[sreedhar]

Hi,
We purchased SIPURA-SPA 2000 from Voxilla.com and we are facing a problem to disable the factory default settings on SIPURA.

We checked "Protect_factory_IVR_Reset" but couldnot find this option in SIPURA-SPA 2000.

We also entered user password and admin password in the web interface of SIPURA but it didnot protect the settings of IVR. It didnot ask the password when we entered the code for "factory reset default" or enter IP address, IP gateway.

What is the use of entering user and administrative password for the SPA
when it cannot protect the device?

If the unit has been provisioned or has custom default settings from a certain VoIP Provider and the person who provisioned or assigned the password will be the one to remove it. Is this correct? In this regard whom we should contact to?

How can we disable the factory default settings?

Please respond at the earliest.

With Regards,

Rashi Kapur
Ifoon Support Team

[jcgalvezv]

What is the use of entering user and administrative password for the SPA when it cannot protect the device?

To protect the information you have configured. If the device is factory reset, all the information you have configured will be removed and the device will get factory default.

How can we disable the factory default settings?

You cannot. When you do a factory reset the device will get factory defaults.

Please read this thread.

Juan C.

[sreedhar]

Hi,
Thanks for your reply. This is not the the answer that i am looking for.

I spoke to the technical department of SIPURA and what they said are the details mentioned below:

It is possible for service providers to restrict access to this feature(prevent SIPURA SPA device from being reset to factory default settings). If you are using a SPA that has been provisioned by a provider, you may need the assistance of the service provider in order to perform this action.

In this case what should we do? Should we contact the person where we purchased SIPURA 2000 from?

Please respond at the earliest.

With Regards,

Rashi Kapur
IFoon Support Team

[jcgalvezv]

Rashi:

When SIPURA talks about a service provider, they are talking about a VoIP provider. As I undertand you bought this device from Voxilla, but they are not VoIP providers but resellers. In this case you, IFoon, are the providers. I guess if you buy a significant amount of devices, SIPURA will give you all the tools and documentation to do what a Provider could do.

Now, you can prevent users from doing a Factory reset. I guess you cannot absolutelly disable IVR, but you can configure (throughout provisioning) the device to ask for password before actually doing a factory reset. You can even prevent the user from provisioning the device by setting provisioning using an encryption key; if the user doesn't know the key, the user cannot do a provisioning.

By the way, I am not part of Voxilla, I am just a regular member like you.

Juan C.

[PhoneBoy]

The only way to control the ability to restrict Factory Default of the device is via provisioning. For our customers whom we send out pre-provisioned devices for, we set a gibberish admin password and restrict the device from being factory defaulted. We can then either control the provisioning of the devices directly or point the devices to your provisioning server.

[sreedhar]

Hi,


You have menitoned, "The only way to control the ability to restrict Factory Default of the device is via provisioning". How can we restrict Factory Default settings in provisioning? Please explain it.

We want to view TFTP logs on SIPURA but donot know how to view TFTP logs.

Explain how to debug TFTP server on Sipura?

Please respond at the earliest.

With Regards,

Rashi Kapur
Ifoon Support Team

[jcgalvezv]

Rashi:

Once again, please read this thread. The procedure works. I have tested it and it works. I guess you need to upgrade your SPA2000 to firmware version 3.x.. What version do you currently have in your devices?

Now, Sipura devices don't keep a TFTP log (at least until I know). What do you want to achieve by debugging TFTP server?

If what you want is to prevent users from doing a factory reset, do what explained in the thread adviced.

Juan C.

[PhoneBoy]

The thread that Juan is referring to is basically provisioning in a nutshell. If you're not doing something like this to maintain your devices, then surely as a service provider, you should be looking into it.

The device don't log except via syslog. You will need a syslog server to capture those logs and you will point your devices at that syslog server (including debugging).

[sreedhar]

Hi,
The steps explained in this website link http://voxilla.com/PNphpBB2-viewtopi...c4552d016.html is not so clear. Please explain these steps mentioned below:-

"To feed this to your SPA:

1. cut from above and save to a plain-text file on your system. (example: save as lock-ivr.xml)

2. Place this file in your TFTProot folder

3. Put in a "provision rule" to tell the SPA to pick up the file. (example: my TFTP server is at 192.168.1.11)
Profile Rule: tftp://192.168.1.11/lock-ivr.xml

4. Turn on provisioning. (unplug your WAN connection if this scares you..)

5. Save Settings-- SPA will reboot.

6. Watch TFTP logs. Does it pick up the lock-ivr.xml file?

7. Once it is picked-up, you can disable provisioning again.

That's it.."

The 6th step mentioned above is not at all clear. Please explain this
"Watch TFTP logs. Does it pick up the lock-ivr.xml file?"

How can we watch TFTP logs and from where we can watch TFTP logs?

NOTE: SIPURA FIRMWARE VERSION IS 3.1.5

Please respond at the earliest.

With Regards,

Rashi kapur
Ifoon Support Team

[jcgalvezv]

Rashi:

Usually the TFTP server shows in the screen what is happening (sent/received files). That is what is means. Did you see in TFTP server the file was downloaded?

Explanations line by line:

1. cut from above and save to a plain-text file on your system. (example: save as lock-ivr.xml)

Take this text:

<flat-profile>
<Restricted_Access_Domains ua="na"></Restricted_Access_Domains>
<Enable_Web_Server ua="na">Yes</Enable_Web_Server>
<Web_Server_Port ua="na">80</Web_Server_Port>
<Enable_Web_Admin_Access ua="na">Yes</Enable_Web_Admin_Access>
<Admin_Passwd ua="na">4321</Admin_Passwd>
<User_Password ua="na">1234</User_Password>
<Protect_IVR_FactoryReset ua="na">Yes</Protect_IVR_FactoryReset>
</flat-profile>

And save it to a file. lock-ivr.xml is just a recommended name. Replace 4321 with the text you want to use for admin password. Change the text 1234 with the text you want for user password.

2. Place this file in your TFTProot folder

Your TFTP server should have a root directory. Copy the saved file to that directory.

3. Put in a "provision rule" to tell the SPA to pick up the file. (example: my TFTP server is at 192.168.1.11) Profile Rule: tftp://192.168.1.11/lock-ivr.xml

In your device's Provisioning tab, Configuration Profile section there is the field Profile Rule: put the text tftp://192.168.1.11/lock-ivr.xml. 192.168.1.11 is an example. It must be replaced with your TFTP server's machine address.

4. Turn on provisioning. (unplug your WAN connection if this scares you..)

In Provisioning tab, Configuration Profile section set field Provision Enable: YES.

5. Save Settings-- SPA will reboot.

. Self explained.

6. Watch TFTP logs. Does it pick up the lock-ivr.xml file?

After the device reboots it will go to your TFTP server to pik up the file. Wait for al least 2 minutes. If it doesn't take the file then unplug it, replug it an wait for at least two minutes again. In your TFTP server you should see when the file is downloaded to your device.

7. Once it is picked-up, you can disable provisioning again.

In Provisioning tab, Configuration Profile section set field Provision Enable: NO.

Now. if you change your user/admin password (PAP2 with firmrware lower than 3.1.7 uses user password, from version 3.1.7 up uses admin password and sipura devices uses admin password) using the web page, the factory reset protection will be disabled.

Juan C.