PoE Injectors and Switches for the Home Lab

One Cable to Rule Them All

There’s a quiet little magic trick hiding in your network switch. You plug in an ethernet cable, and somehow the device on the other end — a wireless AP, a camera, a Raspberry Pi — powers on. No power brick. No extension cord hunting. No zip-tying a wall wart to the ceiling mount of an access point at 2 AM while balancing on a ladder.

That’s Power over Ethernet. And once you start using it, you’ll wonder how you ever ran a home lab without it.

The problem is the spec soup. 802.3af. 802.3at. 802.3bt. Passive PoE. Active PoE. “PoE+” (which means different things to different vendors). TP-Link says their $29 injector supports PoE — but does it support your camera? The short answer is “maybe, probably, read the label.” The long answer is this article.

The Standards, Actually Explained

802.3af — The Original (PoE)

Ratified in 2003. Delivers up to 15.4W at the switch port (PSE side) with a maximum 12.95W at the device (PD side). The rest burns off as heat in the cable. Voltage on the wire: 44–57V DC.

This covers: UniFi UAP-AC-Lite (6.5W), most IP cameras (5–12W), VoIP phones, basic IoT.

802.3at — PoE+ (the useful one)

Doubled the power in 2009. 30W at PSE, 25.5W at PD. Same voltage range: 42–57V.

This covers: UniFi UAP-AC-Pro (~12W), UniFi UAP-6 Pro (~15W), Aruba Instant On APs, outdoor cameras with IR floodlights (up to 25W), Raspberry Pi 4 with PoE HAT (~5W peak under load).

802.3bt — PoE++ (the big leagues)

Two tiers:

• Type 3: 60W PSE / 51W PD — covers high-density APs, pan-tilt-zoom cameras
• Type 4: 90W PSE / 71W PD — covers laptops, thin clients, powered USB-C hubs

Uses all four pairs in Cat5e/6 instead of two. Backward compatible with af/at devices. Voltage now up to 57V, current up to 960mA per pair.

This is what you need for a UniFi U6-Pro (13W, but the port negotiates at, so bt switches give headroom), or anything that has “802.3bt” in its spec sheet.

Passive PoE — the Wild West

Here’s where it gets spicy. Ubiquiti built a lot of their older gear around 24V passive PoE. MikroTik uses 12–24V passive PoE on some devices. “Passive” means voltage is always present on the wire — no handshake, no negotiation, no protection against frying a non-PoE device.

Passive PoE and 802.3 PoE do not play nice on shared infrastructure. Plugging a passive PoE injector into a port that also has an 802.3at-capable switch on it is a recipe for confusion at best, dead gear at worst. Keep them on separate infrastructure or use adapters explicitly designed to bridge them.

If you’re buying new gear, skip passive PoE entirely. Your future self will thank you.

What You’ll Actually PoE in a Home Lab

Let’s get concrete. Here’s the gear most home lab folks end up powering via PoE, and what they actually draw:

Notice that most home lab PoE devices are comfortable at 802.3af or at. You don’t need bt unless you’re running high-power APs or NVR boxes that also power cameras via their own PoE ports.

Switch PoE Budgets: Where People Get Burned

Here’s the gotcha nobody warns you about: total PoE budget vs. per-port maximum are completely different numbers.

A TP-Link TL-SG2210MP has 8 PoE+ ports and advertises 150W total budget. Each port can do 30W (802.3at). 8 × 30W = 240W. But the switch only has 150W to give. So you can’t run all 8 ports at full load simultaneously. Push it past the budget and the switch starts shedding load — usually the highest-priority ports win, and your random camera in port 7 turns off.

Always add up your expected device draws and compare against the switch budget with a 20% headroom buffer. Things get warm; power supplies aren’t 100% efficient.

Switch Recommendations (2026)

MikroTik CRS328-24P-4S+RM — The home lab darling. 24x GbE PoE+ ports, 4x SFP+ uplinks, and a 500W PoE budget. That’s a real 500W, not marketing math. About $250–$300 new. SwOS or RouterOS. If you want full L3 routing on your PoE switch, this is the move. The fan is audible in a quiet room — basement rack is fine, bedroom office less so.

UniFi USW-Pro-24-PoE — 24x GbE ports (16 PoE+, 8 PoE++), 2x SFP+, 400W budget. Integrates with UniFi controller for per-port power monitoring and remote shutoff. ~$380. If you’re already in the UniFi ecosystem, this is the no-brainer.

Aruba Instant On 1930 24G PoE — 24x GbE PoE+ (up to 370W), 4x SFP uplinks. Cloud or local management. ~$350. Solid build quality. Aruba’s management portal is surprisingly good for a home lab.

Engenius Cloud ECS1528P — 24x GbE PoE+ ports, 370W, 4x SFP+. Cloud-managed but has local fallback. Around $280. Good option if you want something managed that isn’t UniFi.

Brocade ICX-7250 (used) — Enterprise gear from the enterprise graveyard. 24x GbE PoE+ ports at full budget — this thing doesn’t fudge the numbers. Pick one up on eBay for $150–$250 depending on config. The CLI is IronWare, not Cisco IOS, but it rhymes. Fan noise is… present. Check your rack’s acoustic tolerance. But for raw PoE budget per dollar, nothing touches it.

Injectors: When You Need PoE for Just One Thing

You’ve got a run of Cat6 going to a corner of the garage where you’re hanging a camera. Your main switch is in the basement. You don’t want to run a whole PoE switch out there. Enter: the PoE injector.

An injector sits between your non-PoE switch and the device. AC power goes in one side, ethernet in the other, powered ethernet out the other side.

TP-Link TL-POE160S — Gigabit, 802.3at (30W). About $20. Just works. Plug it in, plug your device in, done. Good for cameras, APs, Pi setups.

MikroTik RBPOE — Passive 24V, 500mA. Only use this with MikroTik gear that explicitly calls for passive 24V. Do not use this with 802.3af/at devices.

Used Cisco/Aruba injectors — eBay goldmine. An Aruba H3-POE or Cisco AIR-PWRINJ6 goes for $15–$30 used and is built to run 24/7 in an enterprise closet. They’ll outlast your house.

When to reach for an injector: single device, long run, no PoE switch nearby, or you’re experimenting before committing to a switch upgrade.

Splitters: PoE Without PoE Support

Some devices you want to power via ethernet aren’t PoE-capable — no 802.3 support, no internal circuitry to accept the power. Think: a Raspberry Pi without the PoE HAT, a small OpenWRT router, a doorbell chime module, some ESP32 sensors.

A PoE splitter sits at the device end, strips the power off the ethernet cable, and outputs 5V or 12V via USB or barrel connector. The data pass-through continues to the device normally.

Examples:

• TP-Link TL-POE10R — Takes 802.3af/at, outputs 5V or 12V via barrel. About $15.
• DSLRKIT Active PoE Splitter — Takes af/at, USB-A output at 5V/2A. Works with Pi 3/4 if you don’t want the HAT.

The catch: splitters have conversion overhead. You’re not getting all 12.95W at 5V out the other end. Expect 80–85% efficiency. For a Pi running light workloads, this is fine. For a Pi 5 under heavy CPU load, get the HAT or a dedicated power adapter.

Cabling: Yes, It Matters for PoE

Cat5e is fine for 802.3af and 802.3at. It handles the voltage and current of standard PoE without issue. Your existing Cat5e runs to cameras and APs are almost certainly adequate.

Cat6 is recommended for 802.3bt. Higher current over longer runs means voltage drop becomes real. Cat6’s lower resistance helps.

100m is the hard limit — IEEE spec, period. 90m is the recommended max for structured cabling (leaving 10m for patch cables at each end). PoE over 100m: don’t.

The Voltage Drop Math

This isn’t just theory — it matters on long runs. The formula:

V_drop = 2 × R × I

Where:

• R = cable resistance in ohms per meter (24 AWG ≈ 0.094 Ω/m)
• I = current draw in amps
• The 2 accounts for return path (two conductors)

Example: 802.3at device drawing 30W at 48V (0.625A), over a 50m run of Cat6:

V_drop = 2 × (0.094 × 50) × 0.625
V_drop = 2 × 4.7 × 0.625
V_drop = 5.875V

Device sees ~42V instead of 48V. Still within the 802.3at range (minimum 42V at PD). Fine.

Now do that same math with a 90m run and a high-draw 802.3bt device at 90W (roughly 1.9A at 48V):

V_drop = 2 × (0.094 × 90) × 1.9
V_drop = 2 × 8.46 × 1.9
V_drop ≈ 32V

That puts your device at 16V, which is below spec. Your switch will either fail to power the device or reduce output to stay in compliance. Use shorter runs or bt switches that start at higher voltage headroom for this.

Mid-Span vs End-Span: Fancy Words for “Injector vs Switch”

End-span PSE = PoE switch. Power comes from the switch itself. Cleaner, fewer devices, preferred for new installs.

Mid-span PSE = injector in the middle of the cable run. Required when you have a non-PoE switch upstream and can’t replace it. Also useful for incremental upgrades when you’re not ready to swap your whole switching infrastructure.

Both are 802.3 compliant. End-span is just cleaner to manage.

Troubleshooting PoE

When a device won’t power on, or keeps cycling, or the switch says it’s delivering power but the device disagrees — here’s the toolkit:

PocketEthernet (~$100) — Handheld tester that identifies PoE class, measures voltage and current, does cable continuity. Essential if you’re doing more than a couple drops.

Klein Tools VDV Scout Pro 3 with PoE Detector (~$150) — Adds PoE detection to the standard cable certifier workflow. Good if you’re already using Klein for cable testing.

Reading Switch Diagnostics

MikroTik CRS/CCR — per-port PoE monitoring in a live stream:

/interface ethernet poe monitor 0,1,2,3 interval=5s

This shows voltage, current, power draw, and PoE class negotiated on each port, updated every 5 seconds. Extremely useful for verifying a device is actually drawing what you think it is.

UniFi Controller — Devices > Switch > Ports tab shows per-port PoE power consumption in real time. Remote disable/enable per port via the controller. UniFi also lets you set port priority (critical ports keep power when budget is exceeded).

Brocade ICX-7250 — Enterprise PoE CLI:

show inline power
show inline power detail ethernet 1/1/1

The detail command shows voltage, current, class, and status per port. You can also see switch-level budget consumption and how much headroom you have:

show inline power detail

Look for Configured Budget, Used Power, and per-port Consumed columns.

Power Redundancy for PoE Infrastructure

Your PoE switch is now delivering power to cameras and APs that you’re depending on for physical security and network connectivity. If the switch loses power, everything on it loses power simultaneously.

Dual-PSU switches — The MikroTik CRS328-24P-4S+RM supports a second PSU via the expansion bay. Enterprise gear like the Brocade ICX-7250 has dual-PSU options. If your home lab runs 24/7 and you care about uptime, this matters.

UPS on the switch — Put your PoE switch on a UPS. A CyberPower PR1000LCDRT2U or an APC SMX750 will carry a 200W PoE switch and your core switching through a 10–15 minute outage. Size your UPS for the actual PoE load — a 150W switch at 80% budget plus uplinks can pull 140W+ from the UPS.

PoE-aware UPS — Some CyberPower OR and PR series units have enough output wattage that you can also plug injectors directly into them. Not a substitute for a proper dual-PSU switch, but it gets you to the same outcome for small deployments.

The Bottom Line

PoE is one of the best quality-of-life upgrades you can make to a home lab. One cable does data and power. Devices mount anywhere within 100 meters of your switch without a nearby outlet. Power monitoring is built in. Remote reboot is built in. When a camera freezes at 2 AM, you disable and re-enable the port from the controller instead of climbing into the attic.

The decision tree is simple:

• One or two devices, no PoE switch → injector. TP-Link TL-POE160S, done.
• Starting a managed switch upgrade → Brocade ICX-7250 used if you want budget/full-budget, UniFi USW-Pro-24-PoE if you want ecosystem integration, MikroTik CRS328 if you want RouterOS power.
• Running 802.3bt gear → check your switch supports Type 3 or Type 4 explicitly, not just “PoE++” marketing language.
• Long cable runs with high-draw devices → do the voltage drop math before you terminate the cable.
• Passive PoE legacy gear → keep it isolated from 802.3 infrastructure. Seriously.

Buy the switch with more budget than you think you need. Add up your device draws, multiply by 1.3, and make sure the switch handles it. You’ll add more devices. You always add more devices.

Your future self — the one who just mounted a fifth camera without pulling a new power circuit — will appreciate it.

Related Reading

• 10GbE NIC Cheat Sheet: Mellanox, Intel, Chelsio
• DIY Patch Panel and Rack Cabling for Sanity
• SFP+ Optics and DACs Without Getting Burned
• Used GPU Buying Guide for Home Lab LLMs
• 2.5GbE / 10GbE on a Budget