Skip to main content
Chat with Biamp tech support
Biamp Cornerstone

Qt X Networking

Configuring QT X networks

Systems controlled by Qt X controllers can be configured using either the browser-based web user interface loaded on each controller (web UI) or the Qt X systems management software (Qt X software). Some settings may also be edited on the controller front panel using the display and buttons there.

  • The Qt X platform provides virtualized architectural zoning through a flexible media and control network topology.
  • Multiple supported network topologies can be used to maximize design capabilities into many control and media network topologies.

 

 

Network connections

All Qt X controllers come with dual RJ45 Gigabit Ethernet port connectors that support control and media network audio. These ports can be configured to support multiple network topologies.

Note: Control port 1 on the Qt X 800s and 800D controllers supports Power over Internet to the controller. 

clipboard_e5fbcc1ffb1f7cb16def1796a325f5c71.png

 

 

 

 

 

MAC addresses

Each Qt X controller has 2 device MAC addresses. These are viewable under the Network tab in both the Qt X Software and Web UI. When a controller is in single cable mode, both addresses are visible on the Port 1 LAN connection.

 

 

Network settings overview

The Network Settings tab in both the Web UI and QT X systems software allows users to:

  • Modify the primary DNS
  • Add or modify the secondary DNS
  • Configure the control and media ports
  • Switch between single and dual cable modes
  • The media type can only be changed to Dante if a Dante-enabled device is connected.

 

Addressing options

DHCP is checked by default for automatic assignment of an IP by the server. The device network settings can be configured if Static IP is selected. Qt X controllers also support automatic automatic private IP addressing (APIPA) or auto-IP.

  • Qt X controllers may also be connected to a network with a DHCP server for initial discovery
  • mDNS discovery is limited to a single subnet

 

Control and media network addresses

Control and media network address settings can be set on a controller's front panel as well as by using the Qt X Software or Web UI. However, the front panel will not display any information related to the network cable mode or media type setting. These settings must be viewed or changed from the software or web UI.

 

Cable modes overview

Qt X controllers support single-cable mode by default, allowing users to connect to devices with a single cable from the media ports.

In Single Cable mode, one port handles all control and media communications. Selecting Dual Cable mode separates the control and media communications. This choice is based on user preference and system design requirements. 

Single Cable Mode

This is the default mode for Qt X controllers.

  • LAN Port 1 – Control and media combined
  • LAN Port 2 – Disabled

Dual Cable Mode

  • LAN Port 1 – Media network

  • LAN Port 2 – Control network

 

Media Modes (Dante Qt Xs)

Dante-enabled Qt x D controllers ship with Dante media mode enabled by default. In an unconfigured state, the controller may be switched from Dante to AVB media mode .

Note: Qt X hardware does not support AVB and Dante in mixed network modes.

 

 

Control and media network options

Cable mode settings are located under the Networks Settings tab in both the Qt X systems software and the onboard web UI.

 

Single-cable mode details

Both control and media IP addresses are active in single cable mode and may be addressed uniquely. While in single cable mode both Control and Media MAC addresses are viewable behind the single LAN port. 

In single cable mode, all control data, AVB or Dante media is transmitted and received from the Qt X controller over Port 1. This allows all Qt X web-based management software, Qt X control software, SageVue management and 3rd party control to connect to a common switch with the audio media network. 

The Web UI may be accessed via either Control or Media IP address in single cable mode. 

Qt X Software View                                                     Qt X Web UI View       

The single-cable carries both control and AVB or Dante media and connects to a common converged control plus media network.

Single Cable Top.png

Note: When in single cable mode, the media network IP address is still active and may be addressed separately from the control LAN. This is the address a Dante Qt X D controller uses to discover the device and route Dante audio flows. The address must be in the same range as other Dante devices routed to the Qt X hardware.

 

Dual Cable mode for separated networks

Dual cable mode supports isolating AVB or Dante media from control data on two physically separated networks. This allows media networks to be isolated from building WAN or system control networks. Qt X controllers support the use of an individual uplink from the control and AVB or Dante media ports to the respective separated networks. 

In separated networks, AVB or Dante media is transmitted and received from the Qt X controller over Port 1, while inter-device communication, Qt X web-based management software, Qt X control software, SageVue management, and 3rd party control are accessed via Port Position 2.

The Web UI may be accessed via either Control or Media IP address in dual cable mode. 

Qt X Software View                                                     Qt X Web UI View                                                                    

clipboard_ec9c442e0cefb130edf51d13617b98833.pngclipboard_e28e33f1a6cc3faefb347acd0bee427e3.png                          

The media network traffic resides on a logically separated switch from control traffic. This topology allow for control traffic to reside on an enterprise building network with all media traffic on an isolated switch. 

Separated Diagram.png

 

 

AVB Media Network Requirements

  • AVNU Certified Network Switch w/AVB Active License
  • AVB switches will automatically create and use VLAN 2 for all AVB media traffic.
  • AVB controller software for routing explicit AVB streams to Qt X hardware. Biamp currently recommends using the Riedel AVB Manager software as the AVB controller. The software is free, but requires registration on Riedel's website. Other notable AVDECC controllers are Hive AVB Controller and Hono AVB Controller.

 

 

Dante Media Network Requirements

 

 

802.1X and Certificate Management

The Security Configuration dialog manages security settings such as viewing currently-applied security certificates, the status of 802.1x, and settings associated with the web server. 

The standard allows for protecting the 802.1X traffic using varying degrees of encryption to prevent authentication credentials from passing over the wire as clear text. This reduces vulnerability to “man in the middle” attacks that intercept network traffic.

 

Topologies not supported

Important: The topologies listed below are not supported for 802.1x in Qt X hardware.

  • 802.1x is not supported while in single cable mode. There are 2 MAC addresses that are seen behind a single LAN port in this mode. A switch with 802.1x will not authenticate to a device with more than one MAC address.
  • A Qt X controller in dual cable mode while set to Dante media mode does not support 802.1x. This is due to 802.1x supporting only Unicast communication while the Qt X controllers are communicating via multicast. 

 

Managing certificates

Certificate management is only accessible via the Qt X software application. 

  • The certificates tab is accessed from the Device Information screen - Operations tab.
  • Select the Certificate Management button to view and update settings. 

The 802.1X Certificates tab allows configuring 802.1X security protocols for the controllers control and media ports. 802.1X. is an IEEE standard for port-based Network Access Control (PNAC) and is part of the IEEE 802.1 group of networking protocols. 802.1X provides an authentication method for connecting devices to a Qt X system. 

 

Security

Integrators and administrators configuring 802.1X and choosing EAP methods should be knowledgeable in network security and know the requirements of the enterprise network Qt X devices are being installed in. 

Biamp supports the following security types:

  • EAP_NONE   -  EAP is disabled
  • EAP_PEAP/MSCHAPv2   -  Server authentication via certificate; client authentication via another EAP method
  • EAP_TLS  - Certificate-based two-way authentication

802.1X security may be selected for the control or media ports on the selected Qt X sound masking controller. Connected devices must support 802.1X to enable the security protocol:

Users must choose which Mode to apply. Mode establishes the Extensible Authentication Protocol (EAP) by which authentication takes place and is disabled by default (EAP_NONE). 

Certificates

Users may select a Root or Client certificate based on the security requirements of the organization. The Qt X comes factory-equipped with a root certificate issued by Biamp (a trusted Certificate Authority (CA).) Users may choose to apply the Biamp Production Root certificate, or supply their own. Clicking 'Select Certificate' will allow the user to browse to available certificates. Users may upload their own certificate via the Certificates Tab

Root Certificate

Click Apply. The 802.1X Certificate Management window will reflect the applied certificate:

Client Certificate

The Qt X comes factory-equipped with a client certificate used to make authenticated requests to a remote server. Administrators may choose to apply the device client certificate or supply their organization's certificate. Available certificates may be browsed to by clicking on Select Certificate. Certificates may be uploaded on the Certificates Tab

Click Apply. The 802.1X Certificate Management window will reflect the applied certificate:

 

 

External Control

A Qt X API / plug-in will be enabled in a future firmware version. The API will allow external device control of the Qt X system by interfacing through documented commands.

 

 

  • Was this article helpful?