bargainshare.com > Linksys RT31P2 and WRT54GP2 Unlock Guide

Full Version: Linksys RT31P2 and WRT54GP2 Unlock Guide

bargainshare.com > Community > Computer & Tech Help

Pages: 1, 2, 3, 4, 5

cron

9-9-06, 10:18pm

This thread is for the discussion of the Linksys RT31P2 and Linksys WRT54GP2 voip adapters

Please note that this unlock guide is in beta and relatively untested, so use at your own risk.

Linksys RT31P2 Unlock Methods

Linksys WRT54GP2 Unlock Methods

_______________________________________________________________
Recommended Reading: meister_sd posts @ DSLreports (Original Source of unlock methods)

Missing Firmwares: Posts @ DSLreports (many links to firmware are available here)

cron

9-9-06, 10:18pm

Linksys RT31P2 Unlock Methods:

RT31P2 Unlock - meister_sd Method - original meister_sd method
Other Guides - Other Guides that add more detail to meister_sd's method

_______________________________________________________________

Alternate Unlock Guides (w/o Internet Provisioning) - untested for the RT31P2

RT31P2 Alternate Unlock - Short Method (Beta) - If unlocking firmware version matches existing firmware version number.
RT31P2 Alternate Unlock - Long Method (Beta) - Advanced instructions based on TheDiggler PAP2 3.1.9 method.

_______________________________________________________________

The following Assumptions and Things to Do can be useful during the unlock process.

Assumptions: (You may have a slightly different setup, so alter the directions accordingly)

RT31P2 Web Interface IP: >>http://192.168.15.1
RT31P2 Voice Web Interface: >>http://192.168.15.1/Voice_adminPage.htm (for use after unlock)
PC IP address 192.168.15.100 when connected to LAN port of RT31P2
PC IP address 192.168.0.1 when connected to WAN port of RT31P2
Do not connect the RT31P2 to the internet until you are absolutely sure it's unlocked properly. (meister_sd's RT31P2 method requires internet provisioning)

Things to Do Before Unlocking:

1) Download the Unlocking RT31P2 Firmware (Modified 2.0.9) to your PC. RT31P2_v1.17.02_000 firmware (v1.17.02 w/2.09)
2) Download the Latest RT31P2 Firmware to your PC (For use after unlock process is completed) (Latest Firmware Link)
3) Download a HTTP server like Apache Server : Win32 Binary (MSI Installer): apache_2.2.3-win32-x86-no_ssl.msi
4) Download a TFTP server like SolarWinds: SolarWinds TFTP server
5) Download VuckFonage (Download Page)
6) Download your encrypted XML config file for your adapter: >>http://httpconfig.vonage.net/spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your RT31P2)

cron

9-9-06, 10:18pm

Linksys WRT54GP2 Unlock Methods:

WRT54GP2 Unlock - meister_sd Method - Original meister_sd method using part of RT31P2 procedure
Other Guides - Other Guides that add more detail to meister_sd's method

_______________________________________________________________

Alternate Unlock Guides (w/o Internet Provisioning)

WRT54GP2 Alternate Unlock - Short Method - Should work for most virgin adapters where the unlocking firmware version matches existing firmware version number
WRT54GP2 Alternate Unlock - Long Method - Advanced unlock instructions based TheDiggler's PAP2 3.1.9 method

WRT54GP2 Web Interface IP: >>http://192.168.15.1
WRT54GP2 Voice Web Interface: >>http://192.168.15.1/Voice_adminPage.htm (for use after unlock)
PC IP address 192.168.15.100 when connected to LAN port of WRT54GP2
PC IP address 192.168.0.1 when connected to WAN port of WRT54GP2
Do not connect the WRT54GP2 to the internet until you are absolutely sure it's unlocked properly. (meister_sd's WRT54GP2 method requires internet provisioning)

Things to Do Before Unlocking:

1) Download the Unlocking WRT54GP2 Firmware (Modified 2.0.9) to your PC. wrt54gp2_v1.27.02_20 firmware (v1.27.02 w/2.09)
2) Download the Latest WRT54GP2 Firmware to your PC (For use after unlock process is completed) (Latest Firmware Link)
3) Download a HTTP server like Apache Server : Win32 Binary (MSI Installer): apache_2.2.3-win32-x86-no_ssl.msi
4) Download a TFTP server like SolarWinds: SolarWinds TFTP server
5) Download VuckFonage (Download Page)
6) Download your encrypted XML config file for your adapter: >>http://httpconfig.vonage.net/spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your WRT54GP2)
7) (Optional) Download Other Unlock Firmwares
- 1.20 version of Unlocking WRT54GP2 Firmware (Modified 2.0.9) to your PC. wrt54gp2_v1.20.01_20 firmware (v1.20.01 w/2.09)
- 1.25 version of Unlocking WRT54GP2 Firmware (Modified 2.0.9) to your PC. wrt54gp2_v1.25.00_20 firmware (v1.25 w/2.09)

cron

9-9-06, 10:19pm

RT31P2 Unlock - meister_sd Method

According to meister_sd, "this is a fast tutorial and is only intended for people with advanced unlocking knowledge." A more detailed description may be written at some point later.
___________________________________________________________

Unlock Instructions:

Unlocking Firmware: RT31P2_v1.17.02_000 firmware (v1.17.02 w/2.09)

The router must be provisioned in order to access the firmware upgrade. Let it sit on the internet for a few minutes if it has never been provisioned or it's been a while.

You will need a couple of things before you start. One is your XML file from vonage before you hook the RT31P2 to your network. You will also need Solar Winds TFTP server (or your choice) and Simple DNS Pro (or your choice). Install and configure these programs. Also, you will need two NICs. One NIC will be for the connection to your home network router and the other will connect to the WAN side of the RT31P2 using ICS (Internet Connect Sharing). Remember to turn off XP's firewall.

1) Before connecting the RT31P2 to your network, grab your XML file from vonage. Put this into your TFTP Server directory.

2) Disconnect your outside internet cable from your firewall/router so the RT31P2 doesn't access the internet.

3) Log into your router (not the rt31p2) and set a static IP and also program the DNS to your computers IP.

4) Start the TFTP server and with it running, plug the RT31P2 in and wait for the provisioning file to load if this has never been connected to the internet.

5) Log into the RT31P2 with what ever normal login you have, the Linksys default is admin/admin. Go to the Administration tab and then click on Firmware Upgrade. Search for the upgrade file and click the Upgrade button. After some time it will ask for a username nad password. Since it's been on the internet the username and password will be:
user/8995523
or
user/7756112
These are the same as the PAP2. If these don't work - try others for the pap2 factory reset. After a couple of minutes, the upgrade will be sucessful. You will now have Router version 1.17.02 and Voice version 2.0.9(LId).

6) You may notice the XML file loading into the rt31p2 again - that's fine. Pay attention to the 2nd download in the directory that is a set of random numbers and letters. Now you will have to feed your router the XML file that is plain text and has new passwords and screen permissions. I used Simple DNS Pro (14 day trial) to point DNS of "ls.tftp.vonage.net" back to my box. From there Solar Winds TFTP server fed the router.

Here is the flat file needed:
CODE
<flat-profile>

<Restricted_Access_Domains ua="na"></Restricted_Access_Domains>
<Enable_Web_Server ua="na">Yes</Enable_Web_Server>
<Web_Server_Port ua="na">80</Web_Server_Port>
<Enable_Web_Admin_Access ua="na">Yes</Enable_Web_Admin_Access>

<Admin_Passwd ua="na"></Admin_Passwd>
<User_Password ua="na"></User_Password>

<Protect_IVR_FactoryReset ua="na">No</Protect_IVR_FactoryReset>

</flat-profile>
This file will need to be the same as the XML file downloaded from vonage, example: spa00121722CA00.xml
and this file goes into the second directory.

As you can see by the flat file - there are no passwords to the voice section. You click the Voice tab and you are in.
The hidden directory is: hxxp://192.168.15.1/Voice_adminPage.htm

___________________________________________________________

Things To Do After Unlocking:

Upgrading to the latest firmware: (Thanks rcilink)

1. Go to Voice_adminPage.htm
2. In provision tab, change UPGRADE RULE to:
CODE
http://httpconfig.vonage.net/RT31P2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin

3. If you did not do it already, set provision to NO (or clear the tftp "provision rule")
4. Save Settings
5. Reboot
6. Wait. Power led will flash and eventually whole router reboots.

___________________________________________________________

cron

9-9-06, 10:19pm

WRT54GP2 Unlock - meister_sd Method

Unlock Instructions:

Please note the following firmware is unstable and you MUST upgrade to a stable firmware after unlocking.

Unlocking Firmware: wrt54gp2_v1.27.02_20 firmware (v1.27.02 w/2.09)

THIS FIRMWARE MOD FOR THE WRT54GP2 IS *ONLY* FOR UNLOCKING

First, download the latest firmware for this device from vonage. This is the latest stable release, save this to your desktop:

»http://httpconfig.vonage.net/wrt54gp2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin

Then you downgrade your firmware to v1.27 you downloaded here. After you downgrade your firmware to v1.27.02 - there are issues with the voice screen and values may not be able to be changed. So after you have downgraded the firmware and fed the WRT with the plain text file to unlock it using the same procedures as the RT31P2 that is described on the first page, disconnect it from the internet. After this - login to your router and goto the Voice_adminPage.htm and copy your GPP_K key and don't turn off provisioning because there are mapping issues with this hacked firmware.

Now with your router disconnected from the internet and your GPP_K key safe - upgrade to the version you just saved on your desktop. After it's upgraded and rebooted - go back into the voice screen and make whatever changes you need/want to. Remember to turn off provisioning now.

Now you can program what ever provider you want into the router.

cron

9-9-06, 10:19pm

RT31P2/WRT54GP2 Alternate Unlock - Short Method

The basic premise of this method works if your unlocking firmware version number matches your existing firmware version number. If that is the case, you won't need internet provisioning. This Short Method only loads the modified firmware followed by a dummy xml file.

This method is untested for the RT31P2.If this method does not work, then use meister_sd's Original Method or the Long Method mentioned in the other posts.

Pre-Unlock Setup:

RT31P2 - See Post #2 (Link)
WRT54GP2 - See Post #3 (Link)

STEP 1: Get Access to the WRT54GP2 Web Interface:

1) Do Not Connect your internet connection to the RT31P2/WRT54GP2
2) Connect your PC to the Lan portion of the RT31P2/WRT54GP2 via a standard ethernet cable.
3) In a web-browser, navigate to the RT31P2/WRT54GP2's IP address. Probably 192.168.15.1.
4) Username/Password is usually admin/admin
5) You should now have access to the Web Interface
6) Check and write down the version numbers of the existing firmware (for reference) (ex: 1.20.01 w/2.0.13 voice)

STEP 2: Upgrade the RT31P2/WRT54GP2 Firmware to the 2.0.9 modified firmware from meister_sd:

1) Now that your in the Web Interface, go to the Administration tab and navigate to the Firmware Update page.
2) Update the firmware with the modified 2.0.9 unlocking firmware that you downloaded previously.
RT31P2 Unlocking Firmware: RT31P2_v1.17.02_000_combin_code.bin
WRTP54GP2 Unlocking Firmware: wrt54gp2_v1.27.02_209_combin_code.bin
(It may ask for a password if your unit is not a virgin adapter. Since it's been on the internet the username and password will be: user/8995523 or user/7756112. If these don't work, try other passwords from the pap2 factory reset thread.)
3) If you're having problems with this method of firmware updating:
Try Optional 1.2.0.1 Modified Unlocking firmware for the WRT54GP2. (WRT54GP2 v1.20.01 w/2.09)
Try Optional 1.25 Modified Unlocking firmware for the WRT54GP2. (WRT54GP2 v1.25 w/2.09)

If it's still not working (i.e. it's not updating with this modified firmware), then you need probably need to factory reset the device using the button on the back and then follow up with either meister_sd's original method (with internet provisioning) or the Long Method described in the next post.
4) After the firmware update is complete, go to the RT31P2/WRT54GP2 Web interface and check both the firmware version and then the voice version. You should have a 2.0.9 voice loaded now.
5) If the firmware update is successful, then please continue with the rest of the unlock procedure.

STEP 3: Setup the HTTP/TFTP/DNS/DHCP servers to load dummy xml file:

1) See Server Setup Post #8 (Link)

STEP 4: Setup Dummy XML file in TFTP Folder:

1) Create a TEXT FILE called spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2) as follows:
CODE
<flat-profile>

<Restricted_Access_Domains ua="na"></Restricted_Access_Domains>
<Enable_Web_Server ua="na">Yes</Enable_Web_Server>
<Web_Server_Port ua="na">80</Web_Server_Port>
<Enable_Web_Admin_Access ua="na">Yes</Enable_Web_Admin_Access>

<Admin_Passwd ua="na"></Admin_Passwd>
<User_Password ua="na"></User_Password>

<Protect_IVR_FactoryReset ua="na">No</Protect_IVR_FactoryReset>

</flat-profile>
2) Copy the new spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2) file to your TFTP ROOT directory (or directories if running multiple TFTP servers)
3) Reconnect the standard ethernet cable between the RT31P2/WRT54GP2 WAN port and the PC ethernet port. (I don't think you should need a crossover cable.)
4) Make sure all your servers are started and then power cycle the RT31P2/WRT54GP2.
5) Check your TFTP Server's log to see when the file has been grabbed. It should be.

Note: The Unlocking 2.0.9 firmware allows PLAIN TEXT config files to be loaded and processed. That is why this unlock "trick" works.

STEP 5: Check if Unlock Procedure Worked and Restore PC:

1) Disconnect the ethernet cable from the PC running the HTTP/TFTP/DNS servers
2) Disable the servers and undo the changes you made to your PC in Step 3
3) Once things are reverted back on your PC, you want to check to see if it worked.
4) Reconnect your PC to a LAN port on the RT31P2/WRT54GP2
5) In your web browser, go to the RT31P2/WRT54GP2 Voice Web Interface: >>http://192.168.15.1/Voice_adminPage.htm
6) If the Voice Section of the RT31P2/WRT54GP2 adapter loads, then you successfully unlocked your RT31P2/WRT54GP2.
7) At this point, you don't want to make any changes in the Voice Tab as the modified RT31P2/WRT54GP2 firmware is unstable.

STEP 6: Obtain the FACTORY FRESH GPP_K key (recommended)

Why do I need the GPP_K value? (Linked Post for Details)

1) Locate the Provisioning tab on the Voice Admin page.
2) Copy down the GPP_K value into a text file and save. This GPP_K should be the Factory Fresh value.
3) To verify that this is the Factory Fresh value, use VuckFonage to download and decrypt the XML file.
How do I use VuckFonage? (Link)

STEP 7: Upgrade to a Stable Firmware:

1) Go to the Firmware Update page of the Web Interface
2) Update to the Latest Stable Firmware
RT31P2 Stable Firmware: (Latest Firmware Link)
WRT54GP2 Stable Firmware: (Latest Firmware Link)
3) After the firmware update, you should still have access to the Voice Admin page.
4) You should now be able to disable provisioning and remove the Vonage DNS entries as this is a stable firmware.

cron

9-9-06, 10:35pm

RT31P2/WRT54GP2 Alternate Unlock - Long Method

This is the Long Method unlock instructions which involve extra tasks like loading an encrypted xml file w/o using internet provisioning.

Please Note: This is an advanced unlock process. meister_sd's original methods in Post 4/Post 5 or the Guides in Post 10 may be easier.

Pre-Unlock Setup:

RT31P2 - See Post #2 (Link)
WRT54GP2 - See Post #3 (Link)

STEP 0 : Factory Reset the adapter (Optional):

1) This step probably isn't necessary unless you had a number of problems with your adapter or your adapter has already been on the internet. You could probably skip it unless you have further issues during the unlock process.
2) There are two methods of reset if you need to use it:
- Hold the reset button on the back for 5 seconds (Some say 30 seconds)
- In the Web Interface at 192.168.15.1, reset to factory defaults under the administration tab.

STEP 1: Setup the HTTP/TFTP/DNS/DHCP servers to load encrypted xml file and firmware:

1) See Server Setup Post #8 (Link)

STEP 2: Prepare your local file structure:

Encrypted XML:
1) In your TFTP ROOT directory (or directories if running multiple TFTP servers), copy your adapter's ENCRYPTED config file to that directory as spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2)

To download it: >>http://httpconfig.vonage.net/spa000000000000.xml (where 000000000000 is the MAC ADDRESS)
2.0.9 Unlocking Firmware:
2) In your HTTP ROOT directory (typically htdocs for Apache, docs for IPlanet/Netscape, wwwroot for IIS), create sub-directory: +000000000000 (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2)
3) Rename Unlocking Firmware 2.0.9 filename:
RT31P2: RT31P2_v1.17.02_000_combin_code.bin to "RT31P2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin"

WRT54GP2: wrt54gp2_v1.27.02_209_combin_code.bin to "wrt54gp2_v1.30.01_000_VM_3.1.06_LI_combin_code.bin"
4) Copy the modified unlocking v2.0.9 firmware to the HTTP-ROOT/+000000000000/ directory (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2)
5) Double check to make sure that the renaming of the modified 2.0.9 unlocking firmware filename was completed.

STEP 3: Start the UNLOCK PROCESS (i.e. load the unlocking 2.0.9 firmware into your RT31P2/WRT54GP2):

STEP 4: Setup Dummy XML file in TFTP Folder to (Re-)Open WEB access:

1) Create a TEXT FILE called spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2) as follows:
CODE
<flat-profile>

<Restricted_Access_Domains ua="na"></Restricted_Access_Domains>
<Enable_Web_Server ua="na">Yes</Enable_Web_Server>
<Web_Server_Port ua="na">80</Web_Server_Port>
<Enable_Web_Admin_Access ua="na">Yes</Enable_Web_Admin_Access>

<Admin_Passwd ua="na"></Admin_Passwd>
<User_Password ua="na"></User_Password>

<Protect_IVR_FactoryReset ua="na">No</Protect_IVR_FactoryReset>

</flat-profile>
2) Copy the new dummy spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your RT31P2/WRT54GP2) file to your TFTP ROOT directory (or directories if running multiple TFTP servers)
3) Make sure the encrypted xml config file is REMOVED from your TFTP root. You only want the dummy file now.
4) Reconnect the standard ethernet cable between the RT31P2/WRT54GP2 WAN port and the PC ethernet port. (I don't think you'll need a crossover cable.)
5) Make sure all your servers are still started and then power cycle the RT31P2/WRT54GP2.
6) Check your TFTP Server's log to see when the file has been grabbed
If the TFTP Server's log shows a FILE NOT FOUND error message, and if the file attempting to be grabbed was requested from an obscurely named sub-directory (i.e. /a12BcdeFgH/spa000000000000.xml), create that sub-directory (a12BcdeFgH) underneath the TFTP Root and move (or copy) the spa000000000000.xml file to that sub-directory. Then re-Power Cycle the RT31P2/WRT54GP2 and re-check the TFTP Server's log.
7) You should now have access to the Voice_adminPage.htm of your adapter.
RT31P2/WRT54GP2 Voice Web Interface: >>http://192.168.15.1/Voice_adminPage.htm
8) At this point, you don't want to make any changes in the Voice Tab as the modified RT31P2/WRT54GP2 firmware is unstable.

Note: The unlocking 2.0.9 firmware allows PLAIN TEXT config files to be loaded and processed. That is why this unlock "trick" works.

STEP 5: Obtain the FACTORY FRESH GPP_K key (recommended)

Why do I need the GPP_K value? (Linked Post for Details)

1) On the Provision page in the Voice section of your Web Interface copy down the Vonage GPP_K value. This is NOT the value you need, but it may be worth writing down in a text file for future reference.
RT31P2/WRT54GP2 Voice Web Interface: >>http://192.168.15.1/Voice_adminPage.htm
2) In STEP 3, the encrypted Vonage Config File got loaded into the adapter. This caused the adapter's FACTORY FRESH GPP_K value to be overwritten w/ one supplied by Vonage.
3) With the adapter disconnected from the internet and loaded with the 2.0.9 unlocking firmware, FACTORY RESET THE ADAPTER (Using Web Interface if possible). This will cause the FACTORY FRESH GPP_K value to be re-loaded, but it will also re-lock the adapter. Before FACTORY RESETTING the adapter though, delete your Vonage Encrypted spa000000000000.xml file from your TFTP ROOT! Otherwise, upon performing a FACTORY RESET, your adapter will request and process this file, a file which DISABLES THE ADAPTER'S WEB INTERACE!
4) Repeat STEP 1 (Setup Servers) and STEP 4 (Load Dummy XML file) to Re-Open your Web Interface. (Step 1 and Step 4 ONLY)
5) After the adapter has been re-unlocked, extract the GPP_K value and save it!
6) Copy down the GPP_K value into a text file and save. This GPP_K should be the Factory Fresh value.
How do you tell the difference beween the FACTORY FRESH GPP_K value and a Vonage assigned one? (Link)
7) To verify that this is the Factory Fresh value, use VuckFonage to download and decrypt the XML file.
How do I use VuckFonage? (Link)

STEP 6: Upgrade to a Stable Firmware:

1) Go to the Firmware Update page of the Web Interface
2) Update to the Latest Stable Firmware
RT31P2 Stable Firmware: (Latest Firmware Link)
WRT54GP2 Stable Firmware: (Latest Firmware Link)
3) After the firmware update, you should still have access to the Voice Admin page.
4) You should now be able to disable provisioning and remove the Vonage DNS entries as this is a stable firmware.

cron

9-9-06, 10:50pm

Server Setup Post: HTTP/TFTP/DNS/DHCP servers

You may have a slightly different setup, so alter the directions accordingly. For example, using Simple DNS instead of your host file for a DNS Server.

1) Temporarily disconnect the ethernet cable between the PC and voip adapter and setup the following:
2) Setup the HTTP Server like Apache Server running on your PC
Settings During Install: (Probably not necessary)
Domain Name: vonage.net
Server Name: httpconfig.vonage.net
3) Setup the TFTP Server like Solarwinds running on your PC
(file>configure>security, change to transmit and receive files)
4) A DNS Server running on your PC (Windows 'hosts' file):
•Load C:\Windows\System32\Drivers\etc\hosts into NotePad (it's a text file)
•Add the following to the end of the file:
CODE
192.168.0.1 ls.tftp.vonage.net
192.168.0.1 httpconfig.vonage.net
192.168.0.1 vonage.net
•Save the file and exit NotePad (Remember to revert changes AFTER unlocking)
4) A DHCP Server running on your PC via Internet Connection Sharing (ICS):
•For this to work, you need at least two network "interfaces" in your Network Connections folder. A Wireless Network Connection plus a Local Area Connection (i.e. ethernet interface) will suffice:
•Open up Network Connections
•Right click on Wireless Network Connection
•Select the Advanced tab
•Check the box for "Allow other network users to connect through this computer's Internet connection"
•If there's a drop-down box below requiring you to select a "Home networking connection," choose "Local Area Network"
•ICS will now be active on the Local Area Connection (this seems backwards, but that's how ICS works). The PC's Local Area Connection will be the ICS "gateway" and will be assigned an IP Address of 192.168.0.1.

Make sure the Wireless Network Connection is NOT connected to the Wifi network!!! ICS will share your PC's wifi connection w/ its ethernet port, so if the wifi connection is "alive," and if the wireless router is connected to the internet, your PC's ethernet port will be on the internet too!

cron

9-9-06, 10:50pm

GPP_K Details and VuckFonage XML Decryption

Why do I need the GPP_K value?
(Linked Post for Details)

The basic reason: Your voip company could start pushing an update that makes your device unlockable. If you accidentally factory reset your device and the device remains on the internet, it may take up such an update. In that case, the GPP_K value may be the only thing that can get you back into the device.

How do you tell the difference beween the FACTORY FRESH GPP_K value and a Vonage assigned one?
Attributes of the FACTORY FRESH GPP_K value:
44 characters long
Comprised of alpha (A-Z, a-z), numeric (0-9), and symbols
Ends with an EQUAL SIGN (=)
Example: n6KClGUoMXzIQ/JmmuSFBE1GOu+M8335eHfPeYHeRAs=
Attributes of a Vonage Assigned GPP_K value:
64 characters long
Comprised of HEX characters (A-F, a-f, 0-9) only!
Example: 9190ca44e4cffb893c2ae43c4bca57fb18f04482a84dcce30d28017e7715a8a0

How do I use VuckFonage?
Download and install the software (Link)
Domain Name is ls.tftp.vonage.net
MAC address is the one on the adapter
GPP_K value is the one that you saved in the text file (Factory fresh)
Select a folder to output the decrypted files
Click Download and Decrypt
That's it. You should save the decrypted file just in case

cron

9-9-06, 10:50pm

Other Guides:

There were a few nice people out there who also made guides besides myself and meister_sd

Here they are:

christcorp's RT31P2 Unlock Instructions (Post #15)

bommenarao/srid121 WRT54GP2 Unlock Instructions (Post #29)

cron

9-9-06, 11:09pm

If any of these instructions need editing or clarification, please let me know and i'll update.

DaaZee

9-10-06, 6:46pm

QUOTE(cron @ 9-9-06, 11:35pm)

If any of these instructions need editing or clarification, please let me know and i'll update.

It would be really great if you can make "Alternative RT31P2 Unlocking Method" little bit more descriptive, specially the part mentoned in notes section that is how is find what firmware name and directory structure would be needed on http server and how to find this. I am hoping that many of the folks would not have two nic and details would certainly be appreciated.

cron

9-11-06, 9:13pm

I've got a new Linksys WRT54GP2, so i'll try to help in the revisions after I get mine unlocked.

I updated with the meister_sd WRT54GP2 instructions for now.

Here's the original dslreports thread if more guidance is needed in the meantime: (Link)

srid121

9-14-06, 8:44am

ANy One have a detailed document on unlocking the WRT54GP2 please? I am stuck at feeding xml file. If any one can give me guidence on how to connect the PC, configure the router, simple dns plus and tftp I would really appreciate.
Thanks for your time.
Sri

cron

9-15-06, 12:57pm

RT31P2 Unlock Steps

Looks like christcorp on dslreports also wrote up a guide with some detail. That's the link in case you want to download the zip file

QUOTE

RT31P2 Unlock Steps
Anyway, before proceding, I'm not going to spend time here explaining how to use TFTP or a DNS server. That's just going to take up space, and I'm already long winded. Also, these instructions will assume that you are using a fairly common home/soho network with a router. Also, I'll assume that you downloaded meister_sd provided firmware. Also, that you copy and pasted the plain text xml file he provided here at DSLREPORTS.

Very Important Note: When you copy and past the flat text file. Make sure you ONLY copy from the beginning of the text, to the end of the text. Don't have any extra lines or spaced added by accident. 1 extra bit or character and it gets wierd. That was part of my problem. Also, when you paste it, past it in "NOTEPAD". Don't use wordpad, word, or other program. You linux folks will just have to experiment. This was also my problem unlocking. When pasted in Wordpad or word, it pasted as you saw it when you copied it. It wouldn't work. Even thoug I saved it as a txt file. When I saved it in "NOTEPAD", it saved as one long line entry. I saved it as a text file; spaxxxxxxxxxxxx.xml (Replace the first 12 x's with the mac of the RT31P2. This worked fine. Put this file in the default tftp directory.

1. If you have a brand new, out of the box, virgin RT31P2; connect a computer to a lan port on the RT31P2 and put the WAN port of the RT31P2 to the home router and LET the RT31P2 go on line and provision with vonage. (If you have already had this adapter provisioned before, you can skip the part about putting it online). Configuring the RT31P2 for static IP addresses and DNS are not required. Just put the sucker on the internet.

2, Using the computer you plugged into the lan port, if it's a new adapter, you will tell that it has been provisioned, because it should have updated the firmware of the router to 1.30 or similar.

3. Once the adapter is properly provisioned, disconnect the WAN cable from your network router.

4. Having saved a copy of the 1.17 firmware that meister provided, make sure you have a copy of it on the computer you have plugged into the lan port of the RT31P2. It can be on it's hard drive, or on a floppy. It's right at about 1mb in size.

5. With just the computer connected to the RT31P2, and it NOT connected any longer to the home router or internet, log into the RT31P2 with admin/admin and go to the administration; firmware upgrade section. Point to the firmware file you saved, and begin the firmware upgrade. (Downgrade to 1.17). When it asks for user name and password, use one of the PAP2 user names and passwords that meister_sd provided. The one that worked for me was, user/7756112 But that's not to say that is the right one for you. If it's the right one, the process will end with the RT31P2 saying the firmware was successful. If it's the wrong one, the RT31P2 will just go back to the normal screen, and you will see it is still at the original firmware you started with. Just repeat the process, and use a different username and password when the time is asked. It took me 3 times.

6. Now, assuming you are now at the proper firmware of 1.17 and 2.09 for voice, we can continue. Now, if the computer you plugged into the RT31P2 is the only one you have, and it's also the one with the Simple DNS and Sonicwind TFTP servers on it, then disconnect it from the lan port, and reconnect it to your home network just like you had it before we started this adventure. I had an extra computer available, a laptop, so that is what I plugged into the lan port of the RT31P2. This way I could leave my main computer with the DNS and TFTP normal on my network. Anyway, if it is your only computer, just connect it back up to your network.

7. Now, you can turn the power to the RT31P2 off, and make sure your computer with DNS and TFTP is set up properly. Obviously, this computer must have a static IP address from your home router. e.g. 192.168.1.100

8. Disconnect the broadband from your home router. You can leave the rest of the network hooked up normally

9. Edit your router wan settings to make sure it has a static IP address. This is needed so you can also tell it DNS settings. Being the router isn't on the internet, the static IP address you put in isn't important. What is important is when you put in the DNS, put in the IP address of the computer you are using with the dns and tftp server software running.

10. Assuming that the spaxxxxxxxxxxxx.xml file you saved earlier in NOTEPAD is in the tftp directory, go ahead and start both the DNS and the TFTP server programs

11. Connect from the WAN port of the RT31P2 to an available lan port on your home router. Then, plug in the power to the RT31P2. If you watch the TFTP server screen, in a few minutes, it should say that the spaxxxxxxxxxxxx.xml file was sent to the dynamic IP address of the RT31P2. If this happens, as hopefully it will, wait about another 30 seconds, then you can turn off the dns and tftp server. If after a minute, you still haven't seen the file transferred entry, then leave the dns and tftp servers running, and unplug the power to the rt31p2. Wait about 10 seconds, then plug the power back in. It took me a couple of times, but the RT31P2 finally asked for my local machine and got the file. (You can monitor in Simple DNS by clicking on the log).

12. Now, assuming it took the file, you can disconnect the WAN of the RT31P2 to the home router. If you have a second computer connected to the LAN port of the RT31P2, you can open up the adapter at 192.168.15.1 and should be able to now access the voice section. Also, by going to the hidden page, you can now turn on provisioning and such. If you only had the one computer, you will need to put that one back to dynamic instead of static IP, so you can connect it to the LAN port of the RT31P2 and see if you can access the voice section.

Anyway, That is how I got it to work. There wasn't a need to have to ORIGINAL xml file from vonage. Only if you didn't want to provision the RT31P2 online. Hope this helps. No promises, but that's how I got mine to work.

cron

9-16-06, 1:39pm

Too easy.

I used a modified version of TheDiggler's 3.1.9 PAP2 unlock procedure to unlock my WRT54GP2.

Then i decided i'd experiment with the unlocking technique and ended up semi-bricking my WRT54GP2.

So, i unlocked that by factory resetting and then using the full TheDiggler's 3.1.9 PAP2 unlock technique to get unlocked again.

I'll post instructions on what i did shortly.

cron

9-16-06, 10:25pm

Can someone with an RT31P2 answer me a question?

meister_sd's instructions say that "The router must be provisioned in order to access the firmware upgrade."

Is that verified?

Because on my virgin WRT54GP2 you could go right to the firmware update page on the Web Interface, update the with the 2.0.9 unlocking firmware, and then follow that with a loading of the dummy xml. The device was basically unlocked after that.

I'm trying to figure out how different they are.

Thanks

maxim

9-17-06, 5:36pm

Is it has to be virgin unit? Is it has to be "Never connected to internet" like pap2?

Thank you.

cron

9-17-06, 5:58pm

QUOTE

From christcorp's instructions:

1. If you have a brand new, out of the box, virgin RT31P2; connect a computer to a lan port on the RT31P2 and put the WAN port of the RT31P2 to the home router and LET the RT31P2 go on line and provision with vonage. (If you have already had this adapter provisioned before, you can skip the part about putting it online). Configuring the RT31P2 for static IP addresses and DNS are not required. Just put the sucker on the internet.

it doesn't looks like it has to be brand new. At least if you also look at christcorp's instructions in post 10 and meister_sd's instructions in post 2.

DaaZee

9-17-06, 6:41pm

QUOTE(cron @ 9-17-06, 6:58pm)

it doesn't looks like it has to be brand new. At least if you also look at christcorp's instructions in post 10 and meister_sd's instructions in post 2.

I tried unlocking my used RT31P2 using hristcorp's isntructions and here are my observations, see if you can help me

1. Router is not new and is already provisionned.
2. I was able to downgrade it to 1.17 with 2.0.9 [LID]. I used PAP2 user/ password combination when asked for credentials.
3. Upgrade went smooth. I was able to log in to RT31P2 on web interface and verfied the firmware versions that it was showing 1.17 with 2.0.9 [LID].
4. RT31 didn't seem to make request for xml on http ot tftp even after 15-20 reset attempts and nor simple dns logs suggest anything.
5. Since i was stuck i connect it to internet to verify voice part still works. [I shouln't have done that]. It got provisioned to vonage again and works fine.
6. Later again removed box from internet, used ethereal, and found that it was making tftp requests at c.voncp.com at a path /somefoldername/spaMAC.xml
7. I configured tftp for c.voncp.com and feeded it xml from desired folder location. It took 5-10 minutes but it did grab xml file.
8. I power cycled RT31p2, went to voice tab it displayed a message to contact servce provider.
9. Voice_adminPage.htm asked for user/ paswwords but didn't accept blank passwords. [I verified that firmware version is still 1.17 with 2.0.9 ]
10. I reset my device for a couple of times, it ethreal pointed out that this time it was asking for /spa-MAC.xml [note it was not looking for a folder anymore] and i feeded it flat profile xml file, it grabbed it. After power cycling the box i was not able to see voice setings as earlier.

So now i am stuck with firmware version 1.17 on it. I tried putting firmware 'RT31P2_v1.17.02_000_combin_code.bin' again but this time user/ paswwords combination did not work.

Since it has 2.0.9 which accepts plain test xml file, i was hoping it can be unlocked
Any suggestion? Can this be unlocked from this stage? Any suggestionsor help is much appreciated.

cron

9-17-06, 7:01pm

QUOTE(DaaZee @ 9-17-06, 9:41pm)

4. RT31 didn't seem to make request for xml on http ot tftp even after 15-20 reset attempts and nor simple dns logs suggest anything.

Hmm, that is strange.

Did you try factory resetting from both the Web Interface and the button on the back of the RT31P2?

DaaZee

9-17-06, 7:16pm

QUOTE(cron @ 9-17-06, 8:00pm)

Hmm, that is strange.

Did you try factory resetting from both the Web Interface and the button on the back of the RT31P2?

Yes, i did.

cron

9-17-06, 7:28pm

One of the places I would look is making sure your servers are set up alright.
Check the dummy xml file and make sure it's setup correctly. I believe christcorp has a special note about that.

A question for you. When you first started unlocking, what firmware did you have before you updated to the 2.0.9 unlocking firmware?

DaaZee

9-17-06, 7:36pm

QUOTE(cron @ 9-17-06, 8:27pm)

xml file seem to be fine. servers are set up correctly.
When i first started unlocking, well i made a mistake didn't note it down but as far as i remember it was 1.30 with 3.x

However, sice it has 1.17 /2.0.9 shouldn't it accept text files and blank out passwords? Do you thin i should follow any sequency of reset - i.e. reset from web interface and then from a butto at the back?

cron

9-17-06, 7:48pm

QUOTE(DaaZee @ 9-17-06, 10:35pm)

However, sice it has 1.17 /2.0.9 shouldn't it accept text files and blank out passwords? Do you think i should follow any sequency of reset - i.e. reset from web interface and then from a butto at the back?

it makes sense to me. That's exactly what it should do. I did exactly that when i unlocked my WRT54GP2.

Regarding that firmware. Sounds like it must have been the latest one.

It's weird that it's not asking for any spaXXXX.xml file now. Once you factory reset the adapter, it's one of the first things it should be doing.

So, somehow we need to get your adapter to start looking for spaXXX.xml files again. Only thing i can think of right now is trying to get the firmware upgraded to a stable one. Then factory reset and start the unlock process over.

DaaZee

9-17-06, 8:01pm

QUOTE(cron @ 9-17-06, 8:47pm)

So, somehow we need to get your adapter to start looking for spaXXX.xml files again. Only thing i can think of right now is trying to get the firmware upgraded to a stable one. Then factory reset and start the unlock process over.

I am going to try playing hard with it in a while, i think after re-setting it it a couple of times on web interface and with back button it would get back to a stage where is asks for spaMAC.xml. If it asks for xml should i feed it or upgrade it to a stable firmware?
Also, at this time i tried putting the same firmware again but it did not accept any user/passwds so i am not sure as how to upgrade it to stable f/w. One thought is - if i connect it to internet and allow remote upgrade, would vonage upgrade f/w? I will wait for your instructions :-)

cron

9-17-06, 8:04pm

QUOTE(DaaZee @ 9-17-06, 11:01pm)

If it asks for xml should i feed it

As long as it's on the 2.0.9 firmware, i don't see why not. I would maybe try making a new dummy xml. Just to make sure it's working ok.

Edit: I'm going to post my instructions on what i did sometime tomorrow probably. That may also help you as I unlocked mine in two similar ways. One method involved the full TheDiggler method of loading the encrypted xml to get the 2.0.9 unlocking firmware fed.

cron

9-17-06, 10:40pm

Also, I notice that sometimes the Firmware Upgrade in the Web Interface for the WRT54GP2 can be a little buggy. It takes up the firmware and sometimes it doesn't. Especially when loaded with the sipura firmware. So, you may have to try a few times to get it to take.

meister_sd also released another 2.0.9 sipura firmware for people with the WRT54GP2. Basically in case you're having problems with the 1.27 unlock firmware he made previously.

wrt54gp2_v1.20.01_20 (v1.20 w/2.09)

Quote from meister_sd:

QUOTE

I noticed a strange thing, I got another brand new WRT54GP2 and it wasn't provisioned and came with v1.20. I developed a new FW that I was told was on vonage's site, another v1.20. So I took off voice 2.0.10 and put on 2.0.9 and guess what? It didn't ask for a password! Maybe it doesn't when the router version is the same - I don't know.

So, since you are having problems getting that one to load, try this one.

I did actually test this firmware myself and it worked pretty well. Give it a shot in case you have problems.

srid121

9-18-06, 9:47am

Hi,

I have put together a detailed document on unlocking WRT54GP2 router with screen shots. The document is located at:
http://www.dslreports.com/r0/download/1064...nstructions.zip
Use these instructions at your own risk. Also credit goes to “meister_sd” who provided information on unlocking it initially. I am writing these instructions based on my experience in unlocking the WRT54GP2 after reading so many posts on it. I am trying to put all the information at one place. I did not have prior knowledge of unlocking using XML file method and I had spent countless hours in learning the method. Each time I tried I ran into issues. After reading thru so many posts, finally I was successful. So, I thought of putting this document together for people who are on the same boat as me and I think it will be beneficial to every one and to folks who are IMed me for the instructions.
Also I would like to say Thanks to “meister_sd”. Without his dedication and effort this would have not been possible. Also Thank “mazilo” for his initial guide and the basic steps he provided which were very helpful for me and many.

Hope the instructions will be helpful. Again do not blame me if anything happends to your router. Use it at your own risk, as I did it with my risk
Thanks,
bommenarao/srid121

cron

9-18-06, 4:50pm

Ok, I've posted what i did in the OP's.

I posted a short and long method that both worked on my virgin WRT54GP2 adapter that originally had 2.0.10 voice on it. It may work for already provisioned adapters as well.

Please let me know about the success of the short method. Just so we know whether it works on the RT31P2.

The long method is just in case the short method doesn't work.

There are bound to be typos and corrections. Please report them via a reply to this thread.

Hope this guide helps

pbarnsley

9-20-06, 1:51pm

Hi Guys,
I have bought a brand new Linksys WRTP54G which is not tied to any provider. I have a vonage service, but their support keep ignoring my emails to tell me the settings I need to put into my new router to get it to log onto Vonage.

Now assuming I get vonage to add my new Mac to their allowed list, does anyone know how I would upload the XML file for my old router onto the new one? Or does anyone know the settings I need to get my new router working.

cron

9-20-06, 2:19pm

QUOTE(pbarnsley @ 9-20-06, 4:51pm)

does anyone know how I would upload the XML file for my old router onto the new one? Or does anyone know the settings I need to get my new router working.

If you're only goal is to use the device with vonage and not unlocking.....

Once Vonage adds the mac address to their allowed list under your account, wouldn't it just automatically provision for your service once it's connected to the internet?

If that doesn't work, i bet you could just download the encrypted xml from vonage and just upload it to your adapter and it would start provisioning and updating itself.

To do a test to double check whether there is an encrypted xml available from vonage for your adapter:
Download your encrypted XML config file for your adapter: >>http://httpconfig.vonage.net/spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your WRT54GP2)

supercool

9-20-06, 2:47pm

Folks, I need help. I am so close to unlocking my device.

I am stuck in the spa xml step. I have uploaded the 1.20.02/2.09 firmware on my WRT54GP2 successfully. I have the simple DNS, TFTP all setup. Turned off my firewall. Also have ethreal logs and simple dns logs. The only relevant request i see is time.vonage.net for every few seconds. I am not finding any requests comming in for the xml file. Do I need to factory reset for it to ask the spa xml file. I tried the reset button but nothing happened. The factory default screen however asks for a password. What do I do.

What am I missing. Please help.

Thanks

cron

9-20-06, 2:49pm

QUOTE(supercool @ 9-20-06, 5:47pm)

The factory default screen however asks for a password.

none of the 5 user passwords work?

Also, how long did you let it take to sit? Sometimes it takes a couple minutes for it to take up the xml file. A power cycle helps too.

supercool

9-20-06, 3:15pm

I dint know there are 5 password for factory reset. What is the user id and passwords for factory reset. I think if i factory reset it should definitely ask for the xml file.

I did leave it for atleast 20 to 30 mins. Still no call for xml files. Any other possibility.

cron

9-20-06, 3:19pm

I definitely found the web interface factory reset to be more effective than the button. At least when i unlocked my wrt54gp2 the third time.

The two mentioned in my posts are the most common one's for these adapters, but here's the full list of "known" user passwords:

7756112
8995523
78196365
50274537
5465866

The two in red are the most likely one's
Also instead of "user" try "administrator". Not sure if that makes any difference, but it couldn't hurt

supercool

9-20-06, 3:29pm

Cron,

I did use one of those "user" passwords for firmware upgrade. does web interface factory reset also take one of those five passwords. Please confirm. I still stuck, unable to get the device to take the xml file. Is there a way for me to push the xml file via tftp?

Please let me know

cron

9-20-06, 3:34pm

QUOTE(supercool @ 9-20-06, 6:28pm)

does web interface factory reset also take one of those five passwords. Please confirm. I still stuck, unable to get the device to take the xml file.

i would try

Also, try holding the reset button on the back for 30 seconds.

QUOTE

Is there a way for me to push the xml file via tftp?

The current methods i've seen involve the adapter taking the xml. If there's a method to push the xml, i'm not sure. There might be.

thaychuari

9-20-06, 4:11pm

PC IP address 192.168.0.1 when connected to WAN port of WRT54GP2.

What kind of cable do I need? Regular ethernet cable does not seem to work. When I connect my pc to WAN port of WRT54gp2, my pc ip address 0.0.0.0, but when I connect to LAN port of WRT54gp2 it gives my pc ip of 192.168.15.100.

Basically, I could not get my router to except a dummy XML file.

cron

9-20-06, 4:39pm

QUOTE(thaychuari @ 9-20-06, 7:11pm)

Are your servers set up properly? If they are, it sounds like you'll need a crossover cable since it's not working. Although i thought the WRT54GP2 had an internal crossover. You could use a router in between the PC and voip adapter, but that may need a few adjustments in your settings.

thaychuari

9-20-06, 5:09pm

QUOTE(cron @ 9-20-06, 4:39pm)

Can you elaborate more on this? I am currently using linksys 614+. Or I will get a crossover cable and try out your short instruction and will report back.

cron

9-20-06, 5:19pm

QUOTE(thaychuari @ 9-20-06, 8:08pm)

Can you elaborate more on this? I am currently using linksys 614+. Or I will get a crossover cable and try out your short instruction and will report back.

I really don't think you should need a crossover cable. I would look back at your settings.

Are you sure you enabled ICS(Internet connection sharing) properly?

thaychuari

9-20-06, 7:52pm

QUOTE(cron @ 9-20-06, 5:18pm)

I really don't think you should need a crossover cable. I would look back at your settings.

Are you sure you enabled ICS(Internet connection sharing) properly?

Thank you very much. I did not enable ICS. Got it unlock.

cron

9-20-06, 8:04pm

QUOTE(thaychuari @ 9-20-06, 10:52pm)

Thank you very much. I did not enable ICS. Got it unlock.

You're welcome. Glad you got it unlocked.

supercool

9-21-06, 7:51am

I finally got my WRT54GP2 unlocked. The Simple DNS for some reason just dint work for me. It used to work so well for the pap2. Anyway I just did the host file (Internet Connection Sharing) and it all worked like a charm. Within a minute it asked for the spa xml file, gave it the the normal xml file and then it is unlocked.

Thanks this forum rocks.

supercool

9-21-06, 11:18am

Can anyone send me a working FWD(Freeworlddialup) setting on a WRT54GP2. I am having some issues getting it to work. Please could some one share.

Thanks

thaychuari

9-21-06, 2:14pm

QUOTE(supercool @ 9-21-06, 11:18am)

Can anyone send me a working FWD(Freeworlddialup) setting on a WRT54GP2. I am having some issues getting it to work. Please could some one share.

Thanks

Do you have a working PAP2? If you do, just copy the setting from PAP2 to this and it will work. Both of my lines, fwd and Gizmo, are working.

cron

9-22-06, 5:22am

This is the config for FreeWorldDialup off of their forums for a PAP2. I'm guessing it should work.

QUOTE

Line Enable: YES
NAT Mapping Enable: YES; NAT Keep Alive Enable: YES
SIP Port: 5061

Proxy: fwd.pulver.com; Use Outbound Proxy: YES

Outbound Proxy: fwdnat.pulver.com:5082

Display Name: (Your name); User ID: (Your FWD number)
Password: (Your FWD password)

Preferred Codec: You must choose 711u
Use Pref Codec Only: NO

Dial Plan: (xxx|xxxx|xxxxx|xxxxxx|1xxxxxxxxxx|*1xxxxxxxxxx|**1xxxxxxxxxx|*xx*xx.)

buytamil

9-22-06, 10:14pm

None of the password works when i click upgrade. Its a brand new GP2 bought from compusa. The fw is 1.25.00 and 2.0.12(LI). I tried the factory reset button. how do i verify whether the reset is successful.

QUOTE(cron @ 9-20-06, 3:19pm)

78196365
50274537
7756112
8995523
5465866

Also instead of "user" try "administrator". Not sure if that makes any difference, but it couldn't hurt

thaychuari

9-23-06, 4:38am

buytamil,
you have to let your wrt54gp2 provisioned to 1.30.?? before you can unlock it.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.