PoE Switch Buying Guide for IP Camera Installations
The PoE switch is the single most under-spec'd component in a professional IP camera installation.
Cameras get the spotlight, VMS servers get the budget, and the switch gets whatever is on the shelf. Then the site calls back three months later with random camera dropouts, corrupted recordings, and PTZs that reboot every night at 2 a.m.
Almost every one of those calls traces back to a switch that was wrong for the job — not broken, just wrong.
This guide walks through how NorthStar sizes PoE switches for real surveillance deployments, so your next install racks clean and stays online. Once the switch is sized, use our NVR storage and bandwidth sizing guide to size the recorder behind it.
Start with the load, not the port count
"How many ports do I need?" is the wrong first question. The right one is:
How many watts of PoE do I need to deliver — continuously, at the far end of the longest cable run, on the hottest day of the year?
A 24-port switch with a 190W PoE budget cannot power 24 modern 4K cameras. It can barely power 12. Sizing by port count is how installers end up with under-powered switches that pass a bench test and fail a summer afternoon.
Build a real power budget
For every camera on the switch, capture:
- Peak draw, not idle — a bullet with an IR array and heater can pull 25W+ in cold weather while idling at 6W.
- PoE class (Class 3, 4, 6, 8) — the switch reserves budget based on the class the camera advertises, not what it actually uses.
- Cable length — a 90m run loses meaningful power to copper resistance, especially on CCA cable (which you should not be using anyway).
Add 20–30% headroom on top of the total. A switch running at 95% of its PoE budget is a switch that will trip a port the first time three cameras hit their heaters simultaneously.
Match the PoE standard to the camera
| Standard | Max per port | Typical use |
|---|---|---|
| PoE (802.3af) | 15.4W | Legacy fixed cameras, IP phones |
| PoE+ (802.3at) | 30W | Most modern IP cameras, small PTZs, IP horn speakers |
| PoE++ / 4PPoE (802.3bt Type 3) | 60W | Larger PTZs, multi-sensor cameras, heated enclosures |
| PoE++ (802.3bt Type 4) | 90W | Pan-tilt-zoom with wiper + heater, high-power access control |
If the camera spec sheet says "PoE+ required," a plain 802.3af switch will negotiate down and the camera will boot in a degraded state — no IR, no heater, no analytics. It looks fine on the bench and fails at night in the field.
When in doubt, spec 802.3bt (PoE++) on the outdoor runs. The cost delta is small and it covers you when the customer swaps a fixed camera for a PTZ two years from now.
Managed vs. unmanaged — pick managed
Unmanaged switches are fine for a home network. On a surveillance job they cost you every troubleshooting hour they save at install.
A managed switch gives you:
- VLAN segmentation — cameras on their own VLAN, isolated from the customer's business LAN. This is table stakes for cyber-insurance and for any customer with an IT department.
- Per-port PoE control — remote reboot a hung camera without a truck roll.
- Loop protection / storm control — one miswired patch cable does not take the whole site down.
- SNMP + syslog — the VMS server or a monitoring platform can see the switch and alert on link flaps before the customer notices.
NorthStar stocks managed PoE switches sized for typical 8, 16, 24, and 48-camera builds, all with the features above.
Uplinks are not optional
A 24-port gigabit switch with a single gigabit uplink is a bottleneck waiting to happen. Twenty-four 4K cameras streaming at 8 Mbps each is ~200 Mbps sustained — plus VMS live view, plus playback, plus backup. One gigabit uplink handles it until someone scrubs three cameras in playback and everything else stutters.
Rules of thumb:
- Any switch feeding a VMS server should have at least a 10G SFP+ uplink.
- Aggregation switches between edge switches and the server should be 10G, full stop.
- Fiber uplinks on any run longer than 90m or between buildings — copper between buildings invites lightning damage.
When to reach for a PoE injector instead
A single 90W PTZ hanging off an otherwise-small install does not justify a PoE++ switch. A dedicated PoE injector delivers the full 60W or 90W on that one run without inflating the switch budget for every other port.
Injectors are also the right answer when:
- The existing switch is customer-owned and cannot be replaced.
- The run is longer than 100m and needs a mid-span PoE extender.
- The camera is on a temporary or remote site fed by a cellular router with limited built-in PoE.
Environmental and physical spec
Surveillance switches often sit in unconditioned spaces — IDF closets without HVAC, wall-mount enclosures in warehouses, outdoor cabinets on construction sites. That means:
- Operating temperature range matters. Consumer switches spec 0–40°C. Industrial and surveillance-grade switches run -40 to 75°C.
- Fan noise matters inside occupied buildings. Fanless designs exist up to ~24 ports at moderate PoE budgets.
- Redundant power inputs matter on any site with a UPS or backup battery — dual DC inputs let the switch ride through utility failures without rebooting every camera.
Common mistakes we see on service calls
- Under-budgeted PoE — the #1 cause of random camera reboots.
- Passive PoE injectors on 802.3at cameras — burns ports, sometimes burns cameras.
- CCA (copper-clad aluminum) cable — fails PoE++ current, fails Fluke certification, fails the customer.
- No VLAN separation — cameras on the corporate LAN is a cyber-insurance denial waiting to happen.
- Daisy-chained unmanaged switches — one bad port and the whole run goes down with no visibility.
Recommended NorthStar components
- Managed PoE Switches — 8 to 48-port models with real PoE++ budgets and 10G uplinks.
- PoE Injectors — single-port 60W/90W injectors for high-draw cameras.
- IP Cameras — matched to the switch spec so you know the load up front.
- Custom VMS Servers — sized around the same camera count and retention.
- Cellular Router Kits — for remote or temporary sites.
The one-page checklist
Before you order a switch for a camera job, confirm:
- Total PoE watts (peak, not idle) + 25% headroom.
- Highest-draw camera fits within a single port's PoE class.
- Uplink bandwidth ≥ 2× total sustained camera bitrate.
- Managed, with VLAN + per-port PoE control + SNMP.
- Operating temperature range matches the install environment.
- Fiber uplink for any run over 90m or between buildings.
Get those six right and the switch stops being the reason the site calls you back.
Need help sizing a switch for a specific camera list? Send us the BOM and we'll spec the PoE switch, injectors, and VMS server to match — no guesswork, no undersized boxes.
Frequently asked questions
How many watts of PoE do I need for an IP camera system?
Add up the peak draw of every camera (not the idle draw), include heaters and IR arrays, and add 25 to 30 percent headroom. A 24-camera 4K system with heated bullets commonly needs a switch with a 400W+ PoE budget, not the 190W that a typical 24-port switch ships with.
What is the difference between PoE, PoE+, and PoE++?
PoE (802.3af) delivers up to 15.4W per port and covers legacy fixed cameras. PoE+ (802.3at) delivers up to 30W and covers most modern IP cameras and small PTZs. PoE++ (802.3bt) delivers up to 60W (Type 3) or 90W (Type 4) and is required for large PTZs, multi-sensor cameras, and heated enclosures.
Do I need a managed PoE switch for security cameras?
Yes, on any professional install. A managed switch gives you VLAN segmentation to isolate cameras from the customer LAN, per-port PoE control to reboot hung cameras remotely, loop and storm protection, and SNMP/syslog so the VMS or a monitoring platform can alert on link failures before the customer notices.
When should I use a PoE injector instead of a bigger switch?
Use a dedicated PoE injector when only one or two cameras need PoE++ and the rest of the site is fine on a smaller switch, when the existing switch is customer-owned and cannot be replaced, or when a run is over 100 meters and needs a mid-span PoE extender.
What uplink speed does a PoE camera switch need?
Any switch feeding a VMS server should have at least a 10G SFP+ uplink. As a rule of thumb, plan for uplink bandwidth of at least two times the sustained camera bitrate on the switch so live view, playback, and backup can run concurrently without stuttering.