FOOD FOR THOUGHT ACN Iris 3000 Videophone

Discussion in 'Endpoints' started by vcallaway, Nov 9, 2010.

  1. JC1070

    JC1070
    Expand Collapse
    New Member

    Joined:
    Nov 13, 2013
    Messages:
    1
    Likes Received:
    0
    Can someone help me get into the Iris 5000? I want to create my own network phone system.
     
  2. Carlos Neves

    Carlos Neves
    Expand Collapse
    New Member

    Joined:
    May 23, 2013
    Messages:
    7
    Likes Received:
    0
    Sorry about that... im using this configuration with very good results.

    Codec 1 G726_40
    Codec 2 G729_AB
    Codec 3 GSM_AMR
    Codec 4 G711A
    Codec 5 G711U
    Codec 6 ILBC
    Codec 7 G723_1
    Codec 8 TE
    Codec 9 H264
    Codec 10 H263
    Codec 11 H263_1998
    Codec 12 MPEG4
     
  3. hexdef6

    hexdef6
    Expand Collapse
    New Member

    Joined:
    Nov 30, 2013
    Messages:
    1
    Likes Received:
    0
    Okay I bought this phone at a thrift store for 2.00 and it is seriously bricked (the above methods do not work) does anyone know how to JTAG the phone and what the pinout needed to do so is? thank you so much in advance
     
  4. RichRoc17

    RichRoc17
    Expand Collapse
    New Member

    Joined:
    Dec 8, 2013
    Messages:
    1
    Likes Received:
    0
    Big thanks to Joshoa and iris3000 for all your hard work on this phone. I picked up 2 of these iris 3k phones at a local thrift store many months ago. I knew nothing about them other than I could clearly see they were VOIP phones. At $5.00 a phone, I figured I had nothing to lose even if they wouldn't work with my PIAF server. Thanks to your research into the phones I now have them both setup and functioning with my PIAF server!

    I found another ACN branded video VOIP phone (CIP-6500 by C&S Telecom). I'll be doing some research on this phone and I'll be sure to give back to this community if I am able to get anywhere with it.
     
  5. vg_mtl

    vg_mtl
    Expand Collapse
    New Member

    Joined:
    Jan 14, 2014
    Messages:
    4
    Likes Received:
    0
    Iris 3000, I'm in the same situation you were: the /dev/sda1 partition is no longer there.
    With your and Joshoa help I could access the RedBoot, but I don't know what I have to do to restore this partition.
    Can you please, please help any post the instructions?
     
  6. vg_mtl

    vg_mtl
    Expand Collapse
    New Member

    Joined:
    Jan 14, 2014
    Messages:
    4
    Likes Received:
    0
    Joshoa,

    All your and Iris3000 work is great and helped me a lot.
    Using the LiveCD, I could easily access the RedBoot on the phone and check the version of the hardware.
    Unfortunately, my phone has the partition table missing the /dev/sda1 and without your instructions, I can't fix it.
    Can you, please post your instructions to re-build the /dev/sda1?
    Thanks and best regards,

    Vic
     
  7. Joshoa

    Joshoa
    Expand Collapse
    Member

    Joined:
    Oct 24, 2011
    Messages:
    44
    Likes Received:
    1

    Hi
    I wont be able to take a look on this one in the nearest future, unfortunately.
    I`ll be a little bit busy with IRIS 3000.
    But feel free to contact me if you have a question regarding general process, tweeks and tricks.

    J
     
  8. Joshoa

    Joshoa
    Expand Collapse
    Member

    Joined:
    Oct 24, 2011
    Messages:
    44
    Likes Received:
    1

    Hi
    There was a photo somewhere in this thread, with a pinout of 20-pin socket.
    As far as i remember, my friend was able to discover JTAG pins on it.
    I`ll ping him, and post this info here.

    J
     
  9. Joshoa

    Joshoa
    Expand Collapse
    Member

    Joined:
    Oct 24, 2011
    Messages:
    44
    Likes Received:
    1

    Hi
    Same stuff, i`ll be ready to dig in to them way later this year.
    April sounds like a possible candidate in my schedule.

    J
     
  10. Joshoa

    Joshoa
    Expand Collapse
    Member

    Joined:
    Oct 24, 2011
    Messages:
    44
    Likes Received:
    1

    Hi
    I`ll rebuild LiveCD unlocker later this week to address this issue.
    There is nothing that hard to do actually, you can do it by yourself, if you are familiar with Linux/fdisk.
    Or just wait for Saturday/Sunday.

    J
     
    vg_mtl likes this.
  11. vg_mtl

    vg_mtl
    Expand Collapse
    New Member

    Joined:
    Jan 14, 2014
    Messages:
    4
    Likes Received:
    0
    Joshoa,
    The photo you are talking about is not on the page 6 of this thread?
    It shows a 20 pin connector on the bottom right side of the PCB (Printed Circuit Board) with some pins identified as USB-A: +D & -D & GND and you say not to use the +5VDC.

    Joshoa,

    Thanks a lot for the quick answer. Really appreciate it.
    I am not sure I need a new version of the LiveCD.
    With the old one you put online, I was able to access the RedBoot just fine.
    My problem is I am not really comfortable with the RedBoot commands and especially with fconfig and fdisk.
    I would only require instructions about the steps and the commands I have to telnet into the RedBoot to setup the partition /dev/sda1 and to activate it.
    After setingup the /dev/sda1 partition, I think I'll be just fine with the instructions you already posted.
    I think it's easier than to re-write the whole LiveCD.
    Anyway, I'll wait for Saturday/Sunday for your answer.

    Again, thanks a lot for helping us all.
    Best regards

    Vic
     
  12. vg_mtl

    vg_mtl
    Expand Collapse
    New Member

    Joined:
    Jan 14, 2014
    Messages:
    4
    Likes Received:
    0
    Joshoa,

    Any hope for the instructions to re-flash the KERNEL and to setup the /dev/sda1 partition?
    Thanks and best regards,

    Vic
     
  13. arztde

    arztde
    Expand Collapse
    Member

    Joined:
    Jan 4, 2014
    Messages:
    238
    Likes Received:
    23
    Hi i will, if you allow, contact you too. I am absolute newbee in PBX and try to set up my first server. I bought a Iris V for little money and was not aware it does not run. For surprize it still works with old users account. of ACN Germany, so before to get it to work it needs to be hacked with the Firmware not to damage someones account.
     
  14. arztde

    arztde
    Expand Collapse
    Member

    Joined:
    Jan 4, 2014
    Messages:
    238
    Likes Received:
    23
    I did open the Iris 5000 and did make some photo of the board. Is someone able to tell me where i can set the serial to come inside the sstem?
    Real i can phone a fixed number of this phone from each telephone outside the house. as soon as possible i like to change this thing to m own setings...
     

    Attached Files:

  15. Tom6502

    Tom6502
    Expand Collapse
    New Member

    Joined:
    May 30, 2014
    Messages:
    2
    Likes Received:
    0
    I purchased a video phone WG4K for $7.50. Booted it up and found the ACN logo comes up. This model only has a USB and no SD slot but the board looks like it has the solder points for one in the same spot as the 3000. I have a little BELKIN router and I attached an ethernet cable to the WG4K and router and another to a RaspberryPi (RPi) and router. I’m using the RPi because it will be easy to remove the wifi USB and just use the Ethernet port.
    In a terminal window, ifconfig showed me that the DHCP assigned 192.168.2.3 to the RPi and so more than likely the WG4K is using 192.168.2.2.
    I then found out about nmap command but I had to install it ugg ($ sudo apt-get install nmap).
    Ran “nmap –Pn 192.168.2.2” I get:
    Not shown: 996 filtered ports​
    PORT STATE SERVICE​
    2222/tcp open EtherNet/IP-1​
    5060/tcp closed sip​
    49152/tcp open unknown​
    49153/tcp closed unknown​
    (Using the SIP protocol tells me that this is definitely the phone!)
    Now I try telnet’ing to 2222 (‘telnet 192.168.2.2 2222’)
    It shows it is using ‘SSH’ and that means encryption and so I decide to use putty and I install putty.
    Run putty and fill in the IP and port same as above and selecting SSH and press Open button.
    I get ‘login as:’ prompt and I type in root as soon as I hit enter I get a dialog box:
    PuTTY Fatal Error​
    Disconnected: No supported authentication methods available​
    (server sent: publickey.keyboard-interactive).​
    If I type any other user, it takes a little while longer but still returns the same error.
    This to me says that either I need more encryption keys or they have a custom encryption key and don’t think there is a way to hack into it then.
    Seeing that I’m not very knowledgeable in hacking should I give up?

    Should I put in a USB drive and try to get it to crash and hope it logs to the USB? I don’t know how to get it to crash.
     
  16. Tom6502

    Tom6502
    Expand Collapse
    New Member

    Joined:
    May 30, 2014
    Messages:
    2
    Likes Received:
    0
    This is the same board as in my phone with "Model: WG4K" on the back. Our boards have WG4K and 2010, so I don't know why they stamped your's 5000 as the model number and put the same old WG4K board in it.
     
  17. arztde

    arztde
    Expand Collapse
    Member

    Joined:
    Jan 4, 2014
    Messages:
    238
    Likes Received:
    23
    Tom6502 i do still wait for Joshoa until he have time. He did promise me to help with a remote session. I am someone that respectshis wish. I was thinkingto buy one Iris 5000 to send him as a present for his helpbut he did not answer me until now sow it seems he is still busy. I wait with patience.
     
  18. Joshoa

    Joshoa
    Expand Collapse
    Member

    Joined:
    Oct 24, 2011
    Messages:
    44
    Likes Received:
    1
    Hi all.
    Long time, no see, heh.
    Finally after 6 month i was able to get some time to spend on this project again.
    First of all - here is a new LiveCD:
    [http://www.4shared.com/file/cwE9JvVpba/iris-unlock.html]
    This one is capable of fixing [NO SDA1] and moreover, there is a live NFS-based working root-fs inside.
    just execute:
    [ln -s /dev/shm/code-run/ /var/umec/code/]
    [exportfs -r]
    And use [1+#] - you phone will boot in to a normal v20 firmware right from NFS.
    Feedback and questions are wellcome.

    J
     
  19. Joshoa

    Joshoa
    Expand Collapse
    Member

    Joined:
    Oct 24, 2011
    Messages:
    44
    Likes Received:
    1
    Hi there.
    Contact me via PM.

    J
     
  20. Joshoa

    Joshoa
    Expand Collapse
    Member

    Joined:
    Oct 24, 2011
    Messages:
    44
    Likes Received:
    1
    Hi.
    Did you tried to use [1+#]?
    I assume, that this phone was made by the same UMEC corp., then it will use the same emergency boot method.

    J
     

Share This Page