{"id":895,"date":"2015-12-03T17:25:43","date_gmt":"2015-12-03T12:25:43","guid":{"rendered":"http:\/\/alexeyka.zantsev.com\/?p=895"},"modified":"2021-02-28T01:42:36","modified_gmt":"2021-02-27T20:42:36","slug":"provisioning-linksys-spa-9xx-and-cisco-spa-30x","status":"publish","type":"post","link":"https:\/\/alexeyka.zantsev.com\/?p=895","title":{"rendered":"Provisioning Linksys SPA-9XX and Cisco SPA-30X"},"content":{"rendered":"

First of all, a nice PDF with a bunch of useful links: https:\/\/supportforums.cisco.com\/sites\/default\/files\/legacy\/0\/8\/6\/41680-SPA_DocsMap_012711.pdf<\/a><\/p>\n

1. There are two ways of provisioning:<\/p>\n

– using TFTP\/FTP\/HTTP server and pushing it’s address with the DHCP option, in case of using DHCP server in your network. In this case the phone will try to download the configuration\/firmware from the server specified during the next reboot. But we need to reboot phones forcibly after that.<\/p>\n

– without using DHCP server and dhcp-options. Just telling the phone with a direct HTTP request the URL path of config file\/firmware to load, either from browser, or from Linux console, using curl. In this case the phone reboots automatically to apply the newly downloaded config\/firmware (if there is an active call, the phone waits for its end and only then reboots to aply config. But I haven’t tried to upgrade firmware during the active call).<\/p>\n

Download the archive with firmware<\/a>, unpack it and rename the firmware file from something like spa50x-30x-7-4-9c.bin to spa.bin.<\/p>\n

Next, we need some server, e.g. a small simple HTTP server weborf<\/a>.
\nAfter installing, run it, specifying the directory with spa.bin file:<\/p>\n

weborf -p 8000 -b \/home\/lexus\/downloads\/spa_303_firmware_7.5.5\/\n<\/pre>\n
If there is Python installed on your machine, you may use its built-in http-server, running this command from a directory with spa.bin:<\/p>\n
python -m SimpleHTTPServer 8000\n<\/pre>\n
Remember that it’s not always possible to skip firmware releases, for example I tried:
\n– 7.5.2 —> 7.6.1 – unsuccessful
\n– 7.5.2 —> 7.5.5 – OK
\n– 7.5.1 —> 7.5.5 – unsuccessful
\n– 7.4.9c —> 7.5.5 – unsuccessful
\n– 7.4.9c —> 7.5.1 – OK.<\/p>\n
Read below how to upgrade the firmware.<\/p>\n
2. Let’s imagine, we need to change the configuration of a phone. We need to disable the Call Forward feature.
\nFirst of all look through the XML-config file of a working phone: http:\/\/phone.ip\/admin\/spacfg.xml<\/a>
\nTo disable CallForward feature we need to change this parameter from ‘Yes’ to ‘No’:
\n\"spa303_provisioning2\"<\/a><\/p>\n
Tip: all XML parameters are called the same way as in the web-interface, but with underscore instead of spaces<\/em><\/p>\n
Create the spa303.cfg text file in your web-server directory:
\n\"spa303_provisioning1\"<\/a><\/p>\n
And now tell the phone using curl to apply it:<\/p>\n
curl --anyauth -u admin:pass http:\/\/phone\/admin\/resync?http:\/\/websrv.ip:8000\/spa303.cfg\n<\/pre>\n
3. You may also provision phones from web-interface:<\/p>\n
http:\/\/phone-ip\/admin\/upgrade?http:\/\/10.145.13.51:8000\/spa.bin\nhttp:\/\/phone-ip\/admin\/resync?http:\/\/10.145.13.51:8000\/spa303.cfg\n<\/pre>\n
… but this is not true way :) .<\/p>\n
It’s much more cool to do everything with curl:<\/p>\n
curl --anyauth -u admin:pass http:\/\/10.145.13.232\/admin\/reboot\ncurl --anyauth -u admin:pass http:\/\/10.145.13.229\/admin\/upgrade?http:\/\/10.145.13.51:8000\/spa.bin\ncurl --anyauth -u admin:pass http:\/\/10.145.13.229\/admin\/resync?http:\/\/10.145.13.51:8000\/spa303.cfg\n<\/pre>\n
… they say, it’s also possible to use ‘–digest’ option in curl, but I haven’t tried, as ‘–anyauth’ works fine.<\/p>\n
Tips and Hints:<\/p>\n
Assuming you’re using ISC-DHCPD server:<\/p>\n
        host spa303-1353 {      hardware ethernet 3c:ce:73:d3:f9:dc;\n                                fixed-address 10.145.14.103; }\n\n        host cisco303-1354 {    hardware ethernet 3c:ce:73:d3:e9:e4;\n                                fixed-address 10.145.14.104; }\n\n<\/pre>\n
…and need to get all phone IP addresses from its config. Do:<\/p>\n
grep -A1 spa dhcpd.conf | grep -vE '^#' | grep fixed-address | grep -o '[0-9]\\{1,3\\}\\.[0-9]\\{1,3\\}\\.[0-9]\\{1,3\\}\\.[0-9]\\{1,3\\}'\ngrep -A1 cisco dhcpd.conf | grep -vE '^#' | grep fixed-address | grep -o '[0-9]\\{1,3\\}\\.[0-9]\\{1,3\\}\\.[0-9]\\{1,3\\}\\.[0-9]\\{1,3\\}'\n<\/pre>\n
… and create a text file SPA_ips_from_dhcp.txt .<\/p>\n
But DHCPd config may contain records of non-existent phones, that’s why we need to check if the IP addresses are real network devices (that they reply to OPTIONS SIP-requests), and these devices are Cisco and\/or Linksys phones (useragent is Cisco… or Linksys…).<\/p>\n
We’ll use sipvicious<\/a> tool for that (make sure to have Python installed to run it):<\/p>\n
python svmap.py --inputtext=\/home\/lexus\/SPA_ips_from_dhcp.txt | grep -i SPA | awk '{print $2}' | sed 's\/.....$\/\/'\n<\/pre>\n
… and write this list to SPA_ips_alive.txt .<\/p>\n
Now it’s time to provision the actual list of IP-phones with the script:<\/p>\n
\"spa303_provisioning3\"<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
First of all, a nice PDF with a bunch of useful links: https:\/\/supportforums.cisco.com\/sites\/default\/files\/legacy\/0\/8\/6\/41680-SPA_DocsMap_012711.pdf 1. There are two ways of provisioning: – using TFTP\/FTP\/HTTP server and pushing it’s address with the DHCP option, in case of using DHCP server in your network. In this case the phone will try to download the configuration\/firmware from the server […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[213,212,215,216,214],"class_list":["post-895","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cisco","tag-linksys","tag-provision","tag-provisioning","tag-spa"],"_links":{"self":[{"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=\/wp\/v2\/posts\/895","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=895"}],"version-history":[{"count":25,"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=\/wp\/v2\/posts\/895\/revisions"}],"predecessor-version":[{"id":3660,"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=\/wp\/v2\/posts\/895\/revisions\/3660"}],"wp:attachment":[{"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=895"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=895"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=895"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}