Plantronics + Polycom. Now together as Poly Logo

[FAQ] What basic network data is send and received by a Polycom phone?

Highlighted
Polycom Employee & Community Manager

[FAQ] What basic network data is send and received by a Polycom phone?

Booting or connecting a Poly SoundStation IP, SoundPoint IP, VVX Business Media, CCX, VVX IP Phone or a Poly Trio to a network switch initiates certain network protocol’s

 

NOTE: The below has been tested with a VVX600 running UC Software 5.3.1. Using a different phone and/or software version may vary in the result

 

INITIAL BOOT PROCESS

 

Network_Activity_01.PNG

 

The below illustrates the initial => LLDP Discovery <= 

 

Check Step 2 => here <= in order to disable LLDP

 

Network_Activity_02.PNG

 

000016.816|lldp |1|00|Sending LLDP packet with length (lldpPktLen= 37)
000017.817|lldp |1|00|Sending LLDP packet with length (lldpPktLen= 369)
000018.817|lldp |1|00|Sending LLDP packet with length (lldpPktLen= 369)
000019.819|lldp |1|00|Sending LLDP packet with length (lldpPktLen= 369)
000020.820|lldp |1|00|Sending LLDP packet with length (lldpPktLen= 369)
000021.820|lldp |1|00|Sending LLDP packet with length (lldpPktLen= 369)

 

NOTE: Please check the UC Software Admin guide on details for configuration parameters to either disable LLDP or modify the LLDP Discovery !

 

Example:

<web device.set="1" device.net.lldpFastStartCount.set="1" device.net.lldpFastStartCount="10"/>

The above Parameter would send 10 LLDP packets instead of the original 5 

 

Any reply to the LLDP and we do not send CDP packets!

 

Followed by the => CDP <= discovery

 

Check Step 2 => here <= in order to disable CDP

 

Network_Activity_03.PNG

 

000024.844|cdp  |1|00|Sending CDP packet with length (cdpPktLen= 141)
000025.844|cdp  |1|00|Sending CDP packet with length (cdpPktLen= 141)
000026.845|cdp  |1|00|Sending CDP packet with length (cdpPktLen= 141)

 

NOTE: Please check the UC Software Admin guide on details for configuration parameters to disable CDP !

 

Both of the above can be utilized to receive or send Data like a => VLAN <= from and to the phone

 

If any of the above receives data from a network switch the phone would process this.

 

The phone would then proceed with sending a => DHCP Discover <=

 

Network_Activity_04.PNG

 

000032.166|dhcpc|3|00|dhcListener: Read succeeds: eth0 state: PREINIT
Listening on LPF/eth0/00:04:f2:ac:89:bb
Sending on   LPF/eth0/00:04:f2:ac:89:bb
Sending on   Socket/fallback
DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 8

Within this DHCP Discover message, the phone uses various Sub-Options

 

  • Option 12 Host Name

    Network_Activity_05.PNG
    The above can be used to identify the Phone in the Network
    <test device.set="1" device.hostname="replace_with_own_value" device.hostname.set="1" />
    
  • Option 55 is actually a List of Sub Options

    Network_Activity_06.PNG

  • 191, 157, 144 and 128 can be used for => DHCP VLAN discovery <=

  • 66 or 160 (or 161 on phones using => LYNC SKU <=) is used to discover the => Provisioning Server <= address. This could be a Real Presence Resource Manager as an example (http://<FQDN or Ip Address>/phoneservice/configfiles/)

    160 aka Custom (Skype 161) is queried first and the phone then tries 66 instead

    DHCP Options.png
    The order of this can be changed and is explained within this menu.

    Via setting Static a different we can force the phone to boot from the server specified.

    The Boot Server Option can be used to manually change from 160 (161 Skype Sku) to any other free option.

  • The Option 43 utilized during the initial boot up has no relation to the Option 43 required for a Pin & Extension setup in a => Skype for Business environment <=

    More details on the Polycom DHCP Vendor Option can be found in the => Technical Bulletin 54041 <= and troubleshooting => here <=

    The LYNC Option 43 is described below in more detail

  • 7 is the location of a => Sylog Server <=

  • 54 is the DHCP server name so multiple replies from different DHCP Servers can be identified in the DHCPOFFER and DHCPREQUEST messages

  • 42 like 4 can be used to set the => time <= on the phone

  • 15 can be used so the phone can identify the Domain it is using

  • 6 is to identify the DNS / Domain Name server(s)

  • like 42 can be used to set the => time <= on the phone

  • 3 requests the default => gateway address <=

  • 2 defines the time offset the Phone time is using to determine the correct region in the => timezone <= the phone is based

  • 1 request's the phones => subnet address <=

  • Option 60 Identifies the Vendor Class Identifier

    Network_Activity_09.PNG
    The vendor class utilized during the initial boot up has no relation to the Option 43 required for a Pin & Extension setup in a => Skype for Business environment <=

    More details on the Polycom DHCP Vendor Option can be found in the => Technical Bulletin 54041 <= and troubleshooting => here <=

  • Option 125 contains multiple sub-options with specific information about the Phones

    Network_Activity_11.PNGNetwork_Activity_11.PNG

The phone can then receive one or multiple DHCP Offers:

 

NOTE: The Offer does not mandatorily need to contain all requested options!

Network_Activity_12.PNG

 

DHCPOFFER from 10.252.149.249

The Phone would then Request the IP Address and everything else:

 

Network_Activity_13.PNG

 

DHCPREQUEST on eth0 to 255.255.255.255 port 67

And the Server would ACKNOWLEDGE this exchange

 

Network_Activity_14.PNG

 

DHCPACK from 10.252.149.249

The Details can be seen in the Phone logs:

000033.490|dhcpc|3|00|dhcListener: Read succeeds: eth0 ip: 10.252.149.109.
000033.493|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: subnet-mask 255.255.252.0.
000033.494|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: routers 10.252.149.1.
000033.494|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: domain-name-servers 10.252.149.120 10.252.130.10.
000033.495|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: domain-name sbaierhome.lab.
000033.497|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: time-offset 0.
000033.497|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: dhcp-lease-time 691200.
000033.498|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: dhcp-server-identifier 10.252.149.249.
000033.499|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: ntp-servers 10.252.149.249.
000033.500|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: time-servers 10.252.149.249.
000033.503|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: broadcast-address 10.252.151.255.
000033.506|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: dhcp-lease-time 691200.
000033.507|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: dhcp-message-type 5.
000033.508|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: dhcp-renewal-time 345600.
000033.509|dhcpc|3|00|dhcListener: Read succeeds: eth0 option: dhcp_rebinding_time 604800.
000033.532|dhcpc|3|00|dhcListener: Read succeeds: eth0 state: BOUND.
000033.536|cfg  |*|00|RT|Do not do DHCP VLAN Discovery.
000033.536|cfg  |*|00|RT|   Phone IP address is 10.252.149.109.
000033.536|cfg  |*|00|RT|   Subnet mask is 255.255.252.0.
000033.536|cfg  |*|00|RT|   Gateway address is 10.252.149.1.
000033.536|cfg  |*|00|RT|   DNS server is 10.252.149.120.
000033.536|cfg  |*|00|RT|   DNS alternate server is 10.252.130.10.
000033.536|cfg  |*|00|RT|   DNS domain is sbaierhome.lab.
000033.536|cfg  |*|00|RT|   Time server is 10.252.149.249.
000033.536|cfg  |*|00|RT|   GMT offset is 0 seconds.
000033.538|dns  |*|00|DNS resolver servers are '10.252.149.120' '10.252.130.10'
000033.538|dns  |*|00|DNS resolver search domain is 'sbaierhome.lab'
000033.540|cfg  |*|00|RT|Primary IP: 10.252.149.109 subnet mask 255.255.252.0

 

Proxy:

 

  • Option 55 requesting Suboption 252

    Since VVX UC Version 5.7.0 and Trio UC Version 5.7.1 we also support => Proxy Discovery  <= via DHCP Option 252

    Once the phone signs into Skype for Business the Phone will request this via a DHCP INFORM.

    DHCP_Inform_Proxy_01.jpg

 

 

General Troubleshooting:

 

  • Initial BootP Option 43

 

A correct setup Skype for Business infrastructure should not send any Option 43 details as defined in detail => here <= if the Vendor Class send by the device is not MS-UC-Client.

 

Only the MS-UC-Client Vendor option should request the Option 43.

 

In non LYNC mode our Polycom Phones, and other Vendors, can actually utilize the Option 60 / Option 43 combination as explained => here <=

 

Polycom phones running at least UC Software 4.0.0 are sending DHCP Discover message as listed in "Option 55 Parameter Requested List" and able to fulfill the purpose of the given sub-options from Option 43. This follows the RFC2132

 

Option 55 in the DHCP Discover:

 

Option55.PNG

 

An Option 43 reply to a DHCP Discover can actually contain the following supported DHCP Sub-Options:

 

The following table lists the individual sub-options and combination sub-options supported on Polycom phones.

 

Additional DHCP Option 43 Configuration Options

 

Option

Result

Option 1- Subnet mask

The phone parses the value from Option 43.

Option 2 - Time offset

The phone parses the value.

Option 3 - Router

The phone parses the value.

Option 4 - Time server

The phone parses the value.

Option 6 - Domain Name Server

The phone parses the value.

Option 7 - Domain Log server

The phone parses the value.

Option 15 - Domain Name

The phone parses the value.

Option 42 - Network Time Protocol server

The phone parses the value.

Option 66 - TFTP Server Name

The phone parses the value.

Options 128-255

 

Sub-options configured in Option 43

 

Options 1, 2, 3, 4, 5, 6, 7, 15, 42, and 66

The phone parses the value.

Options 128-255

 

 

Example for a Provisioning Server:

 

Option Number

Length

Value

42

1D

66 74 70 3a 2f 2f 6d 75 6b 65 68 2e 61 73 69 61 2E 70 6f 6c 79 63 6f 6d 2e 63 6f 6d

option66

24

ftp://mukesh.asia.polycom.com

000035.669|dhcpc|3|4122|dhcListener: Read succeeds: eth0 option: vendor-encapsulated-options 5:2:b:7:6:aa:aa:1:95:c3:2e:c8:0

Polycom WPAD Discovery

 

Please check => here <=

 

Polycom ZTP

 

The phone, from Factory default, tries to reach the Polycom ZTP Platform

 

Network_ZTP_01.jpg

 

Polycom Experience Cloud

 

The Polycom Labs feature can be activated to send analytics automatically to Polycom

 

Network_PEC_02.jpg

 

The phone establishes a secure connection to the Polycom PEC server

 

Network_PEC_01.jpg

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. My official "day" Job is 3rd Level support at Poly but I am unable to provide official support via the community.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
3 REPLIES 3
Highlighted
Polycom Employee & Community Manager

Re: [FAQ] Troubleshooting Option 43 / 120 Issues

Troubleshooting Option 43 / 120 Issues.

 

Taking a Wireshark trace during the Phone is booting up will show the DORA for discovery, offer, request, and acknowledgment (Source => here <=).

 

InitialDORA.PNG

 

Current versions of UC Software already Identify themselves as a MS-UC-Client after booting up.

 

This happens after the initial DORA by sending a DHCP INFORM utilizing the Option: (60) Vendor class identifier.

 

This is being used to identify if the Option 43 is correctly setup so we can display the Extension & PIN sign in option. 

 

DHCP_Inform.PNG

 

The Option: (55) Parameter Request List requests Option 120 and Option 43.

 

Once the phone is booted up and presents the valid Sign-In Options and Extension and PIN screen can be selected and the user is expected to enter their details. 

 

Extension_PIN_Trio_01.jpgExtension_PIN_Trio_02.jpg

 

Older Software versions would during this stage identify itself (depending on the Model) in the DISCOVER and REQUEST as an example Polycom-VVX600.

 

The Process used for this is the Option: (60) Vendor class identifier.

 

InitialDORA.PNG 

 

We would not expect the DHCP server to send the Microsoft configured Option 43 or 120 if we are not identifying as MS-UC-Client.

 

Once the phone is booted up and presents the Extension and PIN screen the user is expected to enter these details.

 

LyncBaseProfile_03.PNG

 

Older Software Version would only now start sending a DHCP INFORM to the DHCP Server.

 

Please check => here <= for details

 

At this stage the Option: (60) Vendor class identifier is set as a MS-UC-Client instead.

 

The Option: (55) Parameter Request List now requests Option 120 and Option 43.

 

DHCP_Inform.PNG

 

The DHCP server will respond with an ACK and present the requested Options.

 

The Option: (43) Vendor-Specific Information will not be in a human readable format.

 

DHCP_ACK.PNG

 

Using the Copy => Bytes => Printable Text Only feature of Wireshark the Data can be displayed when copied into a text editor.

 

ACK_Copy.PNG

 

+]MS-UC-Clienthttpslyncfe01.t3voipuk.lab443%/CertProv/CertProvisioningService.svcNAP

The DHCP Server would show these options like this:

 

DHCP_ServerPNG.PNG

 

Our Polycom Guru Jeff Schertz explains this in greater detail => here <= 

 

Setting the Logging via the Web Interface (UCS 5.2.0 or later only !)

 

LogFileSize_1000.png

 

LoggingDebug.PNG Tickt.PNG Config_log.PNG

 

Or via a Configuration File:

 

<PIN log.level.change.tickt="1" 
log.level.change.cfg="3"
log.render.level="0"
log.render.file.size="1000"/>

 

Incorrect or incomplete:

 

0918144405|tickt|1|00|soWebTicketServersGet: request URI is /mex 

 

Correct example:

0919080727|cfg  |3|00|Prov|[CfgLyncSipSrvDiscover::cbFoundOption] Received STS-URI is 'https://lyncfe01.t3voipuk.lab:443/CertProv/CertProvisioningService.svc'
202646.012|tickt|1|00|soWebTicketServersGet: request URI is https://lyncfe01.t3voipuk.lab:443/CertProv/CertProvisioningService.svc/mex

Manually configuring an Option 43 STS-URI:

 

In an environment where there is no Option 43/120 or an incorrect setup STS URI this can be provided manually via:

 

STSUriOverride.PNG

 

<test dhcp.option43.override.stsUri="Specify URL here" />

Correct Example:

 

dhcp.option43.override.stsUri="https://lyncfe01.t3voipuk.lab/CertProv/CertProvisioningService.svc"

 

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. My official "day" Job is 3rd Level support at Poly but I am unable to provide official support via the community.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Highlighted
Polycom Employee & Community Manager

Polycom Trio Network data

Polycom Trio

 

After booting up the Polycom Trio will keep sending multicast packets from port 320 to port 320 for it's Precision Time Protocol

 

Wireshark_PTP_01.jpg

 

Polycom Visual+ or VisualPro

 

The RealPresence Visual+ sends out Multicast Traffic in order to advertise itself within the network to RealPresence Trio's

 

VisualPlusIPMulticast.PNG

 

It uses an IP 224.0.0.200 and the port 2000 for this.

 

Once the Trio itself add's the Visual+ to connect the Trio will connect to the Visual+ and pair:

 

Trio_Connect_Visual_Plus.PNG

 

The Trio Logs show this Discovery package as:

 

 

1121134633|mr   |1|00|Discovery from 0004f2fd1851 10.252.149.54 port 8000 status 0 pair 0 hw 2:Trio Visual+
1121134634|mr   |1|00|Discovery from 00e0db48c130 10.252.149.55 port 18888 status 2 pair 0 hw 8:RealPresence Group 500

 

 

The following log:

log.level.change.mr="1"

or via the Web Interface shows this:

Trio_MR_discovery_01.jpg

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. My official "day" Job is 3rd Level support at Poly but I am unable to provide official support via the community.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 3 of 4
Highlighted
Polycom Employee & Community Manager

Poly ObiHai Network data

In January 2018 Poly acquired ObiHai. Older ObiHai phones can only be ordered with the ObiHai software.

 

The newer Poly VVX 150, 250, 350, and 450 phones can be ordered with either Poly UC Software or ObiHai software. The Poly D230 can only run ObiHai software.

 

Older ObiHai Phones:

 

The below is an overview of what Network activities can be seen using a Poly/Obi Phone running and older ObiHai software stack. The example, in this case, is an ObiHai 2182 running the Obi 6.2.2 software after factory default. We use the following filter in Wireshark:

 

eth.addr[0:3]==9c:ad:ef

 

Booting up an ObiHai Software edition phone does not use LLDP or CDP and starts with the DORA DHCP Process:

ObiHai_1stBoot_01.png

 

The DHCP Discover:
ObiHai_1stBoot_02.png

Within this DHCP Discover message, the phone uses various Sub-Options

 

  • Option 12 Host Name

    ObiHai_1stBoot_03.png
    The above is the actual model number

  • Option 55 is a List of Sub Options

    ObiHai_1stBoot_04.png
    1 request's the phones => subnet address <=
    3 requests the default => gateway address <=
    6 is to identify the DNS / Domain Name server(s)
    15 can be used so the phone can identify the Domain it is using
    42 can be used to set the time on the phone
    66 is being used to identify the TFTP server location. A OBI2182.xml (Depends on the actual model) file is being requested to provision the phone if any other provisioning via PDMS-SP or similar fails.

Once the DORA is complete the phone then starts a DNS query for root.pnn.obihai.com and connects to the server:

ObiHai_1stBoot_05.png

 

Newer ObiHai Poly Phones:

 

The below is an overview of what Network activities can be seen using a Poly Phone running ObiHai software stack. The example, in this case, is a Poly VVX D230 running the Obi 7.1.0 software after factory default. We use the following filter in Wireshark:

 

eth.addr[0:3]==9c:ad:ef

 

Unlike the "older" legacy ObiHai phones the new Poly D230 as an example will start with 3x LLDP packets and 3x CDP Packets:

 

ObiHai_D230_1stBoot_01.png

It then starts with the DORA DHCP Process:


ObiHai_D230_1stBoot_02.png

The DHCP Discover:

 

ObiHai_D230_1stBoot_03.png

Within this DHCP Discover message, the phone uses various Sub-Options

 

  • Option 55 is a List of Sub Options
    ObiHai_D230_1stBoot_04.png
    1 request's the phones => subnet address <=
    3 requests the default => gateway address <=
    6 is to identify the DNS / Domain Name server(s)
    42 can be used to set the time on the phone
    66 is being used to identify the TFTP server location. A VVXD230.xml (Depends on the actual model) file is being requested to provision the phone if any other provisioning via PDMS-SP or similar fails.
    150 is being used as well for TFTP discovery
    160 is being used as well for TFTP discovery

  • Option 60 Identifies the Vendor Class Identifier
    ObiHai_D230_1stBoot_05.png
  • Option 125 contains multiple sub-options with specific information about the Phones
    ObiHai_D230_1stBoot_06.png

The phone can then receive one or multiple DHCP Offers:

 

NOTE: The Offer does not mandatorily need to contain all requested options!
ObiHai_D230_1stBoot_07.png

 

Once the DORA is complete the phone then starts a DNS query for prov.obitalk.com and connects securely to the server:

ObiHai_D230_1stBoot_08.png

The phone then starts a DNS query for root.pnn.obihai.com and connects to the server:

ObiHai_1stBoot_05.png

The phone then starts the TFTP request received via Option 55 Sub Option 66 if received prior for the device file name:

ObiHai_D230_1stBoot_09.png

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. My official "day" Job is 3rd Level support at Poly but I am unable to provide official support via the community.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 4 of 4