K value and a Vonage assigned one? (Link)

7) To verify that this is the Factory Fresh value, use VuckFonage to download and decrypt the XML file.

How do I use VuckFonage? (Link)

STEP 6: Upgrade to a Stable Firmware:

1) Go to the Firmware Update page of the Web Interface
2) Update to the Latest Stable Firmware

RT31P2 Stable Firmware: (Latest Firmware Link)
WRT54GP2 Stable Firmware: (Latest Firmware Link)

3) After the firmware update, you should still have access to the Voice Admin page.
4) You should now be able to disable provisioning and remove the Vonage DNS entries as this is a stable firmware.

[cron]

Server Setup Post: HTTP/TFTP/DNS/DHCP servers

You may have a slightly different setup, so alter the directions accordingly. For example, using Simple DNS instead of your host file for a DNS Server.

1) Temporarily disconnect the ethernet cable between the PC and voip adapter and setup the following:
2) Setup the HTTP Server like Apache Server running on your PC

Settings During Install: (Probably not necessary)
Domain Name: vonage.net
Server Name: httpconfig.vonage.net

3) Setup the TFTP Server like Solarwinds running on your PC

(file>configure>security, change to transmit and receive files)

4) A DNS Server running on your PC (Windows 'hosts' file):

•Load C:\Windows\System32\Drivers\etc\hosts into NotePad (it's a text file)
•Add the following to the end of the file:

CODE

192.168.0.1 ls.tftp.vonage.net
192.168.0.1 httpconfig.vonage.net
192.168.0.1 vonage.net

•Save the file and exit NotePad (Remember to revert changes AFTER unlocking)

4) A DHCP Server running on your PC via Internet Connection Sharing (ICS):

•For this to work, you need at least two network "interfaces" in your Network Connections folder. A Wireless Network Connection plus a Local Area Connection (i.e. ethernet interface) will suffice:
•Open up Network Connections
•Right click on Wireless Network Connection
•Select the Advanced tab
•Check the box for "Allow other network users to connect through this computer's Internet connection"
•If there's a drop-down box below requiring you to select a "Home networking connection," choose "Local Area Network"
•ICS will now be active on the Local Area Connection (this seems backwards, but that's how ICS works). The PC's Local Area Connection will be the ICS "gateway" and will be assigned an IP Address of 192.168.0.1.

Make sure the Wireless Network Connection is NOT connected to the Wifi network!!! ICS will share your PC's wifi connection w/ its ethernet port, so if the wifi connection is "alive," and if the wireless router is connected to the internet, your PC's ethernet port will be on the internet too!

[cron]

GPP_K Details and VuckFonage XML Decryption

Why do I need the GPP_K value?

(Linked Post for Details)

The basic reason: Your voip company could start pushing an update that makes your device unlockable. If you accidentally factory reset your device and the device remains on the internet, it may take up such an update. In that case, the GPP_K value may be the only thing that can get you back into the device.

How do you tell the difference beween the FACTORY FRESH GPP_K value and a Vonage assigned one?

Attributes of the FACTORY FRESH GPP_K value:

• 44 characters long
• Comprised of alpha (A-Z, a-z), numeric (0-9), and symbols
• Ends with an EQUAL SIGN (=)
• Example: n6KClGUoMXzIQ/JmmuSFBE1GOu+M8335eHfPeYHeRAs=

Attributes of a Vonage Assigned GPP_K value:

• 64 characters long
• Comprised of HEX characters (A-F, a-f, 0-9) only!
• Example: 9190ca44e4cffb893c2ae43c4bca57fb18f04482a84dcce30d28017e7715a8a0

How do I use VuckFonage?

• Download and install the software (Link)
• Domain Name is ls.tftp.vonage.net
• MAC address is the one on the adapter
• GPP_K value is the one that you saved in the text file (Factory fresh)
• Select a folder to output the decrypted files
• Click Download and Decrypt
• That's it. You should save the decrypted file just in case

[cron]

Other Guides:

There were a few nice people out there who also made guides besides myself and meister_sd

Here they are:

christcorp's RT31P2 Unlock Instructions (Post #15)

bommenarao/srid121 WRT54GP2 Unlock Instructions (Post #29)

[cron]

If any of these instructions need editing or clarification, please let me know and i'll update.

[DaaZee]

If any of these instructions need editing or clarification, please let me know and i'll update.

It would be really great if you can make "Alternative RT31P2 Unlocking Method" little bit more descriptive, specially the part mentoned in notes section that is how is find what firmware name and directory structure would be needed on http server and how to find this. I am hoping that many of the folks would not have two nic and details would certainly be appreciated.

[cron]

I've got a new Linksys WRT54GP2, so i'll try to help in the revisions after I get mine unlocked.

I updated with the meister_sd WRT54GP2 instructions for now.

Here's the original dslreports thread if more guidance is needed in the meantime: (Link)

[srid121]

ANy One have a detailed document on unlocking the WRT54GP2 please? I am stuck at feeding xml file. If any one can give me guidence on how to connect the PC, configure the router, simple dns plus and tftp I would really appreciate.
Thanks for your time.
Sri

[cron]

RT31P2 Unlock Steps

Looks like christcorp on dslreports also wrote up a guide with some detail. That's the link in case you want to download the zip file

RT31P2 Unlock Steps
Anyway, before proceding, I'm not going to spend time here explaining how to use TFTP or a DNS server. That's just going to take up space, and I'm already long winded. Also, these instructions will assume that you are using a fairly common home/soho network with a router. Also, I'll assume that you downloaded meister_sd provided firmware. Also, that you copy and pasted the plain text xml file he provided here at DSLREPORTS.

Very Important Note: When you copy and past the flat text file. Make sure you ONLY copy from the beginning of the text, to the end of the text. Don't have any extra lines or spaced added by accident. 1 extra bit or character and it gets wierd. That was part of my problem. Also, when you paste it, past it in "NOTEPAD". Don't use wordpad, word, or other program. You linux folks will just have to experiment. This was also my problem unlocking. When pasted in Wordpad or word, it pasted as you saw it when you copied it. It wouldn't work. Even thoug I saved it as a txt file. When I saved it in "NOTEPAD", it saved as one long line entry. I saved it as a text file; spaxxxxxxxxxxxx.xml (Replace the first 12 x's with the mac of the RT31P2. This worked fine. Put this file in the default tftp directory.

1. If you have a brand new, out of the box, virgin RT31P2; connect a computer to a lan port on the RT31P2 and put the WAN port of the RT31P2 to the home router and LET the RT31P2 go on line and provision with vonage. (If you have already had this adapter provisioned before, you can skip the part about putting it online). Configuring the RT31P2 for static IP addresses and DNS are not required. Just put the sucker on the internet.

2, Using the computer you plugged into the lan port, if it's a new adapter, you will tell that it has been provisioned, because it should have updated the firmware of the router to 1.30 or similar.

3. Once the adapter is properly provisioned, disconnect the WAN cable from your network router.

4. Having saved a copy of the 1.17 firmware that meister provided, make sure you have a copy of it on the computer you have plugged into the lan port of the RT31P2. It can be on it's hard drive, or on a floppy. It's right at about 1mb in size.

5. With just the computer connected to the RT31P2, and it NOT connected any longer to the home router or internet, log into the RT31P2 with admin/admin and go to the administration; firmware upgrade section. Point to the firmware file you saved, and begin the firmware upgrade. (Downgrade to 1.17). When it asks for user name and password, use one of the PAP2 user names and passwords that meister_sd provided. The one that worked for me was, user/7756112 But that's not to say that is the right one for you. If it's the right one, the process will end with the RT31P2 saying the firmware was successful. If it's the wrong one, the RT31P2 will just go back to the normal screen, and you will see it is still at the original firmware you started with. Just repeat the process, and use a different username and password when the time is asked. It took me 3 times.

6. Now, assuming you are now at the proper firmware of 1.17 and 2.09 for voice, we can continue. Now, if the computer you plugged into the RT31P2 is the only one you have, and it's also the one with the Simple DNS and Sonicwind TFTP servers on it, then disconnect it from the lan port, and reconnect it to your home network just like you had it before we started this adventure. I had an extra computer available, a laptop, so that is what I plugged into the lan port of the RT31P2. This way I could leave my main computer with the DNS and TFTP normal on my network. Anyway, if it is your only computer, just connect it back up to your network.

7. Now, you can turn the power to the RT31P2 off, and make sure your computer with DNS and TFTP is set up properly. Obviously, this computer must have a static IP address from your home router. e.g. 192.168.1.100

8. Disconnect the broadband from your home router. You can leave the rest of the network hooked up normally

9. Edit your router wan settings to make sure it has a static IP address. This is needed so you can also tell it DNS settings. Being the router isn't on the internet, the static IP address you put in isn't important. What is important is when you put in the DNS, put in the IP address of the computer you are using with the dns and tftp server software running.

10. Assuming that the spaxxxxxxxxxxxx.xml file you saved earlier in NOTEPAD is in the tftp directory, go ahead and start both the DNS and the TFTP server programs

11. Connect from the WAN port of the RT31P2 to an available lan port on your home router. Then, plug in the power to the RT31P2. If you watch the TFTP server screen, in a few minutes, it should say that the spaxxxxxxxxxxxx.xml file was sent to the dynamic IP address of the RT31P2. If this happens, as hopefully it will, wait about another 30 seconds, then you can turn off the dns and tftp server. If after a minute, you still haven't seen the file transferred entry, then leave the dns and tftp servers running, and unplug the power to the rt31p2. Wait about 10 seconds, then plug the power back in. It took me a couple of times, but the RT31P2 finally asked for my local machine and got the file. (You can monitor in Simple DNS by clicking on the log).

12. Now, assuming it took the file, you can disconnect the WAN of the RT31P2 to the home router. If you have a second computer connected to the LAN port of the RT31P2, you can open up the adapter at 192.168.15.1 and should be able to now access the voice section. Also, by going to the hidden page, you can now turn on provisioning and such. If you only had the one computer, you will need to put that one back to dynamic instead of static IP, so you can connect it to the LAN port of the RT31P2 and see if you can access the voice section.

Anyway, That is how I got it to work. There wasn't a need to have to ORIGINAL xml file from vonage. Only if you didn't want to provision the RT31P2 online. Hope this helps. No promises, but that's how I got mine to work.

[cron]

Too easy.

I used a modified version of TheDiggler's 3.1.9 PAP2 unlock procedure to unlock my WRT54GP2.

Then i decided i'd experiment with the unlocking technique and ended up semi-bricking my WRT54GP2.

So, i unlocked that by factory resetting and then using the full TheDiggler's 3.1.9 PAP2 unlock technique to get unlocked again.

I'll post instructions on what i did shortly.

[cron]

Can someone with an RT31P2 answer me a question?

meister_sd's instructions say that "The router must be provisioned in order to access the firmware upgrade."

Is that verified?

Because on my virgin WRT54GP2 you could go right to the firmware update page on the Web Interface, update the with the 2.0.9 unlocking firmware, and then follow that with a loading of the dummy xml. The device was basically unlocked after that.

I'm trying to figure out how different they are.

Thanks

[maxim]

Is it has to be virgin unit? Is it has to be "Never connected to internet" like pap2?

Thank you.

[cron]

From christcorp's instructions:

1. If you have a brand new, out of the box, virgin RT31P2; connect a computer to a lan port on the RT31P2 and put the WAN port of the RT31P2 to the home router and LET the RT31P2 go on line and provision with vonage. (If you have already had this adapter provisioned before, you can skip the part about putting it online). Configuring the RT31P2 for static IP addresses and DNS are not required. Just put the sucker on the internet.

it doesn't looks like it has to be brand new. At least if you also look at christcorp's instructions in post 10 and meister_sd's instructions in post 2.

[DaaZee]

it doesn't looks like it has to be brand new. At least if you also look at christcorp's instructions in post 10 and meister_sd's instructions in post 2.

I tried unlocking my used RT31P2 using hristcorp's isntructions and here are my observations, see if you can help me

1. Router is not new and is already provisionned.
2. I was able to downgrade it to 1.17 with 2.0.9 [LID]. I used PAP2 user/ password combination when asked for credentials.
3. Upgrade went smooth. I was able to log in to RT31P2 on web interface and verfied the firmware versions that it was showing 1.17 with 2.0.9 [LID].
4. RT31 didn't seem to make request for xml on http ot tftp even after 15-20 reset attempts and nor simple dns logs suggest anything.
5. Since i was stuck i connect it to internet to verify voice part still works. [I shouln't have done that]. It got provisioned to vonage again and works fine.
6. Later again removed box from internet, used ethereal, and found that it was making tftp requests at c.voncp.com at a path /somefoldername/spaMAC.xml
7. I configured tftp for c.voncp.com and feeded it xml from desired folder location. It took 5-10 minutes but it did grab xml file.
8. I power cycled RT31p2, went to voice tab it displayed a message to contact servce provider.
9. Voice_adminPage.htm asked for user/ paswwords but didn't accept blank passwords. [I verified that firmware version is still 1.17 with 2.0.9 ]
10. I reset my device for a couple of times, it ethreal pointed out that this time it was asking for /spa-MAC.xml [note it was not looking for a folder anymore] and i feeded it flat profile xml file, it grabbed it. After power cycling the box i was not able to see voice setings as earlier.

So now i am stuck with firmware version 1.17 on it. I tried putting firmware 'RT31P2_v1.17.02_000_combin_code.bin' again but this time user/ paswwords combination did not work.

Since it has 2.0.9 which accepts plain test xml file, i was hoping it can be unlocked
Any suggestion? Can this be unlocked from this stage? Any suggestionsor help is much appreciated.

[cron]

4. RT31 didn't seem to make request for xml on http ot tftp even after 15-20 reset attempts and nor simple dns logs suggest anything.

Hmm, that is strange.

Did you try factory resetting from both the Web Interface and the button on the back of the RT31P2?

[DaaZee]

Hmm, that is strange.

Did you try factory resetting from both the Web Interface and the button on the back of the RT31P2?

Yes, i did.

[cron]

One of the places I would look is making sure your servers are set up alright.
Check the dummy xml file and make sure it's setup correctly. I believe christcorp has a special note about that.

A question for you. When you first started unlocking, what firmware did you have before you updated to the 2.0.9 unlocking firmware?

[DaaZee]

One of the places I would look is making sure your servers are set up alright.
Check the dummy xml file and make sure it's setup correctly. I believe christcorp has a special note about that.

A question for you. When you first started unlocking, what firmware did you have before you updated to the 2.0.9 unlocking firmware?

xml file seem to be fine. servers are set up correctly.
When i first started unlocking, well i made a mistake didn't note it down but as far as i remember it was 1.30 with 3.x

However, sice it has 1.17 /2.0.9 shouldn't it accept text files and blank out passwords? Do you thin i should follow any sequency of reset - i.e. reset from web interface and then from a butto at the back?

[cron]

However, sice it has 1.17 /2.0.9 shouldn't it accept text files and blank out passwords? Do you think i should follow any sequency of reset - i.e. reset from web interface and then from a butto at the back?

it makes sense to me. That's exactly what it should do. I did exactly that when i unlocked my WRT54GP2.

Regarding that firmware. Sounds like it must have been the latest one.

It's weird that it's not asking for any spaXXXX.xml file now. Once you factory reset the adapter, it's one of the first things it should be doing.

So, somehow we need to get your adapter to start looking for spaXXX.xml files again. Only thing i can think of right now is trying to get the firmware upgraded to a stable one. Then factory reset and start the unlock process over.

[DaaZee]

So, somehow we need to get your adapter to start looking for spaXXX.xml files again. Only thing i can think of right now is trying to get the firmware upgraded to a stable one. Then factory reset and start the unlock process over.

I am going to try playing hard with it in a while, i think after re-setting it it a couple of times on web interface and with back button it would get back to a stage where is asks for spaMAC.xml. If it asks for xml should i feed it or upgrade it to a stable firmware?
Also, at this time i tried putting the same firmware again but it did not accept any user/passwds so i am not sure as how to upgrade it to stable f/w. One thought is - if i connect it to internet and allow remote upgrade, would vonage upgrade f/w? I will wait for your instructions :-)

[cron]

If it asks for xml should i feed it

As long as it's on the 2.0.9 firmware, i don't see why not. I would maybe try making a new dummy xml. Just to make sure it's working ok.

Edit: I'm going to post my instructions on what i did sometime tomorrow probably. That may also help you as I unlocked mine in two similar ways. One method involved the full TheDiggler method of loading the encrypted xml to get the 2.0.9 unlocking firmware fed.

[cron]

Also, I notice that sometimes the Firmware Upgrade in the Web Interface for the WRT54GP2 can be a little buggy. It takes up the firmware and sometimes it doesn't. Especially when loaded with the sipura firmware. So, you may have to try a few times to get it to take.

meister_sd also released another 2.0.9 sipura firmware for people with the WRT54GP2. Basically in case you're having problems with the 1.27 unlock firmware he made previously.

wrt54gp2_v1.20.01_20 (v1.20 w/2.09)

Quote from meister_sd:

I noticed a strange thing, I got another brand new WRT54GP2 and it wasn't provisioned and came with v1.20. I developed a new FW that I was told was on vonage's site, another v1.20. So I took off voice 2.0.10 and put on 2.0.9 and guess what? It didn't ask for a password! Maybe it doesn't when the router version is the same - I don't know.

So, since you are having problems getting that one to load, try this one.

I did actually test this firmware myself and it worked pretty well. Give it a shot in case you have problems.

[srid121]

Hi,

I have put together a detailed document on unlocking WRT54GP2 router with screen shots. The document is located at:
http://www.dslreports.com/r0/download/1064...nstructions.zip
Use these instructions at your own risk. Also credit goes to “meister_sd” who provided information on unlocking it initially. I am writing these instructions based on my experience in unlocking the WRT54GP2 after reading so many posts on it. I am trying to put all the information at one place. I did not have prior knowledge of unlocking using XML file method and I had spent countless hours in learning the method. Each time I tried I ran into issues. After reading thru so many posts, finally I was successful. So, I thought of putting this document together for people who are on the same boat as me and I think it will be beneficial to every one and to folks who are IMed me for the instructions.
Also I would like to say Thanks to “meister_sd”. Without his dedication and effort this would have not been possible. Also Thank “mazilo” for his initial guide and the basic steps he provided which were very helpful for me and many.

Hope the instructions will be helpful. Again do not blame me if anything happends to your router. Use it at your own risk, as I did it with my risk
Thanks,
bommenarao/srid121

[cron]

Ok, I've posted what i did in the OP's.

I posted a short and long method that both worked on my virgin WRT54GP2 adapter that originally had 2.0.10 voice on it. It may work for already provisioned adapters as well.

Please let me know about the success of the short method. Just so we know whether it works on the RT31P2.

The long method is just in case the short method doesn't work.

There are bound to be typos and corrections. Please report them via a reply to this thread.

Hope this guide helps