Linksys "Vonage" PAP2 (Model No: PAP2) & Hacking it

[Rocklegend]

Telephreak.com shows us that you can get these units at "Staples" (you can use http://www.staples-locator.com to find the nearest store to you). These are the Linksys "Vonage" PAP2 (Model No: PAP2). They have a nice little Vonage advertisement on the front. The lower right hand corner should say, "Model No.: PAP2"! It gets better.... The unit cost about $50.00. Staples has a $50.00 rebate on these units, which can do online. You do not have to sign up for Vonage service! Free ATA/PAP2! If nothing else you can always check ebay.

Ok, lets get to unlocking it.

To download all the necessary files. (File includes PAP2SP2K.bin and SP2KPAP2.bin needed later)

A BIG Thanks to Matt for this one...
Follow these steps and your Linksys PAP2 will be unlocked. Provider settings do not get erased.
Several assumptions:
1. you can get to the WEB interface and set the USER password.
2. Ideally, the device has never downloaded updates, or talked to the provider.
3. You have a TFTP server setup on your network


For this example, Assumptions:
PAP2 is at IP: 192.168.1.5
TFTP server is : 192.168.1.110


OK, lets go for it:

1. Put the following two files in the TFTP root folder. [File one: PAP2SP2K.bin and SP2KPAP2.bin from the file above]
*I-Hacked Note: For those unfamiliar with Trivial FTP, it's different than regular FTP and you need a special server, such as this free one here: http://www.solarwinds.net/Tools/Free_tools/TFTP_Server/
2. Disconnect from the Internet (avoids downloading cfg files)
3. Boot your PAP2 in your network.
4. Browse to the web page of the PAP2.
5. In SYSTEM, set a User password of 1234
6. Click the SAVE SETTINGS button.
7. Refresh the link (you login with user and 1234)
8. Modify the link to show (in your web browser!): http://192.168.1.5/upgrade?tftp://192.168.1.110/PAP2SP2K.bin
9. Examine the status leds.. Power should turn RED when it is done. Give it a minute or two, dont interrupt it.
10. Once red, point browser at your PAP2. (our IP in this example is 192.168.1.5)
11. Click the "admin login" link near the top-right.
12. Click the PROVISIONING tab and set PROVISION ENABLE=NO.
13. Click SAVE SETTINGS.
14. Now, modify the link to show: http://192.168.1.5/upgrade?tftp://192.168.1.110/SP2KPAP2.bin
15. Done. Your Linksys PAP2 will eventually reboot (2 blue LEDs) (BE PATIENT) and you can click the "admin login" near the top-right. No PW needed.

This test uses specific firmwares.. These are not for any other use, so if you are looking for upgrade firmware for your PAP2, DO NOT assume that this will be them.. These are for unlocking your PAP2 unit.

Oh yeah. I was able to unlock two without any troubles.. your mileage may vary.

Again, Thanks Matt for all the work you put into making this possible.

-[End of post]---

http://www.i-hacked.com/component/option,com_remository/Itemid,83/func,fileinfo/id,71/

[xpat]

yeah... the only reason I see this being a hot deal is the fact that you can now easily unlock a PAP2. other than that, it's not a hot deal, but it definitely is an interesting topic. thanks for the info but please post in the correct forum.

[Rocklegend]

yeah... the only reason I see this being a hot deal is the fact that you can now easily unlock a PAP2. other than that, it's not a hot deal, but it definitely is an interesting topic. thanks for the info but please post in the correct forum.

Hi,

Do you know of any hot VOIP Phones?

R

[xpat]

Hi,

Do you know of any hot VOIP Phones?

R
Sure, here's some links... these might not be what you are looking for, but remember: you get what you pay for.

http://www.iptel.org/info/products/sipphones.php
http://www.sipforum.com/index.php/Main_Page
http://www.asteriskguru.com/tutorials/snom200_hardphone.html
http://www.snom.com/
http://www.ipdialog.com/
http://www.zultys.com/
http://www.digiumcards.com/

Question for you... you mention the PAP2 has a $50 rebate. On the Staples website, it's listed at $75. I've looked through the Staples Easy Rebate site and can't find the rebate there... is this rebate being offered through Vonage or another third party? (ie: it wouldn't appear on the Staples Easy Rebate site).

[xpat]

Well, it looks like I missed the PAP2 in Staples' flyer ...

http://staples.shoplocal.com/staplesbusinessdepot/listing_detail.asp?listingid=-2095515654&storeid=2397772&offerid=&L1CatID=15956

$9.95 after rebates, which would be a hot deal... however you need to activate to get the $50 credit. Otherwise, it's $89.95 less a $15 instant rebate IINM.

[Rocklegend]

Sure, here's some links... these might not be what you are looking for, but remember: you get what you pay for.

http://www.iptel.org/info/products/sipphones.php
http://www.sipforum.com/index.php/Main_Page
http://www.asteriskguru.com/tutorials/snom200_hardphone.html
http://www.snom.com/
http://www.ipdialog.com/
http://www.zultys.com/
http://www.digiumcards.com/

Question for you... you mention the PAP2 has a $50 rebate ... on the Staples website, it's listed at $75. I've looked through the Staples Easy Rebate site and can't find the rebate there... is this rebate being offered through Vonage or another third party? (ie: it wouldn't appear on the Staples Easy Rebate site).


Looks like the rebate is in the US only. Here is one link:
http://www.tigerdirect.com/applications/searchtools/item-details.asp?EdpNo=1197930&Tab=5

[dvdrat]

...and what exactly does "unlocking" the LinkSys PAP2 device do for me? I'm sure that others are wondering the same thing.

- dvdrat

[xpat]

Looks like the rebate is in the US only. Here is one link:
http://www.tigerdirect.com/applications/searchtools/item-details.asp?EdpNo=1197930&Tab=5
I just noticed this at the bottom of the TD webpage:

"Please Note: Maximum of 5 "TigerDirect Rebate Guarantee" per household per year. However, most rebates are limited to one per household. Click on the rebate offer above for details."

What a joke, these guys really suck. I am now definitely never buying from them again.

[re:load]

forgive the voip noob question, but what's the point of unlocking it? I assume so you can use this box with other providers than vonage, but any other benefits?

[sentinel]

maaaan i would *so* ban you if i could. what would make you think that this is the right place for this, seriously?

EDIT: looking at your post history, you've had a few other threads locked. You would think you would have learned your lesson, or at least discovered common sense.


Read (http://www.redflagdeals.com/forums/announcement.php?f=9&announcementid=12) The (http://www.redflagdeals.com/forums/announcement.php?f=9&announcementid=12) Rules! (http://www.redflagdeals.com/forums/announcement.php?f=9&announcementid=12)

[xpat]

...and what exactly does "unlocking" the LinkSys PAP2 device do for me? I'm sure that others are wondering the same thing.

- dvdrat
so you can use it on service providers other than Vonage.

http://www.voip-info.org/wiki/view/Linksys+PAP2+Unlocking+Methods

[pbussey]

Well, it looks like I missed the PAP2 in Staples' flyer ...

http://staples.shoplocal.com/staplesbusinessdepot/listing_detail.asp?listingid=-2095515654&storeid=2397772&offerid=&L1CatID=15956

$9.95 after rebates, which would be a hot deal... however you need to activate to get the $50 credit. Otherwise, it's $89.95 less a $15 instant rebate IINM.

The killer, usually, is the cancellation fee. Which often kills the 65$ rebates. From the TOS http://vonage.ca/features_terms_service.php

"3.6 Termination Fee (Applies only to Residential and Business Plan Customers). You will be charged a cancellation fee of $49.99 CDN per voice line if your Service is cancelled for any reason after the thirty (30) day Money Back Guarantee Period and within the first twelve months following the activation of your Service"

[xpat]

The killer, usually, is the cancellation fee. Which often kills the 65$ rebates. From the TOS http://vonage.ca/features_terms_service.php

"3.6 Termination Fee (Applies only to Residential and Business Plan Customers). You will be charged a cancellation fee of $49.99 CDN per voice line if your Service is cancelled for any reason after the thirty (30) day Money Back Guarantee Period and within the first twelve months following the activation of your Service"
right ... which is pretty much why this isn't a hot deal, unless you plan on using the service for an entire year.

[jyeung]

You need to activate to get the Vonage rebate. It's different in the US, where you just have to buy the box.

And really, many providers give you a free ATA anyways. You'll also need a provider that allows you to use your own device.

I wouldn't call this a hot deal since a) you need to activate and Vonage's cancellation fee is not cheap and b) you can go buy a Linksys/Sipura or a PAP2-NA ATA for around $60.

[felix]

The killer, usually, is the cancellation fee. Which often kills the 65$ rebates. From the TOS http://vonage.ca/features_terms_service.php

"3.6 Termination Fee (Applies only to Residential and Business Plan Customers). You will be charged a cancellation fee of $49.99 CDN per voice line if your Service is cancelled for any reason after the thirty (30) day Money Back Guarantee Period and within the first twelve months following the activation of your Service"
Thanks for the heads up! Was planning to cancel and get another cell phone for the same price. The dropped calls are very annoying, not sure if it's a problem with my router (not an ISP problem). I'm still a few months away from the 12 months so I guess I'll just wait it out.

I got this PAP2 last year from Staples for $0 after rebate, mine does not say Vonage on it. Glad to see them come out with a hack finally. Maybe it'll be worth something on eBay. :D

[summerdream]

Thanks for the heads up! Was planning to cancel and get another cell phone for the same price. The dropped calls are very annoying, not sure if it's a problem with my router (not an ISP problem). I'm still a few months away from the 12 months so I guess I'll just wait it out.

I got this PAP2 last year from Staples for $0 after rebate, mine does not say Vonage on it. Glad to see them come out with a hack finally. Maybe it'll be worth something on eBay. :D
Is there activation fee($39.99) if buy PAP2 from staples?

[jyeung]

Is there activation fee($39.99) if buy PAP2 from staples?

There shouldn't be - but call to make sure. I believe they only charge the fee if Vonage ships out the adaptor.

[mrken]

Is there activation fee($39.99) if buy PAP2 from staples?
No.

Many retailers used to give out a $50 gift card along with the typical $65 rebate. You must be subscribed to Vonage for three months before they will mail out the cheque.

And this is old news. The crack was discovered last October. So, to make sure the crack stays sealed:
http://rfd.mrkenneth.com/tl

[xpat]

@ mrken :: you and your LocTite...

[gdvan]

'Correct me' if you think I am wrong Mr Ken, but I understand that only firmware up to version 3.1.6 can be unlocked with the methods described here. In particular, current units with firmware 3.1.9ls cannot be so unlocked. Furthermore, from my cursary review, you cannot tell from the box which firmware is inside, or I have not found a process to do so. Versions 3.1.7 and 3.1.8 can be unlocked with a more liberal dose of imagination.

Now, perhaps Mr Ken will tell us before someone applies a squirt or two of his threadlocker since he has bragged in the past about unlocking these units, but perhaps the serial numbers/macnumbers can be used to tell the version number. Furthermore, the .bin are not provided in this post anyway, so it is not very firm or complete ware. Since the files are copyright, the poster, (being either a copier rather than a doer, or extremely ethical), has not given us links anyway to the firmware (eg SP2 k......not of course, dear readers, that we would use them..)

I simply ordered a sipura 1001 which is cuter and smaller and cheaper..well in vancouver anyway... Unfortunately I cannot find the sipuras in toronto (at least not at a physical store).. so I told paypal to give money to vancouver.. no money and no sipura 1001 yet.. Meanwhile my usb phone is doing the job..

[summerdream]

Just ordered one PAP2. Can this PM with FS/BB's price $65? Will stay with vonage for a while if quality is good, cheaper than current bell landline anyway.

[burnaby]

Could you be specific on which rule is been broken so the rest of us can be sure to stay legit on our posts.
maaaan i would *so* ban you if i could. what would make you think that this is the right place for this, seriously?

EDIT: looking at your post history, you've had a few other threads locked. You would think you would have learned your lesson, or at least discovered common sense.


Read (http://www.redflagdeals.com/forums/announcement.php?f=9&announcementid=12) The (http://www.redflagdeals.com/forums/announcement.php?f=9&announcementid=12) Rules! (http://www.redflagdeals.com/forums/announcement.php?f=9&announcementid=12)

[felix]

Many retailers used to give out a $50 gift card along with the typical $65 rebate. You must be subscribed to Vonage for three months before they will mail out the cheque.

Yes, received my $65 rebate quickly after the 3 month period without problems. It was a Staples mail-in rebate, not an "easy rebate".


Could you be specific on which rule is been broken so the rest of us can be sure to stay legit on our posts.
It's not a "Hot Deal". :)

[mrken]

'Correct me' if you think I am wrong Mr Ken, but I understand that only firmware up to version 3.1.6 can be unlocked with the methods described here. In particular, current units with firmware 3.1.9ls cannot be so unlocked. Furthermore, from my cursary review, you cannot tell from the box which firmware is inside, or I have not found a process to do so. Versions 3.1.7 and 3.1.8 can be unlocked with a more liberal dose of imagination.

Now, perhaps Mr Ken will tell us before someone applies a squirt or two of his threadlocker since he has bragged in the past about unlocking these units, but perhaps the serial numbers/macnumbers can be used to tell the version number. Furthermore, the .bin are not provided in this post anyway, so it is not very firm or complete ware. Since the files are copyright, the poster, (being either a copier rather than a doer, or extremely ethical), has not given us links anyway to the firmware (eg SP2 k......not of course, dear readers, that we would use them..)

I simply ordered a sipura 1001 which is cuter and smaller and cheaper..well in vancouver anyway... Unfortunately I cannot find the sipuras in toronto (at least not at a physical store).. so I told paypal to give money to vancouver.. no money and no sipura 1001 yet.. Meanwhile my usb phone is doing the job..
I have not been following the unlocking of the newer devices, but here is a thread that lists some of the serial numbers for lockable or unlockable PAP2's:
http://www.dslreports.com/forum/remark,15430412

If you are into social engineering, you just need to get the administrator password and it should be able to unlock any PAP2 regardless of firmware version.

felix, I still have not received by rebate cheque yet... I mailed it in the beginning of January. Did you also sign up for the free Brother MFP? I only received credit for two months but no correspondance regarding the MFP...

[yultanman]

maaaan i would *so* ban you if i could. what would make you think that this is the right place for this, seriously?

EDIT: looking at your post history, you've had a few other threads locked. You would think you would have learned your lesson, or at least discovered common sense.


Exactly why? I look for stuff like this on here and I found the info helpful. All you over ambitious thread lockers reduce the functionality and value of this site. calm down and save the locktite for sensless advertising or regular products and scams. Just because it is not a deal to you does not mean he should be banned.

So i ask again, What makes you think this is the wrong place for this, seriously?

[sentinel]

Exactly why? I look for stuff like this on here and I found the info helpful. All you over ambitious thread lockers reduce the functionality and value of this site. calm down and save the locktite for sensless advertising or regular products and scams. Just because it is not a deal to you does not mean he should be banned.

So i ask again, What makes you think this is the wrong place for this, seriously?
*sigh* I knew this would happen, Ok here goes...

According to the rules,
"Where should I post my message?
Hot Deals: This forum is for hot deals that are available to our readers only."

I found a definition for a 'deal' which decribes it as, "something...acquired at a price advantageous to the buyer."
To me, at least, an article describing how to modify an item does not a deal make.

Not only that, the article links to the american Staples site (we're in Canada, BTW), and to a section of the I-Hacked site which is available only to their members. (becoming a member is a non-trivial task).

If it weren't for a few people policing this, this forum would be filled only with posts entitled "Deal", "Fr33 iPod!!!", and "My cat is brown". I'm sure even you could understand how useless this entire site would become.

The article, while interesting and informative, does not belong in this section. That is why other, sub-forums were created - for off-topic discussions of this type.

Please make your best effort to use common sense next time. If you need help with that, ask a grown-up.

[kcjchan]

*sigh* I knew this would happen, Ok here goes...

According to the rules,
"Where should I post my message?
Hot Deals: This forum is for hot deals that are available to our readers only."

I found a definition for a 'deal' which decribes it as, "something...acquired at a price advantageous to the buyer."
To me, at least, an article describing how to modify an item does not a deal make.

Not only that, the article links to the american Staples site (we're in Canada, BTW), and to a section of the I-Hacked site which is available only to their members. (becoming a member is a non-trivial task).

If it weren't for a few people policing this, this forum would be filled only with posts entitled "Deal", "Fr33 iPod!!!", and "My cat is brown". I'm sure even you could understand how useless this entire site would become.

The article, while interesting and informative, does not belong in this section. That is why other, sub-forums were created - for off-topic discussions of this type.

Please make your best effort to use common sense next time. If you need help with that, ask a grown-up.

If this hack potentially brings up the value of the device, wouldn't the device be "acquired at a price advantageous to the buyer" since it's more bang for your buck? Also, if you read the forum description on the forum index page, you will see that the admins say this is "YOUR FORUM" and you may post anything that might be a deal to someone. It doesn't necessarily mean it has to be available to Canadians only. I think the point is that something is a hot deal if there are evidence to suggest that the purchase is worthwhile over some other purchase or at another retailer. The point here is that Staples, being overpriced most of the time, still have stocked unlockable Vonage routers which most retailers don't. Isn't this a more advantageous purchase over other retailers? I would say yes, although it might not be the best deal to offer for this particular product compared to past deals.

[felix]

Thread should be moved to "Computers & Electronics" forum or locked.

[xpat]

that's what i said in my first post... this thread does not belong in this forum.

that being said, this is not a hot deal, even if you consider the fact that this hack brings up the value of your router ... that is because you can get the factory unlocked router on ebay for almost the same price you'd pay to get the locked one from staples (unless of course you sign up for one year vonage service and get the rebate, but that defeats the purpose of having an unlocked PAP2 ... you want it unlocked so you can use it on services other than vonage!)

[whitethunder]

you have to register to get the files mentioned, there another site where to get them but not register ??

[coolcoolfi]

I find the info to be useful... And it IS hot if you want a unlocked VoIP adaptor. But it might be more suitable to be in computer forum

[Rocklegend]

'Correct me' if you think I am wrong Mr Ken, but I understand that only firmware up to version 3.1.6 can be unlocked with the methods described here. In particular, current units with firmware 3.1.9ls cannot be so unlocked. Furthermore, from my cursary review, you cannot tell from the box which firmware is inside, or I have not found a process to do so. Versions 3.1.7 and 3.1.8 can be unlocked with a more liberal dose of imagination.

Now, perhaps Mr Ken will tell us before someone applies a squirt or two of his threadlocker since he has bragged in the past about unlocking these units, but perhaps the serial numbers/macnumbers can be used to tell the version number. Furthermore, the .bin are not provided in this post anyway, so it is not very firm or complete ware. Since the files are copyright, the poster, (being either a copier rather than a doer, or extremely ethical), has not given us links anyway to the firmware (eg SP2 k......not of course, dear readers, that we would use them..)

I simply ordered a sipura 1001 which is cuter and smaller and cheaper..well in vancouver anyway... Unfortunately I cannot find the sipuras in toronto (at least not at a physical store).. so I told paypal to give money to vancouver.. no money and no sipura 1001 yet.. Meanwhile my usb phone is doing the job..

Hi Gdvan,

Which USB phone do you have? Any recommendations?

R

[yeek]

Be aware, you can only get the rebate on activation. So there is no rebate if you don't go with Vonage.

For the unlock, I heard there's some software called "vuckfonage" can do it. You can search this on google.

[kogepan]

im new to voip current just using the softphone from the voip company. but if i can set up and connect to my phone line that'll be sweet.

so i can get THIS (http://www.futureshop.ca/catalog/proddetail.asp?logon=&langid=EN&sku_id=0665000FS10061150&catid=10495)
then unlock it, after that i can use it with my voip company? or am i totally wrong on the concept?

[summerdream]

im new to voip current just using the softphone from the voip company. but if i can set up and connect to my phone line that'll be sweet.

so i can get THIS (http://www.futureshop.ca/catalog/proddetail.asp?logon=&langid=EN&sku_id=0665000FS10061150&catid=10495)
then unlock it, after that i can use it with my voip company? or am i totally wrong on the concept?
It depends on which voip you are with. For those do not use SIP (for example Primus TBB uses MGCP) you can not use PAP2, for those you don't know SIP setting you can not use it either.

[mrken]

Be aware, you can only get the rebate on activation. So there is no rebate if you don't go with Vonage.

For the unlock, I heard there's some software called "vuckfonage" can do it. You can search this on google.
Actually, the software (unless it has changed recently) decrypts (and encrypts I believe) the GPP key that is used for downloading provisioning parameters from Vonage. By decrypting the file from Vonage using the software, one can use Vonage on an unlocked PAP2 or any other SIP-compatible adapter for that matter without the ability for Vonage to reprovision the unit in addition to rendering it locked.

I had used openssl to decrypt the provisioning file from Vonage before I found VuckFonage. The software is just a encrypter/decrypter with a user-friendly GUI. So now I am running Vonage on one line and vBuzzer on the other.

My three months with Vonage is running out in one week and I intend to cancel it then. :) And I get back $115 in rebates, but would have to pay a $50 termination fee.

[samson]

My three months with Vonage is running out in one week and I intend to cancel it then. :) And I get back $115 in rebates, but would have to pay a $50 termination fee.

They credited me $115 into my account (Futureshop deal). So i will have to stick with them.

[gdvan]

Hi Gdvan,

Which USB phone do you have? Any recommendations?

R


I have 2 types.
They both work fine.
one is from THESOURCE; It is the centrios 43-8991, and is on clearance for $24.99. (still seem to be some around)

The software included with it is not usable, you need a softphone on your computer such as the xten X_lite (free).. Then you can use xten software that works with this unit (also called a kcyberphone). With this THESOURCE unit (or xlite sip driver that is) you need to run under windows xp or windows 2000. (I might have an extra avail at $25 notax with software)

The other is more expensive. It is $29.99 NEW from factory direct via china. It is smaller and looks more like a cell than a "real phone" , but what I like is the software is somewhat more usable. You still need a softphone like X_lite, but the driver included with the phone can directly interface with x_lite for example (as opposed to asking xten for a special version of x_lite). You can run this under older windows like win98se, winme, winxp. Also when the source unit falls on the floor, it goes off hook (2 piece), but the one piece FD unit, just bounces. Also it is easier to pack with your laptop.

Actually for use with a wireless laptop these are in my opinion better than the pap2 ethernet approach.

both usb phones work fine under viopstunt or internetcalls.com, if u pay $15 bucks for 120 days that is. The phones work on incoming also. (you do not use stunt or internetcalls software except to pay, just use their ip addresses and your acct # or numbers if u want free incoming also or multiple voip providers--the 1001 only handles 2 providers for example.

By the way, i have never seen this phone on this site, and think it is the best one to get for cheap fooling around (if you want more than just your computer speaker and mic which is all that you really need)

Some fancier phones do not appear to have drivers.. they are more like skype compatible but not sip ready.
(eg like the $49 dollar usb speakerphone models at factory direct look to be poor except for skype and the providers they are bundled with).

So I would recommend the expensive $29.99 one.
As NON true-rfd ers and mrgates (theseller) say, you get what you pay for.

by the way, Mr. Ken, thanks for the serial numbers. Did pick up a 2.0.10 (with A in the serial) at my local staples, but I'm gonna return it next week. (and Not unlock it and load it all up with 3.x firmware)..Actually all of them in the store but one looked like it could be unlocked..(by the serial) However after reading the first 40 of the 70 pages on unlocking it, (reminded me of the direc tv saga) , I thought how much I hate units that when you factory reset it, it goes back to being locked.. (heh i could fix that with a jtag) I can just see, if I sell it to some other kid who resets it a few times and asks me (or himself for that matter) to make it all better a year from now.... besides the smaller 1001 ($69 but only one line)is on the way shipped at last... If i wanna spend more maybe i'll save up and get a sipura 3000..($109 or less if some service provider sells me one for less)

It was nice when it was free or when they were paying you, but $75 for the pap2 is a lotta money.