Plantronics + Polycom. Now together as Poly Logo

EAP-TLS and Polycom VVX

Highlighted
Occasional Contributor

EAP-TLS and Polycom VVX

Hello everyone,

 

I'm currently trying to authenticate Polycom VVX 410 using certificates (EAP-TLS) and I'm having a hard time.

I have a couple of questions and hope someone here can help :)

 

- We currently have a Root CA and an Intermediate CA, do I need to import both chained together (.p7b) in the CA Certificate page and then import a regular .crt file (PEM formatted) signed by the CA for this specific user phone on the Device Certificate page ?

- Say I want to use the MIC (Manifacture Installed Certificate), is there any process ? I currently see on the phone "Factory installed Certificate", I added polycom root and intermediate to RADIUS server's trust list. I just don't see any requests coming in on the RADIUS server when I leave it with EAP-TLS enabled and no other CA.

 

I can authenticate laptops fine through EAP-TLS and phones through EAP-PEAP also, So I know the issue is not with the RADIUS/Server Cert.

Thank you !

Message 1 of 4
3 REPLIES 3
Highlighted
Occasional Advisor

Re: EAP-TLS and Polycom VVX

You can use the MIC but the server EAP certificate needs to be issued by one of the CA’s on this list below, the polycom device root certificates also need to be trusted on the radius server.


http://supportdocs.polycom.com/PolycomService/support/global/documents/support/technical/products/vo...

Message 2 of 4
Highlighted
Occasional Advisor

Polycom vvx 400 not registerd on SIP TLS

Hello guys,

 

I have yhe same problem with Polycom vvx 400. I've tried to register on hosted pbx with SIP TLS.

I've uploaded CA certificate that I have been given from hosted pbx guy and I still get these errors:

 

 

1206103201|sip |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=18
1206103201|sip |4|00|MakeTlsConnection: SSL_connect error 1
1206103201|sip |4|00|MakeTlsConnection: connection failed error -1

 

I'm using  UC Software Version 5.5.1.11526 and all I did it was on web GUI.

 

I have to mention that on simple SIP settings everything works fine, even if I autoprovisioned or manually configured it.

 

Thank you,

Nick

Message 3 of 4
Highlighted
Polycom Employee & Community Manager

Re: Polycom vvx 400 not registerd on SIP TLS

Hello Nick,

welcome to the Polycom Community.

The community's VoIP FAQ contains this post here:

Apr 17, 2013 QuestionHow can I setup a TLS connection for SIP signaling and / or troubleshoot this?

Resolution: Please check => here <=

 

Can you lower the SIP logging?

 

  • Settings > Logging > Global Log Level Limit > Debug
  • Settings > Logging > Module Log Level Limits > SIP set to Debug

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 4 of 4