Skip to content
[menu]

FOUNDRYNETNo. 001SEPTEMBER 2026SWITCHING

Original page: foundrynet.com/convergednetworks/ (converged networks solution overview, around 2005)

Power over Ethernet: 802.3af, 802.3at and 802.3bt Budgets

Power over Ethernet delivers DC power and data over the same twisted-pair cable so phones, access points and cameras need no local mains. The switch power budget, not the port count, decides how many you can run.

On this pageThe standards and their wattagePD classes and negotiationAlternative A and Alternative BPower budget mathConverged networks: voice, data and wireless on one switchPlanning checklistQuestions

01 /The standards and their wattage

The gap between port and device figures is cable loss over 100 m of Category 5e or better.
StandardNamePower at PSE portPower at PDPairs
IEEE 802.3af (2003)PoE, Type 115.4 W12.95 W2 pairs
IEEE 802.3at (2009)PoE+, Type 230 W25.5 W2 pairs
IEEE 802.3bt (2018)Type 360 W51 W4 pairs
IEEE 802.3bt (2018)Type 490 W71.3 W4 pairs

Before the standard, vendors shipped proprietary inline power that detected only their own IP phones. Any switch sold as 802.3af or later performs a resistive detection (a 25 kilohm signature) before applying voltage, so plugging a non-PoE device into a PoE port is safe.

02 /PD classes and negotiation

After detection the switch classifies the powered device (PD). Under 802.3af and 802.3at the PD presents a current signature mapping to class 0 through 4, and the switch reserves the class maximum: class 1 is 4 W, class 2 is 7 W, class 3 (and class 0) 15.4 W, class 4 30 W. 802.3bt adds classes 5 through 8 for 45, 60, 75 and 90 W. LLDP-MED can refine the allocation after link-up: a class 3 phone can report it needs only 6 W and return the rest to the budget.

Per-port reservation by PD classPER-PORT RESERVATION BY PD CLASSClass 14 WClass 27 WClass 315.4 WClass 4 (PoE+)30 WClass 6 (bt)60 WClass 8 (bt)90 W
Switches reserve by class unless LLDP negotiation lowers the figure.

03 /Alternative A and Alternative B

Category 5 cable has four pairs; 10BASE-T and 100BASE-TX use two for data. Alternative A injects power as a common-mode voltage on the data pairs (pins 1-2 and 3-6) through the centre taps of the magnetics. Alternative B uses the spare pairs (4-5 and 7-8). A compliant PD accepts either; the PSE chooses. Gigabit links use all four pairs for data, which is why 802.3bt, needing more current, powers all four at once, and why passive injectors built for Alternative B break gigabit links.

04 /Power budget math

The datasheet number that matters is the PoE power budget, the total the internal supply can deliver to ports. A 48-port PoE+ switch with a 370 W budget cannot run 48 class 4 devices (1440 W). It can run 24 at 15.4 W, or 12 at 30 W, or a mix. Switches allocate by class in port order or by configured priority and refuse the port that would exceed the budget.

RULE OF THUMB

Budget on class, not on measured draw. A phone drawing 5 W still reserves 15.4 W unless LLDP renegotiates it. Sum the class maximums of everything you intend to plug in, add 20 percent for growth, and pick the switch or the second power supply that covers it.

Heat follows power: a loaded PoE switch dissipates its conversion losses in the closet, so cooling and UPS runtime need checking. Many outages blamed on flaky PoE were closets that ran out of budget when more devices were added.

05 /Converged networks: voice, data and wireless on one switch

PoE enabled the converged network pitch of the early 2000s: retire the PBX and its separate cabling, run IP phones and wireless access points from the same switched infrastructure as the PCs, powered by the switch and backed by the same UPS. Foundry marketed a converged networks solution set around its FastIron Edge PoE switches for IP telephony and its IronPoint access points. The same argument now covers cameras, badge readers and building controls.

Convergence needs two Layer 2 features alongside power. A voice VLAN keeps phones in their own VLAN while the PC behind the phone stays in the data VLAN on the same dual-mode port. QoS marks voice packets with DSCP EF (46) and places them in a strict-priority queue on uplinks so a file transfer cannot delay them; 802.1p class of service 5 does the same job at Layer 2. Pair it with 802.1X multi-auth so phone and PC authenticate separately.

Illustrative IronWare PoE and voice port shape
interface ethernet 1/1
 inline power
 inline power power-by-class 3
 dual-mode 20
 voice-vlan 30
!
show inline power

06 /Planning checklist

  • Inventory devices by PoE class, not by count; note which need 802.3at or 802.3bt.
  • Sum class maximums per closet; compare against the switch budget with a second power supply if offered.
  • Confirm cabling is Category 5e or better and under 100 m; poor cable raises losses.
  • Verify LLDP-MED is enabled so phones and access points negotiate power and voice VLAN.
  • Set port PoE priority so phones and access points outlive cameras and displays in a budget squeeze.
  • Size the UPS for the added load, check closet cooling, and monitor budget use over SNMP with an alert at 80 percent.

07 /Questions

Can I plug a non-PoE device into a PoE port?

Yes. Standards-based switches apply power only after detecting a valid PD signature resistance, so a laptop or an old printer never receives voltage. Passive PoE injectors are not standards-based, skip detection and can damage equipment.

Why does my 48-port PoE switch stop powering devices after about 24?

The power budget is exhausted. Many 48-port models ship with roughly 370 W, enough for 24 class 3 devices at 15.4 W. Check the reserved wattage per port, enable LLDP-MED so devices reserve less, or add the second power supply.

Does PoE work over 100 m?

Standards assume up to 100 m of Category 5e or better and specify the PD figure after that loss. Beyond 100 m data fails before power does. Poor terminations and thin patch cords increase resistance and can starve high-power devices.

What is the difference between PoE, PoE+ and PoE++?

PoE (802.3af) gives 15.4 W per port, PoE+ (802.3at) 30 W, and PoE++ is a marketing label for 802.3bt Type 3 (60 W) or Type 4 (90 W). Higher types are backward compatible with lower-class devices.

Do I need a separate voice VLAN?

It is strongly recommended. A voice VLAN separates phone signalling and media from PC traffic on the same port, allows QoS marking to be trusted from phones only, and keeps the phone subnet stable while the data VLAN changes.

Sources

  • IEEE Std 802.3af-2003, DTE Power via MDI
  • IEEE Std 802.3at-2009, DTE Power Enhancements (PoE+)
  • IEEE Std 802.3bt-2018, Physical Layer and Management Parameters for Power over Ethernet over 4 Pairs
  • IETF RFC 4594, Configuration Guidelines for DiffServ Service Classes, 2006
  • Foundry Networks, converged networks and IP telephony solution pages, FastIron Edge PoE materials (original Foundry documentation, historical, around 2004 to 2007)