I tried protecting the device from being
reset to factory default by setting user and administrator password for
SPA and also checked whether SIPURA "requires password" for entering the
IP address, Subnet mask or IP gateway.

According to my observation, SIPURA didnot ask for the password when i
pressed 111# for entering the IP address and 131# to enter the gateway.

What is the use of entering user and administrative password for the SPA
when it cannot protect the device?

Second thing, when entered ****(4 times star)very easily i reset the
device to factory default by pressing 73738. There is not protection at
all to stop this.

This are the instructions I found somewhere (don't remember where) to protect Sipura/Linksys SPA devices from being factory reset:

Here's a sample XML file to feed to your SPA to disable IVR...

This XML file will:

1. Set USER password to 1234
2. Set ADMIN password to 4321
3. Enable WEB server (should already be enabled)
4. Set Web server port to 80
5. Allow ADMIN web server access
6. Clears any "restricted access domains"
7. sets Protect_IVR_FactoryReset to YES

<flat-profile>
<Restricted_Access_Domains ua="na"></Restricted_Access_Domains>
<Enable_Web_Server ua="na">Yes</Enable_Web_Server>
<Web_Server_Port ua="na">80</Web_Server_Port>
<Enable_Web_Admin_Access ua="na">Yes</Enable_Web_Admin_Access>
<Admin_Passwd ua="na">4321</Admin_Passwd>
<User_Password ua="na">1234</User_Password>
<Protect_IVR_FactoryReset ua="na">Yes</Protect_IVR_FactoryReset>
</flat-profile>


To feed this to your SPA:

1. cut from above and save to a plain-text file on your system. (example: save as lock-ivr.xml)

2. Place this file in your TFTProot folder

3. Put in a "provision rule" to tell the SPA to pick up the file. (example: my TFTP server is at 192.168.1.11)
Profile Rule: tftp://192.168.1.11/lock-ivr.xml

4. Turn on provisioning. (unplug your WAN connection if this scares you..)

5. Save Settings-- SPA will reboot.

6. Watch TFTP logs. Does it pick up the lock-ivr.xml file?

7. Once it is picked-up, you can disable provisioning again.

That's it..


I hope it helps you.

Juan C.

Why are you so afraid of letting your SP2K perform a factory reset?

I once fed that XML into one of my hacked Vonage Linksys PAP2's (the Sipura 2000's twin). The telephone IVR command (****RESET) still was allowed without a password, even though I'm 100% positive the XML file was uploaded into the PAP2.

Reasons a user would want to disable a factory reset:

They don't want someone else using their phone to reset the thing, causing them the need to reconfigure and upgrade the firmware again.

With PAP2's sold to be used with the Vonage service, Vonage has gotten more smart since the unlocking procedure was published. If you reset the darn thing, it's back to the same settings it had when it left the factory, which includes I.P. settings allowing Vonage to provision your PAP2 remotely. If you don't do a hard reset while your network is offline and then re-perform the unlocking procedure, your PAP2 would end up talking to Vonage servers with your PAP2 ending up being locked permanently.

What did you hear after doing ****RESET?: "Press 1 to confirm? or "Enter password?

Juan C.

Hi,
We would like to know how to view TFTP logs on SIPURA.

Explain how to debug TFTP server on Sipura?

Waiting for your reply.

With Regards,

Rashi Kapur
Ifoon Support Team

Press 1 to confirm.

Yes. your device is not blocking factory reset. Are you absolutely sure your device got the provisioning file? What firmware version is in your PAP2 or SPA2000?

Juan C.

ah ok now i understand thanks guys! mwah!