Supported phones
Every user can call from their browser with the Topaz Softphone in the Control panel: nothing to set up, and its calls are always encrypted. Any standard SIP desk phone or softphone app works too: for example Poly (Polycom), Yealink or Grandstream desk phones, or the Zoiper, Linphone, MicroSIP and Bria apps.
Add the device
An account admin adds devices in SmartPBX: choose the user and add a device for them. The Control panel shows the device’s SIP username and password. A user can have more than one device; calls to their extension ring their devices.
Enter the settings
Use these settings in the phone or app:
SIP server / domain your account realm, e.g. yourcompany-1a2b3c.sip.topaz.tel
Username the device’s SIP username
Password the device’s SIP password
Outbound proxy sip.topaz.tel
Transport and port TLS, port 5061 (or UDP or TCP, port 5060)
SRTP mandatory, SDES keys (off with UDP or TCP)Your account realm is shown in the Control panel. With TLS, the phone must use sip.topaz.tel as its outbound proxy (some phones call it the SIP proxy).
Encrypted calls
TLS encrypts the phone’s sign-in and call setup, and SRTP encrypts the audio between the phone and Topaz. For both, choose TLS on port 5061 and mandatory SRTP in the phone. Then, in SmartPBX, open the device, choose Miscellaneous and turn on “Encrypt the audio” with SRTP. Set encryption the same way on the phone and on the device: if only one of them requires SRTP, calls to the phone fail, and the call rings the user’s other devices or goes to voicemail. ZRTP is not supported. If a phone has no TLS, use UDP or TCP on port 5060 with encryption off on both: calls work but are not encrypted.
Check it works
The phone should show as registered. Call another extension, then an outside number. If it won’t register, check the realm, username, password and outbound proxy, and that your network allows SIP traffic on port 5061 (TLS) or 5060 (UDP or TCP). If it registers but calls to it fail, check that SRTP is set the same way on the phone and on the device.
Keep credentials private
Treat SIP passwords like any other password. Don’t share them in email, chat or screenshots. If one may have leaked, change it in the Control panel and update the phone.