One Cable to Rule All Devices
Standard Cat5e and Cat6 Ethernet cables contain eight copper conductors arranged as four twisted pairs. In a standard 100BASE-TX or 1000BASE-T installation, all four pairs carry data signals. For years, the remaining electrical capacity of those conductors was completely unused — a wasted resource sitting inside every wall in every building.
Power over Ethernet (PoE) changed that. By standardizing how DC electrical power is injected onto Ethernet cable alongside data signals, IEEE 802.3 working groups created a mechanism that allows a single cable run to deliver both a network IP connection and enough electrical power to run cameras, access points, VoIP phones, and a growing range of IoT devices — without any modification to the cable itself and without requiring a nearby electrical outlet.
For IT infrastructure teams, PoE is a practical solution that dramatically reduces installation complexity and cost in commercial buildings, hospitals, warehouses, and campuses. Understanding its standards, power budgets, and limitations is essential knowledge for any network engineer planning a modern installation.
How PoE Delivers Power and Data Simultaneously
There are two IEEE-standardized methods for injecting power onto Ethernet cable, referred to as Alternative A and Alternative B:
Alternative A uses the data-carrying wire pairs (pairs 2 and 3 in 10/100BASE-T, or all four pairs in Gigabit and above). The DC power signal is superimposed on the data signal using transformers at both ends that block DC from entering the data circuitry while passing the power signal through. This is not signal mixing — the data signals are AC-coupled through the transformer while the DC power rides through the center tap of the transformer winding.
Alternative B uses the spare wire pairs (pairs 1 and 4) that are not used for data transmission in 10/100BASE-T. The PoE switch or injector applies DC power across these unused pairs. The powered device extracts power from these pairs and data from the active pairs independently.
Gigabit PoE (IEEE 802.3bt, also called PoE++) uses all four pairs for power delivery, since all four pairs are active for data in Gigabit Ethernet. This allows significantly higher power delivery.
Before injecting power, the Power Sourcing Equipment (PSE) — typically a PoE switch port or a midspan injector — performs a discovery and classification handshake with the Powered Device (PD). The PSE applies a low-voltage probe signal to detect whether the device at the other end presents the correct 25 kΩ signature resistance that identifies it as a PoE-compatible device. If no PoE signature is detected, the PSE does not inject power, protecting non-PoE devices from damage. After detection, the PSE classifies the device (classes 0–8) to determine how much power it requires, then negotiates the appropriate power level before fully enabling the feed. IEEE 802.3bt adds dual-signature and single-signature powered-device models for asymmetric loads; non-compliant midspan injectors that skip proper classification often surface as random reboots when peak draw exceeds what the PSE reserved.
PoE Standards: 802.3af, 802.3at, and 802.3bt
| Standard | Common Name | Max Power at PSE | Max Power at PD | Pairs Used | Typical Use Cases |
|---|---|---|---|---|---|
| IEEE 802.3af (2003) | PoE | 15.4W per port | 12.95W | 2 pairs | IP phones, basic cameras, basic APs |
| IEEE 802.3at (2009) | PoE+ | 30W per port | 25.5W | 2 pairs | PTZ cameras, 802.11n/ac APs, thin clients |
| IEEE 802.3bt Type 3 (2018) | PoE++ / 4PPoE | 60W per port | 51W | 4 pairs | High-power APs, IP intercoms, smart displays |
| IEEE 802.3bt Type 4 (2018) | PoE++ Ultra | 100W per port | 71.3W | 4 pairs | Laptops, thin clients, LED lighting panels |
The power difference between PSE and PD reflects cable losses. A Cat5e cable run of 100 meters has measurable resistance, and the voltage drop across that resistance means the device receives somewhat less power than the switch injects. This cable loss is built into the standard's specifications.
PoE Switch vs. PoE Injector vs. PoE Splitter
There are three ways to provide PoE power to devices:
PoE Switch: A network switch with PoE circuitry built into each port. Every port can independently supply power to a connected device. Enterprise PoE switches specify a total power budget — the maximum total watts the switch can deliver across all ports simultaneously. A 24-port switch rated at 370W can deliver that 370W spread across any combination of its ports, but cannot exceed the total budget.
PoE Midspan Injector (single-port): A small device that sits between a non-PoE switch port and a PoE device. It takes a standard Ethernet input from the switch and a separate AC power input, then outputs a PoE-powered Ethernet connection to the device. Useful for adding PoE capability to a single device without replacing an entire switch.
PoE Splitter: A device that takes a PoE-powered Ethernet input and splits it into two outputs: a standard Ethernet data cable and a DC power jack (often 5V, 9V, or 12V). Allows non-PoE devices to be powered by a PoE network if the voltage and current requirements are compatible.
Real-World Use Cases
Enterprise Wi-Fi Deployment: Deploying 802.11ax (Wi-Fi 6) access points throughout a large office building is the most common PoE use case. Access points need to be ceiling-mounted for optimal coverage — locations where power outlets do not exist. PoE eliminates the need to hire electricians to install new outlets, reduces installation time from days to hours, and allows access points to be powered down and rebooted remotely via the switch's PoE management interface.
IP Security Camera Systems: Surveillance cameras need to be mounted at specific vantage points — corners, entrances, parking structures — where power is not available. PoE allows a single Cat6 cable to handle both the camera's IP video stream and its power supply. For PTZ (pan-tilt-zoom) cameras with onboard heaters or IR illuminators, PoE+ (802.3at) or PoE++ is required to supply sufficient wattage.
VoIP Phone Deployment: Enterprise VoIP handsets were among the first widespread PoE applications. A PoE-powered phone needs only a single Ethernet cable at the desk — data, voice, and power all through one connector. Many PoE phones also include a built-in Ethernet passthrough port so a laptop can share the same cable run.
Smart Building IoT: Modern commercial buildings deploy PoE for occupancy sensors, digital signage, access control readers, LED lighting controllers, and building automation endpoints. The total cable infrastructure can be dramatically simplified by consolidating power and data onto the same structured cabling plant.
Common Misconceptions
Misconception 1: PoE Damages Non-PoE Devices
IEEE-compliant PoE equipment will not apply power to a device that does not present the correct PoE signature resistance. The PSE explicitly checks for the 25 kΩ detection signature before enabling power. A standard Ethernet device connected to a PoE port is safe — the port will detect the absence of the PoE signature and operate as a standard data port without injecting any power. Non-compliant or passive PoE equipment (common in some lower-cost surveillance cameras) does not perform this detection and can potentially damage connected devices.
Misconception 2: Any Ethernet Cable Supports PoE
PoE works over Cat5e and above. However, cable quality matters for high-power PoE. IEEE 802.3bt (100W) over low-quality or very long cable runs can cause significant heat buildup in bundled cable runs, which is why IEEE 802.3bt includes temperature rise specifications and recommends derating power delivery for long runs or tightly bundled cables. Use quality-rated Cat6 or Cat6A for PoE++ installations.
Misconception 3: PoE Budget Is About Number of Ports
PoE budget is about total watts, not port count. A 24-port switch with a 370W budget can support 24 devices drawing 15.4W each (370W ÷ 24 = ~15.4W/port), but cannot support 24 devices each drawing 30W (which would require 720W). Over-specifying the number of PoE ports on a switch without accounting for total power budget is a common planning mistake that results in some devices receiving no power after the budget is exhausted.
Misconception 4: Passive PoE Is the Same as IEEE PoE
Passive PoE — commonly used in MikroTik and some budget surveillance products — continuously applies voltage to unused wire pairs without performing the IEEE detection and classification handshake. Connecting a passive PoE source to a device expecting IEEE PoE (or vice versa) can damage equipment. Always verify whether a device and power source both use IEEE 802.3af/at/bt or both use passive PoE, and never mix them without explicit compatibility confirmation.
Pro Tips
- Calculate your PoE budget before purchasing a switch: Add up the maximum power draw of every planned PoE device (found in the device's datasheet under "PoE power consumption"), add a 20% overhead, and select a switch whose total PoE budget exceeds that number. Undersized PoE budgets are the most common cause of devices randomly losing power on new installations.
- Use managed PoE switches for remote power cycling: Enterprise managed switches allow you to power cycle individual PoE ports via CLI, web interface, or SNMP. This is the equivalent of unplugging and re-plugging a device remotely — invaluable for rebooting frozen IP cameras or access points without a physical site visit.
- Check for passive PoE before connecting any device: Before connecting a device to an unfamiliar PoE source, verify whether it uses IEEE 802.3af/at/bt or passive (always-on) PoE. Connecting a passive PoE source to a non-PoE device can cause permanent damage since passive PoE provides no detection circuit.
- Cable length affects delivered power: IEEE PoE standards are rated for up to 100 meters of cable. For high-power devices (PoE+, PoE++) at the far end of a long run, measure the actual power received by the device versus the nominal specification. For critical installations, use a PoE tester to verify delivered voltage at the device.
- Consider cable bundling for high-power PoE runs: Dense bundles of Cat6 cables each carrying PoE++ can generate enough heat to degrade cable performance over time. Route high-power PoE runs with spacing where possible, and check the IEEE 802.3bt temperature derating tables for bundled cable scenarios.
- Use PoE scheduling for energy savings: Managed PoE switches support scheduled port power on/off. Use this to power down access points and cameras during off-hours, reducing energy consumption and extending device lifespan by reducing operating hours.
PoE is the infrastructure foundation of modern IP-connected buildings. Getting the standards, power budgets, and wiring details right the first time avoids expensive retrofits. Audit your network device IPs and hardware here.