VVX 201 - Extension and PIN Authentication Issues Post SD-WAN Migration

[Anonymous]

Hi all,

We have recently migrated a number of sites from IPVPN to SDWAN, ever since doing so the Polycom VVX devices on these sites no longer offer PIN authentication.

If I log onto the web interface of a device and manually enter https://[FQDN]:443/CertProv/CertProvisioningService.svc in the Provisioning Server > DHCP Option 43 Override STS-URI field and reboot the device then PIN authentication is then available and works. Although if the device is rebooted it will fail the initial sign in (you have to wait for it to time out and then manually log in using PIN auth on the device or via web interface).

We've not changed any DHCP scope options, I can run DHCPutil.exe -emulateclient from an SDWAN migrated site and all options appear to be resolving fine. The CA Root cert used in our config has not expired and still appears to be valid as well.

Please could someone offer some advice on what to look for? 

Thanks in advance.

[SteffenBaierUK]

Hello @MrPotatoHead 

Welcome to the Poly Community.

Please be aware of the following when utilizing UCS 4.1.0 or later:

The use of Polycom UC Software versions 4.1.X (“Software”) requires the purchase of a separate Software license for every device that will use the Software in a LYNC / Skype for Business environment. You may not install, access, or use the Software in a LYNC / Skype for Business environment on more devices than are listed on your license until additional licenses have been purchased and authorized by Poly. These licenses should be purchased from the same company from which you purchased the devices. You may operate devices against a LYNC / Skype for Business server for trial purposes for up to 30 days without purchasing a license. Use of the Software is subject to the terms and conditions of the End User License Agreement.

Poly reserves the right to audit your deployment to verify that you have sufficient licenses to match the number of devices being used.

Information in regards to License Part Numbers can be found here

• What is the Mac Address of the devices used?
• What is the software version used?
• Did you try an check the Skype FAQ?

Jul 11, 2014 Question: Why can we not sign in to Skype for Business via Pin & Extension?

Resolution: Please verify that the phone has the => correct time <= and the Option 43 and Option 120 is setup in the DHCP scope as explained =>here <= or => here <= 

Best regards

Steffen Baier