04 · Network and QoS

The port and DSCP table

This table is the QoS interview. It is also the ACL.

Room HTMLAll downloads

Learn it in 5 minutes

The QoS article’s initial ranges are audio UDP or TCP 50000–50019 at DSCP 46 EF, video 50020–50039 at 34 AF41, sharing 50040–50059 at 18 AF21, and calling and meeting signaling 50070–50089 at 40 CS5. Signaling ports are not configurable.

Browser joins do not use those fixed ranges. Mac and mobile hard-code audio as EF. Windows can follow policy, and the client process to match is ms-teams.exe, not the previous client’s name.

Audio DSCP 46, video 34, sharing 18, signaling 40. Browser joins do not use the fixed client ports.

Room HTML

Visual

Media bypass beside the signaling pathTeams clientMedia processorCertified SBCMedia bypass candidate, same site. Signaling still visits Teams.Signaling does not bypass
Two paths for The port and DSCP table. RTP may skip the processor. SIP does not.
DSCP marksAudio · EFVideo · AF41Share · AF21Signaling · CS5
Bar length is the DSCP value from the QoS article. Counts in this drawing are teaching order, not customers.

SVGPNGHTML

Worked example

Audio is 46 on ports 50000 to 50019. I can place the other three without a card.

  1. Audio 46 EF
  2. Video 34 AF41
  3. Share 18 AF21
  4. Signaling 40 CS5

If it fails: An ACL matches the old client or the wrong port range, so marks never land.

Checklist HTML

Quiz

A colleague reports: Every remote user shows high RTT and the office does not. Where do you start?

Which description of ExpressRoute is optional is accurate?

A colleague reports: Media was forced onto a long private path and RTT jumped. Where do you start?

Flashcards

Ecosystem

Glossary

  • Shortest media path Microsoft’s network guidance prefers a short path to the Microsoft network, without a proxy in the media path. Config: Egress Teams media locally. Do not hairpin a branch through a distant data center unless you mean to. Fault: One city’s CQD is poor and the firewall team finds a proxy.
  • VPN and real-time media Microsoft recommends that you avoid sending real-time Teams media through a VPN. QoS on the VPN does not fix the extra delay. Config: Test a call on the VPN and off it before you blame the carrier. Fault: Every remote user shows high RTT and the office does not.
  • ExpressRoute is optional Teams does not require ExpressRoute. Local internet egress is the usual design. If you do use ExpressRoute, follow the current network article rather than assuming media is happier there. Config: Decide the path, then mark DSCP on the path you actually use. Fault: Media was forced onto a long private path and RTT jumped.
  • QoS markers enabled The Teams admin center setting that allows clients to insert DSCP. Without it, a correct ACL still sees unmarked client traffic from managed endpoints that honor the policy. Config: Turn the insert-markers setting on, then verify at the WAN edge. Fault: The network is marked and the clients were never told to mark.

Sister technologies

Around the call: compliance recording, workforce management, emergency location, analytics, CRM screen pop, and an agent with a human escape. Each one has its own failure.

Config and troubleshooting

An ACL matches the old client or the wrong port range, so marks never land.

Cross-platform bridges

CUCM

Cisco CUBE is one of the SBC families named in this lab’s certification lesson. A certified release can be the Direct Routing SBC between Unified CM and Teams.

The tenant still needs a verified domain on the SBC FQDN, and the user still needs Teams Phone. The studio translator does not open a live AXL session. Confirm the current certified release before you build.

Webex

Teams Phone and Webex Calling are separate clouds. This lab does not describe a feature that registers a Webex Calling user into a Teams tenant.

A number move is usually a carrier port, a certified SBC, or a meetings interop product. Confirm before relying.

UCCE

Unified CCE stays the ACD until you migrate it. Microsoft’s contact-center articles name Connect, Extend, and Unify. They do not name a UCCE connector in the notes this lab cites.

Voice into Teams is still Direct Routing or Operator Connect. The routing script stays on the contact-center product you bought. Confirm the vendor’s current model. Source: https://learn.microsoft.com/en-us/microsoftteams/teams-contact-center.

Future hooks

Copilot Studio, Azure Communication Services, and Graph are later tracks in this lab. Treat any uncited limit as confirm before relying.

BridgesEcosystem

Sources and go deeper

Opened 2026-10. A row marked confirm did not open. Wikipedia is background. The Teams blog row is the community index.

  • QoS in Microsoft Teams — Microsoft Learn — last checked 2026-10.
  • RFC 3550 — RFC — last checked 2026-10.
  • Quality of service — Wikipedia — last checked 2026-10. Wikipedia fallback for background. Confirm the vendor page before you change a tenant
  • Microsoft Teams blog index — Community — last checked 2026-10. Community index for the Microsoft Teams blog. This is the index, not a claim that a post discusses this room

sources.json