How to Unlock your Linksys SPA2102-R

Please rate 5 stars if this helps you!
I got an old Sunrocket/Teleblend Linksys (sipura) SPA2102-R from eBay. It was locked. I beat my head against a wall for 3 hours before I finally figured out how to unlock it. It's not hard, but this video would have helped me.
Update 2022: Found the file! www.mediafire.com/file/ebjrshl...
Now that I've got it working, I can use it on any VoIP network I want.
This is a good place to read the steps, as with a few more pieces of information.
blog.bentosys.com/article/how-...

[@rajiva2023]

Good news. I just got back after a week and tried the same procedure out. It all worked fine and I am able to access the admin menu. I just reconfigured the SIP to talk to a free SIP service. Thank you so much for this excellent video and insightful help.

[@Gadgetmall]

after you reset it with the provided codes you have full access to the setup screen and its up to you to get details of viop and sip providers info to enter in that setup svreen.

[@scottk432]

Make sure to follow this EXACTLY as stated in the video. IP Address as well as spelling of the directory (SPA must be caps), all this makes a difference. I was able to unlock it and now use it with a VOIP. Thanks for the video. Cant believe I finally got it working.

[@eurekamas]

Thank you. It worked. I had to use another website as a reference because the video did not mention that the main requirement is to have a router with a special firmware such as DD-WRT: (because regular routers do not allow you to set the router IP as a real IP) I was afraid of doing the factory reset which other sites tell you not to do but It all worked out in the end

[@bengalvfan]

I have been looking for years on how to do this with my 4 broadvoice locked 2102's. I have only found one person who knows how to do it but he charges 20 dollars per unit to do it.

[@TheIndustrialphreak]

any idea how to do this with one locked to spuraspa?

[@AttilaKalocsai]

on the freebsd where can you see the actualy item password? I'm looking for on 3:23 -but i can't see that. Where is it?

[@MrVishfj]

HI can u help me on my SPA2102 box i have several box and several extensions...incoming calls and if on one IP Phone the call is answered...the other IP Phones(Extensions) have bounce calls ??

[@usathyan]

Thanks for doing this. This has been a godsend!

[@Artwithbenji]

I am wondering if this will work on an earthlink SPA2100 I am trying to get this to work but I don't know what all I would need to change to make this work for me

[@rajiva2023]

Yah, I had downloaded the same config file mentioned in the video. Now, the SPA keeps power cycling and gives no chance to access it. :(

[@juanjoserivasgarcia2336]

Man thanks a lot about this tutorial. I am not good at this kind of stuff , but at least with it I could ask someone to unlock a SPA2102-R as soon I grab one. I have a question, I already own an RTP300 Linksys Voip Router. It is a 4 ports ethernet, 1 port internet, 2 ports phoneline model. Sadly is not working properly, I cant even use the Internet or EThernet ports cause the led lights doesnt stopped blinking all the times. As I mentioned I am not good at this stuff, so I dont know if is posssible fixing it with configurations, I dont even know how to enter the setup, I also didnt tried to use the buttom reset settings cause I dont know if maybe is already unlocked, and I cant found any tutorials to unlock that model. SO my question is, if the RTP300 is already unlocked and I use the reset buttom, it will lose the unlocking process?

[@nzj3vx]

will the reset delete all my isp settings

[@kofi7777]

How do you know it is a SunRocket. I was using 5Linx and when we pull up the Admin it say "Customized" 5Linx. Has anyone cracked this situation yet?

[@djfixxx]

Does anyone have a better breakdown including the Apache Server and where the directory and files are placed?

[@saadparacha9226]

how to unlock the linksys RT31P2 voip router

[@IshanBansal]

Hi, I have been trying this procedure since last 2 days, but no success. I am getting stuck at the point of setting correct IP of router. If I set the IP of my router to be 67.133.234.1, I am no longer able to connect to it with my PC (I tried both 192.1681.1. and 67.133.234.1). I have to then do a hard reset of my router to be able to connect to it. Could you give some detailed instructions regarding changing the IP, please. That would be very helpful.

[@Maitre.H]

I wanna know how to install that program to get my router voip password! Thanks

[@ooglek]

@BlondeBeliefs Great! Glad to hear it helped you out.

[@rajiva2023]

Hi, I followed the steps per your video, which is excellent, to unlock my (ex-SunRocket) SPA2102, but it didn't get unlocked. The SPA did download the .cfg file from the webserver (per the access log), however, it didn't accept 79309925 as the passwd (said 'invalid passwd'). I ignored it, saved the config, so the unit rebooted. Now, it keeps resetting (flashing few times, off and repeat). Any insight? Thanks.

[@wholeNwon]

I'd like to unlock a SPA-2100 locked to Earthlink (EL). I can make most admin. changes except auto provisioning. Have been unable to find appropriate .cfg files to use your technique. Earthlink CS was no help, of course. Any thoughts you'd like to share? Thanks

[@MrTue22]

I spent 3 hours to do it, but not success. Got stuck after change router IP. I could not connect to web browser 67.133.234.53 as instruction. What path or where should I put *.cfg file? Please help.

[@lwvmobile]

Thanks for the video, just bought one from a thrift store today for 3 bucks, thought it might come in handy so I picked it up. Question: You say this will work with any voip, does that include skype?

[@stevegamer9108]

I've tried a variety of methods to unlock my Gizmo an they all rely on a password which never works for mine. Is there a list of passwords that might work somewhere? Is there something I'm doing wrong? What other reasons could be the cause of the password failures?

[@aamiraziz78]

hi Dear Sir i have cisco linksy pap2t but i have to forget my passworld let me know how to i open them plz help me i thank you so much Aamir

[@sektor1952]

Do you still have the contact info for the person, I am in the same boat.

[@castirondude]

Hmm I see it downloading the provisioning file from the apache web server but it doesn't make a difference. I also went to the Cisco site and downloaded the SPC tool so you can make your own provisioning files. I made a provisioning file with a blank password and it fetched it , but still asking for a password. I also hex edited the provisioning file from the provider and actually it has the password field blank as well! So it almost seems like maybe there is a password built into the firmware...?!

[@longzzz8357]

Ooglek, I changed my computer's IP address in control panel. The ipconfig shows my ip is 67.133.234.53. But in a web browser, I can not open this IP address and the folder where the SPA2102 config file is located. I am using Xampp Lite. Ah, the DOS window's ipconfig function does show my ip is 67.133.234.53 . Did I really successfully change my IP address ? Thanks.

[@CanianG]

My SIP provider has locked the username and password in the SPA 2102r router. Basically what I want is to use my phone service on all kind of pc softphones. But How do I get my username and password? My SIP provider won't tell me cause they want that their customers only use their soft- and hardware.

[@gavimobile]

thanks for the post, but the link for the config file is not the same as you posted, it a link to a cfg zip file.. which rj45 port did u use for your spa2102-r, also will this work for an spa2102?

[@ooglek]

I believe the process will work, the only problem is that I'm not sure what URL (if any) other SPA2102's will request, and thus the setup with the specific IP addresses in the video may not work for your unit. It doesn't hurt to try, but you may be left with a non-working unit (which is what you have now!). A network sniffer would be able to tell you what the unit is requesting after DHCP address, but that gets kind of advanced.

[@dmiller2429]

thank you so much i tried almost everythin n thanks to u its up an running again

[@Gadgetmall]

I use my unlocked pap2t to make free voip calls using my Google voice # using just my dsl router and the pap2 it rings too. the instructions are also on the net..

[@rajiva2023]

Please ignore my previous response as I am able to access the SPA unit both via the phone and via the computer (though the power LED keeps flashing intermittently). I tried both passwords you suggested, but they are invalid. I will try one more time to download the config. Will let you know. Thanks.

[@ooglek]

You'll have to see if it tries to fetch the configuration file. It would involve a pretty advanced knowledge of IP - you'd have to set up a private network adn a sniffer to see what IP it was looking for, then what file it was requesting, then change the IP and filename accordingly. The IP in the video is only for Sunrocket/Teleblend. Lingo will use something different. I wasn't able to find the IP or filename anywhere on the net, but Google for it anyway. Should be the same process.

[@jesuitson]

**Correction** You log onto it through the LAN port on the SPA after reset, not the WAN port. WAN configuration is disabled by default but you can turn it on in the admin menu. Turning on WAN configuration is how you can put these behind a router and yet still have access to the settings. This is how I have mine set up.

[@billsporturaup4661]

i have a linksys spa2102-r locked to acn digital, can you unlock it?

[@ooglek]

If you want to send it to me Bill, I'd be happy to figure out how to unlock it, make a video, then send it back to you. Email my username at gmail.com and we can chat.

[@z3bmw007]

The actual MAC address he refers to is the one displayed on his screen. Mine SPA adapter was unlocked using the MAC address he used no mine. Try the MAC address he uses.

[@ooglek]

@usathyan Glad I could help!

[@jesuitson]

Reset the SPA with it disconnected to the internet. This clears the password. Then log onto it and turn off provisioning before hooking back up to the internet.

[@TubbsMacgee]

Necroing this but Jes is right, disable provisioning and you're gtg Saves a lot of steps

[@ooglek]

@eurekamas Excellent! Congrats.

[@sektor1952]

Dogface05 was a user on broadband reports that could completely unlock an spa2102 no matter the version for a fee, but he hasn't been around in quite a while. I have an can one that I am trying to unlock.

[@ooglek]

I can understand that. You need to find and download the linksys2102-sunrocket.cfg file. Then you rename that file to your mac address with a .cfg suffix. For example, 001122334455.cfg if your Mac Address was 00:11:22:33:44:55. Sorry for the confusion.

[@ooglek]

@rajivasati -- if the unit downloaded the correct config file from your web server, and did NOT accept 79309925 as the password, it is possible that the unit is still able to access the internet, and downloaded a config from SunRocket/Teleblend. Are you certain the config you downloaded was the one mentioned in the video? Another password to try is 78778839 (if you got a different config file than I had).

[@karltube234]

Can somebody provide me with the needed configfile? and how to figure out where to store this for the download. I tried some links in this tread, but all seems to be dead (probably by age ;-) )

[@ooglek]

It's been 14 years since I posted this. Whatever files I had then I have lost to time! If you do end up finding the file, please post it somewhere, and update your comment. I'll download it and put it in a safer place and try to keep it available for people who reach the video. Cheers!

[@ooglek]

Found it! www.mediafire.com/file/ebjrshlivlk/linksys2102-sunrocket.cfg.gz/file

[@ooglek]

@AZOOOOPPY Thanks dude! DMCA takedown request initiated. Really appreciate the notice.

[@rajiva2023]

Thanks a lot for this informational video. I am able to unlock my SPA and access the admin menu. Woohooo.....

[@CCP187]

14 years later and I'm watching your video and fiddling with a locked ebay SPA-2102. Mine is all set to DHCP and I don't see any mention of Sunrocket, but the Admin page is locked out. The "Customization" field on mine is set to "Pending", (vs "Sunrocket" at 5:00 in your video. Any thoughts on what "Pending" means or tips on how to sniff out if/where it is looking for an updated config?

[@ooglek]

Well hot damn! Welcome! It seems to be still popular despite its age. DHCP is fine, the IP the device receives is unimportant. The important thing is to learn the IP address that the device is attempting to request when it boots, assuming it is in a mode where it checks to see if a new binary config file is available and that it will automatically update if present or it has changed. This requires some sniffing of the network! If your laptop / desktop is providing DHCP and is acting as the router here, then all packets will be sent to your computer, and you can use tcpdump or similar programs to receive/sniff every packet it sends. If you're connected through a switch, you'll PROBABLY see all the requests, but it is possible that you might miss some. My assumption is that "Customization: Pending" is that the device is attempting to reach a URL that does not exist or is not responding. It is also possible that it is NOT reaching out at all and that your device is unable to pull a new config at boot from the Internet, at which point you're kinda hosed, unless you're ready to figure out how to factory reset the device that would remove the custom config entirely (not sure this is easy or even possible). The IP on the router was set to ensure that the SPA-2102 would only send requests to the local network, rather than the Internet. You can set the IP on the router to 192.168.0.0/24 to start, then sniff the TCP traffic where the web request might occur. One challenge is that if the config uses a hostname, you'll have to run a DNS server too. BUT then you can return whatever IP you want for that hostname, even 192.168.0.33, and the SPA-2102 should request the config from that IP, since you control DNS. But as far as I know, the only way to learn the URL that the SPA-2102 is requesting is to sniff the network traffic from the device to the "Internet." Search KZbin or the web for "sniffing HTTP requests" or substitute "TCP" for HTTP.

[@CCP187]

​@@ooglekI finally got a chance to dig into this deeper and try your suggestions. No luck, but curious of your thoughts if this is a valid test. (See video in my channel) kzbin.info/www/bejne/oZS1gICJqdh3p8k

[@ooglek]

@@CCP187 (crossposting) Do you have a valid and working DNS server accessible to that device that is delivered via DHCP? Watching for DNS traffic might help. It is also possible that the download-config-on-boot-if-available function is NOT enabled on the device you have. And in that case, you're kinda hosed, at least from the standpoint of being able to get software onto the device. Maybe a factory reset would force it to? I see a bunch of traffic from 10.10.10.1 but none from the IP address assigned to the SPA2102-R, so I cannot tell you more. Also, you need to have your sniffer BETWEEN the SPA2102-R and your router; it seems like it might be, just checking to make sure. Not all switches will forward all traffic to all ports. If you have a dumb hub, that might ensure that you see all the traffic on the hub between both the SPA2102, the router, and your listening PC.

[@CCP187]

@@ooglek thanks for all your help with this. I tried with a DNS server too, but no clues of IPs or domains that it is trying to reach. I think i'm going to punt this thing to the trash, especially now that i see they have "unlocked" ones on ebay for $17. Thank you for your help

[@ooglek]

@@CCP187 Sure thing! Sorry it didn't work out. If the device is doing any DNS lookups, you should see that in your DNS server logs (if you have a logging DNS server) or in the UDP traffic (NOT TCP) from the device. You'd need to wireshark the UDP traffic to see the DNS query, UDP port 53, if it is doing so at all. Not all devices will. It was just a known thing with the SunRocket/Teleblend devices that they were configured to get the config on every boot. I show in the video how to disable it. I believe that these devices will download from a TFTP server, but you'd need to dig into how that works specifically, and I think the mac address needs to be the filename. community.cisco.com/t5/voice-systems-and-accessories-small-business/please-help-spa2102-firmware-upgrade/td-p/1342839 csr248.wilogic.com/prov/fw/www.vpnbest.com/download/firmware/spa/SPA2102/spa2102-5-2-12/index.html

[@ooglek]

@txnascarguy -- Set your web server IP as one of those two IP addresses, and DHCP in the same /24 (147.135.8.0/24 or 147.135.0.0/24). Other than the different IP addresses, you should be good!

[@tainscough]

Thanks for the nice video. I think there are a few gaps that will make it impossible for the average user to follow, though. The big one for me is that we are told to find and download an important file called "linksys2102-sunrocket.cfg". Well and good. A few minutes later we are told about an important file whose *name* should match our MAC address (but not what the contents of this file should be) and that "linksys2102-sunrocket.cfg" is not really important. HUH??

[@mrbakosa]

I need to unlock an ACN locked device. Any advice?

[@billsporturaup4661]

***** Hi do you have a guide? if so can you forward it, i have one to unlock as well.thanks,

[@mrbakosa]

***** I have one from ACN that is still online so I might actually do that bu my guess is that even if I do that i doubt it would help others since I am almost sure they use diffrent pass for every each one of them.

[@djfixxx]

We bought 24 SPA2102-R's DIRECTLY from Sunrocket as we know them. We were going to buy more if this worked. Out of the box I tried this and it DOES NOT WORK ON THE 2102R You can try them if you want for $5.

[@dilojen007]

how did you find out the admin login password???

[@Gadgetmall]

look above . Linksys PAP2 Reset and Default passwords There are three passwords in every Linksys/Sipura device - User ,Admin and Reset password ,The default username and passwords for the Linksy PAP2: 1-For User Login: Username is "user" and password is blank. 2-For Admin Login: Username is "admin" and password is blank. 3-Reset password: To Reset PAP2-NA to factory default: press **** and Dial 73738# ,when prompted for a password use 8995523# or 7756112# or 5465866# or 50274537# or 78196365# One of these numbers should work for you

[@jesuitson]

These devices automatically set a password whenever they are hooked up to the internet. If you disconnect them from the internet and then reset them, there will be no password. You have to turn off provisioning before you can hook it back up to the internet. They default to LAN administration. You can log onto it and enable WAN administration so that you can put it behind a router, yet still get into it.

[@chrisna9861]

I just bought a supposedly unlocked spa2102-r on ebay it's locked FW is 5.212 will this method work?

[@0xssff]

how to do this in 2016 ?

[@0xssff]

this is shit, i wasted 2 days trying to unlock it!

[@partiid]

what did you do

[@Gadgetmall]

the pap2t is easy to unlock . the universal passwords ARE on the net . just search for unlock codes pap2t. There are 5 if them and they work .

[@sektor1952]

I don't think dogface even knows, because he hasn't been around in forever and as far as I know this only works for sunrocket config, and it won't work on anything else.

[@jesuitson]

Temporarily disconnect from the internet. Pick up the phone and dial **** then dial 73738# (RESET). Now log into your SPA. You will need to be hooked up to the internet port of the SPA. Best to go through a router. Now you can log on with no password. Go to admin, advanced and then provisioning. Turn provisioning to "NO". This will clear the password of ANY SPA-2102 regardless of provider. Now you can do as the video shows. Just skip the password step.

[@PeterBeckman]

Who is dogface?

[@PikKirby]

Dear god. Cable hell.

[@rajiva2023]

Passwd was 79309925 (though SPA had rejected it initially). I had to try 3 times. I downloaded and installed free Apache web server. Good luck.

[@ooglek]

Did you even watch the video? If you didn't set things up as described, or if the SPA2102 you have isn't from Sunrocket, then I personally won't be able to help you any more than what's already posted.

[@jdblaich]

I believe much of what he's doing is completely unnecessary. In fact, I believe you need only connect a phone, then dial ****73738#1 to reset to factory. Then plug in a computer and go to 192.168.0.1. Then you can switch go into admin login and advanced mode then provisioning and turn it off. From my understanding these are not locked. Once they connect to the internet the 1st time they become provisioned to Clear, but the factory reset listed above opens it up for any carrier.

[@DoctorHutch]

watch?v=QSJQ-5uMDM0 ^^Looks like someone copied your video. Just thought I'd let you know.

[@jdblaich]

And please, it is considered bad internet etiquette to file a DMCA for videos such as these. It would be best to just be flattered and move on. The DMCA is a horrible tool that only harms the free exchange of information. Your video has no real economic value, so there's no reason make a DMCA claim.