How To | Accessing a Q-SYS Core from a remote IP subnet

Learn how to configure and connect to a Core from a different IP subnet remotely.

Updated at July 25th, 2023


  1. First, you must set up a network connection between the local and remote networks using a VPN tunnel technology such as SSL, PPTP, L2TP/IPSec, OpenVPN, IKEv2, SSTP, etc.
  2. Once a VPN tunnel route has been established then you may need to “allow” these ports in the hardware or software firewall:
Port Type Port # Port Function
TCP 80 Supervisory functions
TCP 443 Supervisory functions
TCP 1704 Control messaging
UDP 6504 Discovery
  1. In addition to these firewall ports, the PC must be able to exchange ICMP (ping) echo messages with the Q-SYS core processor.

A remote VPN connection functions properly because the remote user has access to the local IP address range used on the destination network. In this case, packets never have their Layer 3 IP headers modified from end-to-end. In other words, these local IP packets are “tunneled” to the remote machine.


When using a VPN, a hard link will need to be established to the Core from the remote computer as multicast discovery does not propagate over VPN.