Linksys RTP300 unlocked and setup with Asterisk

This information is already floating around the internet, due to the fact that there are so many curious people that got rid of vonage and wanted to use their routers for other reasons, and or with other providers.

So here’s our take on it.

We dug up an old RTP300 with the vonage firmware. As we attempted to “hack” away at the unit we found that all the username combinations we found scattered across the good ole’ internet didn’t work so we used (probably by now) the infamous cyt tool. What does the cyt tool do you ask? It simply resets the “admin” and “user” accounts with default passwords. This basically allows you to clear all of the pre-configured sip settings and upgrade to the latest firmware. It does this by creating a socket session using port 2400 to reconfigure the xml settings on the box.

So how do you get it? Well we provide it right here for you. It includes all the instructions that you’ll need to run the tool in the readme file.


Now that you have the passwords changed you can log into the interface with the new username and password combination. The username and password should be “user”. (Don’t forget you’ll have to log in to the router first with the username and password “admin”.)

Next go to Linksys website and download the firmware release 3.1.24. You’ll find that if you attempt to upgrade the router with this file you’ll run into some trouble.  No worries, there are a couple more steps before you are up and running. All you have to do is download a hex editor, open the .img file in it and make a couple of changes.

The following changes will need to be made.

On the second line the eight value or pair it will say 4d – change it to 4c. So to the far right you should see “….CYLL@0…..”

On the very last line you need to change the 5th, 6th, 7th and 8th values. Change them from 85 da 20 bb – to 3b a5 4d da. Save it and now upgrade the firmware on your router.

At this point your router should be upgraded and you should be running the latest firmware. Cool huh.

If you click on the voice link and click on the admin login you’ll see line 1, line 2, etc. All you have to do is enter the asterisk extension and password. Simply register the RTP300 like any other sip device; plugin any regular phone and your good to go.

One comment