Lync phone (Polycom CX600 / HP 4120)  - can't sign in

Hi,

We have Lync server 2010 deployed. 

I've prepared infrastructure for for Lync Phone edition by next steps:

Added options to DHCP:

PS C:\Program Files\Common Files\Microsoft Lync Server 2010> .\DHCPUtil.exe -emulateclient
Starting Discovery ...
Sending Packet (Size: 288, Network Adapter: 10.20.1.91, Attempt Type: Broadcast only)
--Begin Packet--
DHCP: INFORM                (xid=AB7EB7A6)
DHCP: Op Code           (op)      = 1
DHCP: Hardware Type     (htype)   = 6
DHCP: Hops              (hops)    = 0
DHCP: Transaction ID    (xid)     = 2877208486
DHCP: Seconds           (secs)    = 0
DHCP: Flags             (flags)   = 0000
DHCP: Client IP Address (ciaddr)  = 10.20.1.91
DHCP: Your IP Address   (yiaddr)  = 0.0.0.0
DHCP: Server IP Address (siaddr)  = 0.0.0.0
DHCP: Relay IP Address  (giaddr)  = 0.0.0.0
DHCP: Client HW Address (chaddr)  = 005056B85D34
DHCP: Server Host Name  (sname)   =
DHCP: Boot File Name    (file)    =
DHCP: Magic Cookie                = 99.130.83.99
DHCP: Option Field
    DHCP: DHCP MESSAGE TYPE(  53) = (Length: 1) DHCP INFORM
    DHCP: Server Identifier(  54) = (Length: 0) 0.0.0.0
    DHCP: Client Identifier(  61) = (Length: 7)  (01005056B85D34)
    DHCP: SIP Server( 120)        = (Length: 0) enc:0  ()
    DHCP: Host Name(  12)         = (Length: 14) SRV-LYNC-FEP01
    DHCP: Vendor Identifier(  60) = (Length: 12) MS-UC-Client
    DHCP: Param Req List(  55)    = (Length: 2) 120 43
    DHCP: Vendor Info(  43)       = (Length: 0)  ()
    DHCP: End of this option field
--End Packet--


Received Packet
Sender:10.20.1.100:67, Size:366
--Begin Packet--
DHCP: ACK                (xid=AB7EB7A6)
DHCP: Op Code           (op)      = 1
DHCP: Hardware Type     (htype)   = 6
DHCP: Hops              (hops)    = 0
DHCP: Transaction ID    (xid)     = 2877208486
DHCP: Seconds           (secs)    = 0
DHCP: Flags             (flags)   = 0000
DHCP: Client IP Address (ciaddr)  = 10.20.1.91
DHCP: Your IP Address   (yiaddr)  = 0.0.0.0
DHCP: Server IP Address (siaddr)  = 0.0.0.0
DHCP: Relay IP Address  (giaddr)  = 0.0.0.0
DHCP: Client HW Address (chaddr)  = 005056B85D34
DHCP: Server Host Name  (sname)   =
DHCP: Boot File Name    (file)    =
DHCP: Magic Cookie                = 99.130.83.99
DHCP: Option Field
    DHCP: DHCP MESSAGE TYPE(  53) = (Length: 1) DHCP ACK
    DHCP: Server Identifier(  54) = (Length: 4) 10.20.1.100
    DHCP: Client Identifier(  61) = (Length: 0)  ()
    DHCP: SIP Server( 120)        = (Length: 24) enc:0 pool-main.scnsoft.com (0009706F6F6C2D6D61696E0773636E736F66740363
6F6D00)
    DHCP: Host Name(  12)         = (Length: 0)
    DHCP: Vendor Identifier(  60) = (Length: 0)
    DHCP: Param Req List(  55)    = (Length: 0) 0 0
    DHCP: Vendor Info(  43)       = (Length: 88) MS-UC-Clienthttpspool-main.scnsoft.com443%/CertProv/CertProvis
ioningService.svc (010C4D532D55432D436C69656E74020568747470730315706F6F6C2D6D61696E2E73636E736F66742E636F6D0403343433052
52F4365727450726F762F4365727450726F766973696F6E696E67536572766963652E737663)
    DHCP: End of this option field
--End Packet--


Result: Success
DHCP Server : 10.20.1.100
SIP Server FQDN : pool-main.scnsoft.com
Certificate Provisioning Service URL : https://pool-main.scnsoft.com:443/CertProv/CertProvisioningService.svc

Also Test-CsPhoneBootstrap succeed.

Test-CsPhoneBootstrap -PhoneOrExt 7007 -PIN xxxxxxxx 


TargetUri  : https://pool-main.scnsoft.com:443/CertProv/CertProvisioningService.svc
TargetFqdn : pool-main.scnsoft.com
Result     : Success
Latency    : 00:00:02.0099177
Error      : 
Diagnosis  : 

But when i try to connect using USB - it just writing "Connecting to Lync Server"

If I try to use number and pin - I 've got message:

An account matching this phone number cannot be found.

Can some one give and advice how to solve this?

January 9th, 2013 1:40pm

How do your Clients connect, did you use a Load Balancer?

Try to troubleshoot with the hints from Jeff Schertz

http://blog.schertz.name/2012/03/troubleshooting-lync-phone-edition-issues/

Check also, that you have Setup the time server info for phones correct.

Free Windows Admin Tool Kit Click here and download it now
January 9th, 2013 5:07pm

How do your Clients connect, did you use a Load Balancer?

Try to troubleshoot with the hints from Jeff Schertz

http://blog.schertz.name/2012/03/troubleshooting-lync-phone-edition-issues/

Check also, that you have Setup the time server info for phones co

January 9th, 2013 5:12pm

Hi,

Please add the parameters to run Test-CsPhoneBootstrap just like this:

Have you tried to run cmdlet Test-CsPhoneBootstrap -PhoneOrExt 8001 -PIN 12345

Please try to Validate Options 43 & 120 as described in Jeff's blog:

http://blog.schertz.name/2010/12/configuring-lync-server-for-phone-edition-devices/

Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

The issue maybe also related to DHCP. If you use Windows DHCP servers, please try to check if the status of Lync Server DHCP feature is disabled.(Get-CsRegistrarConfiguration EnableDHCPServer)

Free Windows Admin Tool Kit Click here and download it now
January 10th, 2013 1:35pm

Hi,

ok for Troubleshooting check the IIS log as mentioned in the Blog from Jeff to see, the phone connects to the webservices. By the way, you don't use wildecard certs?

You can als run wireshark on the phone port to se the DHCP configuration will received from the DHCP. Sometimes the DHCP security is activated on the some CISCO Switches and the phone could not recieve the DHCP Settings.

January 10th, 2013 1:48pm

Hi,

Please add the parameters to run Test-CsPhoneBootstrap just like this:

Have you tried to run cmdlet Test-CsPhoneBootstrap -PhoneOrExt 8001 -PIN 12345

You can find result in my first post- it was success.

We use Linux  DHCP server. But I'm sure that phone receive settings correctly, as it is trying to connect to pool.

Free Windows Admin Tool Kit Click here and download it now
January 10th, 2013 2:34pm

I'll examine IIS logs.

As for Certificate- we do use wildcard certificate on Lync.

As for switches - we use HP Procurve switches with LLDP. 

January 10th, 2013 2:37pm

I've examined IIS logs.

When I try to connect with PIN auth I see:

2013-01-10 11:49:43 10.20.1.91 POST /CertProv/CertProvisioningService.svc/anon - 80 - 10.20.4.16 OCPhone/4.0.7577.4066+(Microsoft+Lync+2010+Phone+Edition) 200 0 0 31
2013-01-10 11:51:03 10.20.1.91 POST /CertProv/CertProvisioningService.svc/anon - 80 - 10.20.4.16 OCPhone/4.0.7577.4066+(Microsoft+Lync+2010+Phone+Edition) 200 0 0 140

When I try to connect with PC-USB -

I only see connection to 5061 port on FE server and no IIS activity.

Free Windows Admin Tool Kit Click here and download it now
January 10th, 2013 2:56pm

Any suggestion?
January 21st, 2013 11:01am

As I can see the phones a Version 5.0.7577.4066. The Phones support wildcard certs only with version .4100 or higher. Please change the cert on the FE to a cert with SAN.
Free Windows Admin Tool Kit Click here and download it now
January 21st, 2013 11:12am

Yes, it looks like that is a problem.

I'va found this information there: http://blog.schertz.name/2011/02/wildcard-certificates-in-lync-server/

I'll try to update phone firmware.

  • Proposed as answer by Kent-Huang Friday, February 01, 2013 9:32 AM
  • Marked as answer by Kent-Huang Friday, February 01, 2013 9:32 AM
January 21st, 2013 11:14am

Yes, it looks like that is a problem.

I'va found this information there: http://blog.schertz.name/2011/02/wildcard-certificates-in-lync-server/

I'll try to update phone firmware.

  • Proposed as answer by Kent-Huang Friday, February 01, 2013 9:32 AM
  • Marked as answer by Kent-Huang Friday, February 01, 2013 9:32 AM
Free Windows Admin Tool Kit Click here and download it now
January 21st, 2013 11:14am

Yes, it looks like that is a problem.

I'va found this information there: http://blog.schertz.name/2011/02/wildcard-certificates-in-lync-server/

I'll try to update phone firmware.

  • Proposed as answer by Kent-Huang Friday, February 01, 2013 9:32 AM
  • Marked as answer by Kent-Huang Friday, February 01, 2013 9:32 AM
January 21st, 2013 11:14am

I had the same issue , with almost the same result ,

Finally came out to be a Firewall Issue , while the port 80 between the phone Vlan and Server Vlan was open , UTM was blocking the SOAP protocol ( Simple Object Access protocol, is a protocol specification for exchanging structured information in the implementation of web services in computer networks) Once allowed the issue was immediately sorted,

Please Mark as answer if this helps someone,

Regards,

Hasan Reza,

  • Proposed as answer by Hasan Reza Sunday, February 08, 2015 7:58 AM
Free Windows Admin Tool Kit Click here and download it now
February 8th, 2015 10:58am

I had the same issue , with almost the same result ,

Finally came out to be a Firewall Issue , while the port 80 between the phone Vlan and Server Vlan was open , UTM was blocking the SOAP protocol ( Simple Object Access protocol, is a protocol specification for exchanging structured information in the implementation of web services in computer networks) Once allowed the issue was immediately sorted,

Please Mark as answer if this helps someone,

Regards,

Hasan Reza,

  • Proposed as answer by Hasan Reza Sunday, February 08, 2015 7:58 AM
February 8th, 2015 10:58am

I had the same issue , with almost the same result ,

Finally came out to be a Firewall Issue , while the port 80 between the phone Vlan and Server Vlan was open , UTM was blocking the SOAP protocol ( Simple Object Access protocol, is a protocol specification for exchanging structured information in the implementation of web services in computer networks) Once allowed the issue was immediately sorted,

Please Mark as answer if this helps someone,

Regards,

Hasan Reza,

  • Proposed as answer by Hasan Reza Sunday, February 08, 2015 7:58 AM
Free Windows Admin Tool Kit Click here and download it now
February 8th, 2015 10:58am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics