Q-SYS / Q-LAN
Q-SYS is QSC's integrated platform for audio processing, video routing, and room control, and Q-LAN is the native Q-SYS transport/service suite that underpins audio, video, discovery, synchronization, control, and management inside that ecosystem. For firewall and IT purposes, the table below captures the core Q-LAN audio, discovery, clocking, and control footprint that most system reviews actually need. Q-SYS video workflows use additional RTSP/RTP ports on the relevant Q-SYS video endpoints and should be checked against the endpoint-family documentation when video is in scope. Unlike Dante or AES67, Q-LAN is exclusive to Q-SYS and is not a cross-vendor interoperability layer.
Scope: Q-SYS 10.2 native Q-LAN and selected control services
platform · Catalog reviewed 2026-10-22
Related requirements
Review these entries for the services used in your design.
By QSC
Infrastructure Requirements
- Q-SYS ecosystem
- managed Ethernet with correct QoS, PTP health, and multicast handling
- static addressing preferred
- QSC recommends dedicated-network thinking to reduce risk and improve stability
Network & Physical Requirements
| Port / allocation | Transport | Connection / signal flow | Feature and requirement | Evidence |
|---|---|---|---|---|
| 2467–2470 | UDP Multicast: 224.0.23.175 | Q-SYS application / endpoint → Q-SYS Core / peer | Profile requirement · QDP discovery QDP discovery Q-SYS 10.2 service inventory Select the enabled service and LAN adapter for the deployed Q-SYS 10.2 system. | Source checked 2026-09-27 Network services / protocols used table |
| 6504 | UDP | Q-SYS application / endpoint → Q-SYS Core / peer | Profile requirement · Discovery by address Discovery by address Q-SYS 10.2 service inventory Select the enabled service and LAN adapter for the deployed Q-SYS 10.2 system. | Source checked 2026-09-27 Network services / protocols used table |
| 443 | TCP | Q-SYS application / endpoint → Q-SYS Core / peer | Profile requirement · HTTPS services Secure Designer communications Q-SYS 10.2 service inventory The service cannot be disabled; restrict access to authorized Designer/management clients. | Source checked 2026-09-27 Network Services and Protocols > Q-SYS Designer Communications - Secure |
| 1704 | TCP | Q-SYS application / endpoint → Q-SYS Core / peer | Optional · QCBS native secure control QCBS native secure control Q-SYS 10.2 service inventory Select the enabled service and LAN adapter for the deployed Q-SYS 10.2 system. | Source checked 2026-09-27 Network services / protocols used table |
| 1702 | TCP | Q-SYS application / endpoint → Q-SYS Core / peer | Optional · ECP external control ECP external control Q-SYS 10.2 service inventory Select the enabled service and LAN adapter for the deployed Q-SYS 10.2 system. | Source checked 2026-09-27 Network services / protocols used table |
| 1710 | TCP | Q-SYS application / endpoint → Q-SYS Core / peer | Optional · QRC JSON-RPC control QRC JSON-RPC control Q-SYS 10.2 service inventory Select the enabled service and LAN adapter for the deployed Q-SYS 10.2 system. | Source checked 2026-09-27 Network services / protocols used table |
| 2112 | TCP | Q-SYS application / endpoint → Q-SYS Core / peer | Optional · Teams integration Teams integration Q-SYS 10.2 service inventory Select the enabled service and LAN adapter for the deployed Q-SYS 10.2 system. | Source checked 2026-09-27 Network services / protocols used table |
| 6518–7030 | UDP DSCP: AF41 (34) | Q-LAN audio participant → Q-LAN audio participant | Profile requirement · Q-LAN audio Q-LAN unicast RTP / RTCP Q-SYS 10.2 network service table The 10.2 service table specifies unicast UDP 6518–7030. Source ports are stream-allocated; RTCP destinations use this range. Older 6517-only examples are not the current profile. | Source checked 2026-09-27 Network services / protocols used table |
| 319 | UDP Multicast: 224.0.1.129 DSCP: EF (46) | Q-SYS clock participant → Q-SYS clock participant | Profile requirement · Timing Q-LAN PTPv2 timing Q-SYS 10.2 network service table Match the Q-LAN clock profile and network QoS design. | Source checked 2026-09-27 Sampling Clock |
| 320 | UDP Multicast: 224.0.1.129 DSCP: EF (46) | Q-SYS clock participant → Q-SYS clock participant | Profile requirement · Timing Q-LAN PTPv2 timing Q-SYS 10.2 network service table Match the Q-LAN clock profile and network QoS design. | Source checked 2026-09-27 Sampling Clock |
| 22 | TCP | Authorized support workstation → Q-SYS Core | Optional · Maintenance support Secure diagnostics and maintenance Q-SYS 9.10 Core network services Optional remote support service; enable only when authorized support needs it. | Source checked 2026-09-27 Network Services and Protocols > Secure Maintenance & Support |
| 5353 | UDP Multicast: 224.0.0.251 | Q-SYS device / discovery client → Local discovery peers | Optional · mDNS discovery mDNS service discovery Q-SYS 9.10 Core network services Per-adapter service. Software Dante automatically enables mDNS on its selected LAN; some plugins depend on it. Enabled by default does not mean required for every design. | Source checked 2026-09-27 Network Services and Protocols > Q-SYS Device Discovery via mDNS / Bonjour |
| 5060 (default) | TCP/UDP | Q-SYS Core / SIP peer → SIP peer / Q-SYS Core | Optional · VoIP SIP signaling Q-SYS 10.2 network service inventory Select the configured softphone transport and inbound port; service is required only for the VoIP feature. | Source checked 2026-09-27 Network Services and Protocols > VoIP (SIP/TLS and RTP/SRTP) |
| 5061 (default) | TCP | Q-SYS Core / SIP peer → SIP peer / Q-SYS Core | Optional · Secure VoIP SIP over TLS Q-SYS 10.2 network service inventory Select the configured softphone transport and inbound port; service is required only for the VoIP feature. | Source checked 2026-09-27 Network Services and Protocols > VoIP (SIP/TLS and RTP/SRTP) |
| Negotiated | UDP | Q-SYS VoIP endpoint / media peer → Media peer / Q-SYS VoIP endpoint | Optional · VoIP VoIP RTP/SRTP media uses the installed endpoint/session media allocation. Q-SYS 10.2.1 VoIP RTP/SRTP media; select installed firmware and actual session endpoints The interface inventory describes dynamic UDP 10000-30000, while the same-version Softphone topic lists 16384-32768 (https://help.qsys.com/q-sys10.2/Content/Networking/OtherNetworked_Audio.htm). Neither range is approved here as a universal fixed rule. Obtain the installed endpoint/session media range before configuring the firewall. | Source checked 2026-10-22 Network Services and Protocols > VoIP: UDP 10,000-30,000 described as dynamic; compare Other Networked Audio > SIP Softphone Interface > Protocols and PortsQ-SYS Help 10.2.1, checked 2026-10-22 |
Gotchas & IT Notes
- ⚠Use the matching firmware service table and select the enabled LAN adapter. Q-LAN is unencrypted and needs low jitter plus appropriate QoS.
- ⚠Q-LAN audio uses AF41 (34), while clock packets use EF (46). Verify switch queues and bandwidth with the actual Core/peripheral design.
- ⚠Video endpoints, VoIP, Reflect/cloud, plugins and Dante integration add separate requirements. The current native Q-LAN profile does not use the historical 6517-only media rule.