I got stucked, none of the passwords worked, I have to return the device to the store I bought it, So I will think about getting one unlocked.
Thanks
Main Topics
Browse All TopicsHi,
I want to buy the Linksys PAP2 for being used with the VoIPbuster Service, I have only seen PAP2 Vonage ready; is there a way to unlock it ? I know I can buy one unlocked but it is more expensive plus shipment and time because you don´t get it after a week.
I did read an answer here about not to plug in to the internet before changing the settings; Is that true? I could not see in such answer whether it worked or not.
Thanks
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Business Accounts
Answer for Membership
by: atherhPosted on 2006-09-29 at 07:47:18ID: 17627781
If your adapter that came with firmware 3.1.9 or If you don't have the GPP_K value of the adapter which has been upgraded to firmware 3.1.9, before going any further, make sure you can FACTORY RESET THE ADAPTER (while it's disconnected from the internet).
STEP 1: Factory Reset the adapter:
1) Disconnect the adapter from the internet
2) Connect a simple telephone to LINE1
3) Enter IVR mode by dialing: ****
4) Enter the command: 73738# (i.e. R E S E T #)
5) When prompted for password, enter one of the 5 "known/common" Vonage USER Passwords:
78196365
50274537
7756112
8995523
5465866
6) Press the # key after entering a password
7) Repeat the process above until one of the passwords works or you've exhausted the list
If the adapter successfully factory resets, you may proceed with the next series of steps.
If not, you're pretty much "stuck" at this point and need to find a working Vonage USER Password.
STEP 2: Attempt to access the PAP2's WEB INTERFACE & remove Vonage's DNS settings:
1) Disconnect the internet connection from your BROADBAND ROUTER or BROADBAND MODEM
2) Connect the PAP2 to your ROUTER
3) Connect a PC to the ROUTER
4) In a web-browser, navigate to the PAP2's IP address (if you don't know it, go back into IVR mode and issue command 110#)
5) Go to the "SYSTEM" tab and clear out the "Primary DNS" and "Secondary DNS" entires.
Note: If you can't access the adapter's web interface, so long as the adapter remains disconnected from the internet, the inability to perform this series of steps is not a big deal. The adapter will simply take longer resolving DNS requests (by trying Vonage's IP addresses first, and after failing to reach them, trying DHCP assigned DNS entries next).
STEP 3: Gather/setup the following items:
1) Sipura SPA-2000 Firmware 2.0.9 converted to PAP2 mode firmware and renamed to file: PAP2-bin-03-01-09-LSc.bin.
2) An HTTP Server running on your LOCAL LAN (Any web server like IIS or Apache etc)
3) A TFTP Server running on your LOCAL LAN @ Port 69 (for simplicity make this the same PC as the HTTP server)
4) A DNS Server running on your LOCAL LAN (for simplicity make this the same PC as the HTTP & TFTP servers)
5) A copy of your adapter's ENCRYPTED Config File (from Vonage's TFTP server) named spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your PAP2)
6) A CROSSOVER Ethernet cable
STEP 4: Configure your LOCAL LAN's DNS Server to mimic Vonage's Servers:
1) Point httpconfig.vonage.net to the LAN IP address running your HTTP server
2) Point ls.tftp.vonage.net to the LAN IP address running your TFTP server
3) (Optional but recommended) Point *.vonage.net to the LAN IP address running your HTTP/TFTP servers
4) (Optional but recommended) Forward UDP ports 21 & 2400 to Port 69 (so that your TFTP server receives traffic on ports 21, 2400, and the default TFTP port of 69). If you don't know how to configure this, setup a 2nd TFTP server listening on PORT 2400. (Vonage seems to use ports 69 & 2400 the most, but they also use 21).
STEP 5: Prepare your local file structure:
1) In your TFTP ROOT directory (or directories if running mulitple TFTP servers), copy your adapter's ENCRYPTED config file to that directory as spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your PAP2)
2) In your HTTP ROOT directory, create sub-directory: +000000000000 (where 000000000000 is the MAC ADDRESS of your PAP2)
3) Copy the modified SPA-2000 v2.0.9 firmware to the HTTP-ROOT/+000000000000/ directory (where 000000000000 is the MAC ADDRESS of your PAP2) as filename PAP2-bin-03-01-09-LSc.bin
STEP 6: Start the UNLOCK PROCESS (i.e. load SPA2000 2.0.9 firmware into your PAP2):
1) Disconnect the ethernet cable from the PC running the HTTP/TFTP/DNS servers
2) Disconnect the POWER cable from the PAP2
3) Connect the CROSSOVER Ethernet cable to the PAP2 (on one end) and to the PC running the DNS, TFTP, and HTTP servers (on the other end)
4) Make sure the PC is powered up and that the DNS, TFTP and HTTP servers are running
5) Power on the PAP2
6) If all goes well, your TFTP server's log will show the PAP2 grabbing the encrypted file. you may see that PAP2 has also requested /WXYZ/spa000000000000.xml (where WXYZ is the so called weird folder which is in fact value of GPP_D or GPP_E from the Provisioning page)
7) Copy the ENCRYPTED Config File (from Vonage's TFTP server) named spa000000000000.xml also in WXYZ folder and Power cycle the PAP2 once again
8) Shortly thereafter, the HTTP server's log should show the PAP2 grabbing the modified SPA2000 v2.0.9 firmware file. Now your TFTP server's log will show the PAP2 grabbing the encrypted file once from TPTP ROOT and once TPTP ROOT/WXYZ.
9) Once the PAP2 has loaded the SPA-2000 firmware, one of the indicator lights on the PAP2 should turn RED
STEP 7: (Re-)Open WEB access and configure known USER & ADMIN pws:
1) Create a TEXT FILE called spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your PAP2) as follows:
CODE
<flat-profile>
<Admin_Passwd ua="na">4321</Admin_Passwd
<User_Password ua="na">1234</User_Passwor
<Web_Server_Port ua="na">80</Web_Server_Por
<Enable_Web_Server ua="na">Yes</Enable_Web_Se
<Enable_Web_Admin_Access ua="na">Yes</Enable_Web_Ad
<Protect_IVR_FactoryReset ua="na">No</Protect_IVR_Fa
<GPP_F ua="na">SP2K-PAP2.bin</GPP
</flat-profile>
OR simply rename the file SP2K_to_PAP2.xml to spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your PAP2)
2) Copy the new spa000000000000.xml (where 000000000000 is the MAC ADDRESS of your PAP2) file to your TFTP ROOT directory (or directories if running multiple TFTP servers) and TFTP ROOT/WXYZ folder.
3) Copy SP2K-PAP2.bin at HTTP-ROOT/+000000000000/ directory (where 000000000000 is the MAC ADDRESS of your PAP2).
4) Power cycle the PAP2
5) Check your TFTP Server's logs to see when the file has been grabbed and HTTP server log would show a get request for SP2K-PAP2.bin.
6) After it's been grabbed & loaded, the adapter's USER password is "1234" and the ADMIN password is "4321"
Note: Sipura SPA-2000 2.0.9 firmware allows PLAIN TEXT config files to be loaded and processed. That is why this unlock "trick" works.
AT this point the PAP2 is unlocked and following steps are optional
STEP 8: Disable Provisioning of PAP2:
1) Use PAP2 firmware 3.1.6 or LOWER!!!
2) Follow the directions here: Basic Firmware Update Instructions
STEP 9: Obtain the FACTORY FRESH GPP_K key (OPTIONAL but recommended)
1) In STEP 6 , the encrypted Vonage Config File got loaded into the adapter. This caused the adapter's FACTORY FRESH GPP_K value to be overwritten w/ one supplied by Vonage.
2) With the adapter disconnected from the internet and loaded w/ PAP2 firmware 3.1.6 or lower, FACTORY RESET THE ADAPTER.
This will cause the FACTORY FRESH GPP_K value to be re-loaded, but it will also re-lock the adapter.
3) Repeat the ORIGINAL (easy) UNLOCK process
4) After the adapter has been re-unlocked, extract the GPP_K value and save it!
Diggler
What is GPP_K:
This value is found in the unlocked PAP2 Provisioning tab (Advance admin access required). It is strongly recommended that this value is saved when PAP2 is not locked.