.Linksys RTP300 Router/Voip.

Linksys RTP300 Router/Voip

Linksys RTP Broadband Router with 2 Phone Ports.
The CPU of the board uses TNETV10552. The tool to debug the CPU is EJTAG (NonDMA).

Picture showing the board

Picture showing the JTAG

Flash	8MB	28F640
Firmware	8MB	$90000000-$907FFFFF

Definition	Commands (usbjtag NT 0.17 and up):
TRTP300.xml	Backup firmware getram 90000000 800000 save 9fc00000 800000 Program the firmware detect ldram boot (file backed up) program 90000000 800000

Step by Step unlock the locked RTP300 into full NA versoion
This is for testing purpose and you need to check your agreement with your service provider
Download the latest firmware at Linksys RTP

Step Description and command:
1 Check your current status under voice with default password

2 Connect JTAG and read the whole flash
detect
getram 90000000 800000
3 Save backup
save 90000000 800000
4 Modify the password, and empty the keys. Load the rtp300unlock.usp into your script directory
Modify the address. In boot find ADMIN_PWD keyword.
Empty the two keys.
In order to allow the router accept Linksys firmware modify the ProductID

5 Execute the script. rtp300unlock
Follow the prompt. Wait until finsh program then press enter to start next programming.

6 Check your unlocked router.

Lasted Updated:December 31 2016

Vists since Jan 4,2009

Step	Description and command:
1	Check your current status under voice with default password
2	Connect JTAG and read the whole flash detect getram 90000000 800000
3	Save backup save 90000000 800000
4	Modify the password, and empty the keys. Load the rtp300unlock.usp into your script directory Modify the address. In boot find ADMIN_PWD keyword. Empty the two keys. In order to allow the router accept Linksys firmware modify the ProductID
5	Execute the script. rtp300unlock Follow the prompt. Wait until finsh program then press enter to start next programming.
6	Check your unlocked router.