[gmtech]

Hey everyone, I have kind of an interesting situation I'm trying to figure out.

Recently, I picked up a Nortel 2033 IP Conference Phone (which is a rebranded Polycom SoundStation IP 4000 with a custom firmware) from a liquidation sale.

When I tried to set it up, I noticed that somehow, the previous owner flashed the firmware with the SoundStation IP 4000 firmware. The phone identifies itself as running 3.1.0.0242 17-May-05 15:21.

So what I'm trying to do is reload the firmware. I have the nortel firmware image and I've placed it on my TFTP server. The phone finds the file and tries to open it, however I quickly get the message "error updating bootROM!" and then the phone restarts. I check the 00e07524bcc7-boot.log file and see the following:

0220183440|cfg |3|00|New load header information:
0220183440|cfg |3|00|Code length: 0x00000007
0220183440|cfg |3|00|Header check Sum: 0x0000004A
0220183440|cfg |3|00|Code check Sum: 0x494E5553
0220183440|cfg |3|00|Options: 0x00000000
0220183440|cfg |4|00|Bad header checksum, expected=0x0000004A got=0x002CB70B.

So does someone know how I can force the phone to accept this file? I was considering taking a look to see if that checksum is stored in the firmware file and "modify" it so the phone would accept it. I just find it odd that whoever had this phone before, they managed to swap the firmware on it.

Thanks!