Buying & comparison
PoE Switch: Unmanaged vs Managed vs UniFi
A source-backed guide to choosing a PoE switch for home cameras or a NAS network — sizing the total PoE budget, VLANs for camera isolation, and 2.5/10GbE uplinks.
Who this is for
A PoE switch powers and connects your cameras (and often your access points) over one cable — but the spec sheet hides the two things that actually matter: the total PoE budget, and whether it can put cameras on their own VLAN. This guide compares the three tiers on those, with sourced specs. Size the power draw with the PoE budget calculator, and pair it with the camera-VLAN isolation runbook and the PoE camera selection criteria.
Bottom line
Size the total PoE budget first — a switch with eight 30W ports rarely has 240W to give, so the shared budget (not the port count) decides how many cameras you can power. Then pick the tier: an unmanaged PoE+ switch for a simple flat-LAN setup, a smart-managed switch with VLANs for the camera-isolation sweet spot most homes want, or a prosumer managed switch (UniFi/MikroTik) when you need 2.5/10GbE uplinks to a NAS and on-switch routing. If you have several cameras, the managed tier is the one to buy — it's what lets you keep cameras off the rest of your network.
How to choose
- Size the total PoE budget first (the #1 mistake)
- The switch's overall PoE wattage is shared across all ports and is the real ceiling — a switch can list eight 30W PoE+ ports yet only deliver ~123W total. Add up each camera's real draw plus headroom, then pick a switch whose total budget exceeds it. Use the PoE budget calculator.
- Managed (VLAN) vs unmanaged — camera isolation
- Only a managed switch supports 802.1Q VLANs and port isolation, which let you put cameras on their own segment so a compromised or cloud-phoning camera can't reach your NAS or PCs. Unmanaged switches force a flat LAN. See isolate cameras on a VLAN.
- PoE standard your cameras need
- Most fixed cameras are 802.3af (Type 1, ~13W delivered); PTZ, IR-heavy, or heated cameras push into 802.3at/PoE+ (~30W source); only specialty loads need 802.3bt/PoE++ (60–90W). Match the switch's per-port and total capacity to the mix.
- Uplink speed and cooling
- 1GbE uplinks are fine for a few cameras; 2.5/10GbE uplinks matter when aggregating many cameras or feeding a NAS/NVR. Fanless switches are silent for living spaces but have less thermal headroom; larger PoE switches are usually actively cooled.
The options
Model names are representative of each tier (SKUs rotate by region — verify the live page); vendor PoE-budget figures are lab values, so leave headroom.
Unmanaged PoE+ switch
TP-Link / NetgearPlug-and-play power-and-data for a handful of cameras with zero configuration and no VLANs — the cheapest, often-silent option for a flat LAN.
Best for
A simple 1–4 camera setup or a couple of access points where the cameras can share the same LAN as everything else and you never want to log into a switch.
Watch-outs
No VLANs, no QoS, no UI, no per-port PoE visibility — so you can't isolate cameras and can't see which port is drawing what. Uplinks are typically 1GbE only, which can bottleneck NAS/NVR aggregation.
| Spec | Value | Verification |
|---|---|---|
| PoE standard / per-port | 802.3af/at (PoE/PoE+), up to 30W per port. | Manufacturer-confirmedsource |
| Total PoE budget (the real ceiling) | Shared across all ports — e.g. ~123W total can't run eight 30W loads (240W) at once. Size the budget, not the port count. | Manufacturer-confirmedsource |
| Management / VLANs | None — no 802.1Q VLANs, QoS, or UI; cameras share the flat LAN with everything else (can't be isolated). | Manufacturer-confirmedsource |
| Uplinks | Typically 1GbE only (often a single combo SFP) — can bottleneck NAS/NVR aggregation. | Manufacturer-confirmedsource |
| Cooling | Often fanless and silent (good for living spaces), with less thermal headroom under sustained full PoE load. | Manufacturer-confirmedsource |
| PoE standards reference | 802.3af sources ~15.4W / delivers ~12.95W (cable loss); 802.3at ~30W source; 802.3bt 60W (Type 3) to ~90W (Type 4). | Manufacturer-confirmedsource |
Smart-managed PoE+ switch (VLANs)
TP-Link Omada / NetgearThe camera-isolation sweet spot: 802.1Q VLANs, QoS, and a management UI at a SOHO price, so cameras live on their own segment away from the rest of the LAN.
Best for
A home operator with several cameras and a few APs who wants to isolate cameras on a VLAN, see per-port PoE draw, and apply QoS/ACLs — without a full prosumer ecosystem.
Watch-outs
Total PoE budget still gates camera count (e.g. ~150W across eight PoE+ ports). Uplinks on this class are usually 1GbE SFP, not multi-gig. Often has a fan (audible in a quiet room), and it's L2/L2+ — a separate router/firewall typically does inter-VLAN routing.
| Spec | Value | Verification |
|---|---|---|
| VLANs / camera isolation | 802.1Q VLANs (up to 4K), MAC/protocol/voice VLAN, and port isolation — put cameras on a dedicated segment instead of the flat LAN. | Manufacturer-confirmedsource |
| Total PoE budget | e.g. ~150W shared across eight PoE+ ports (8 × 30W = 240W would exceed it) — size the budget first. | Manufacturer-confirmedsource |
| QoS / LAG / management | 802.1p/DSCP QoS, 802.3ad LACP link aggregation, ACLs, 802.1X, DHCP snooping; managed via an SDN controller/app or local web GUI. | Manufacturer-confirmedsource |
| Uplinks | Usually 2× 1GbE SFP on this class — no 2.5/10G; step up a tier if NAS aggregation needs multi-gig. | Manufacturer-confirmedsource |
| PoE standard / per-port | 802.3af/at (PoE+), up to 30W per port. | Manufacturer-confirmedsource |
| Cooling / routing | Often has one fan (audible in a quiet room); L2/L2+ (not full inter-VLAN L3 routing — a router handles that). | Manufacturer-confirmedsource |
Prosumer managed PoE (UniFi / MikroTik)
Ubiquiti / MikroTikOne management plane with Layer-3 routing, 2.5GbE PoE++ ports, and 10G SFP+ uplinks — for converging cameras, a NAS, and APs with multi-gig throughput.
Best for
A home-lab operator who wants multi-gig uplinks to a NAS, on-switch inter-VLAN routing, PoE++ headroom for higher-power devices, and a single ecosystem managing switch + APs + cameras.
Watch-outs
Usable PoE budget (e.g. 180W) is separate from the total power supply (e.g. 210W) and still caps camera count. UniFi expects its controller for full management (ecosystem lock-in); confirm fanless vs active cooling per exact model. MikroTik is the cheaper L2/L3 alternative but RouterOS/SwOS has a steeper learning curve.
| Spec | Value | Verification |
|---|---|---|
| Uplinks / multi-gig | 2.5GbE PoE++ ports plus 2× 10G SFP+ uplinks (e.g. UniFi USW-Pro-Max-16) — the NAS-aggregation path the lower tiers lack. | Manufacturer-confirmedsource |
| Usable PoE budget vs supply | e.g. 180W usable PoE, distinct from the 210W power supply — the usable figure is what gates how many cameras you can power. | Manufacturer-confirmedsource |
| Layer 3 / VLANs | On-switch Layer-3 inter-VLAN routing, ~1000 VLANs, LACP, port isolation, and ACLs — full camera isolation plus routing on the box. | Manufacturer-confirmedsource |
| PoE++ headroom | PoE++ (802.3bt) on select ports for higher-power cameras/APs — by PSE roughly PoE 15.4W / PoE+ ~32W / PoE++ ~64W per port. | Manufacturer-confirmedsource |
| Ecosystem / management | A single management plane (UniFi controller) across switch, APs, and cameras — at the cost of ecosystem lock-in. | Manufacturer-confirmedsource |
| Value L2/L3 alternative (MikroTik) | MikroTik CRS328: 24× gigabit 802.3af/at PoE + 4× 10G SFP+, ~450W total PoE, dual-boot SwOS/RouterOS — more PoE and 10G per dollar, steeper config. | Manufacturer-confirmedsource |
Pick by use case
A simple 1–4 camera setup on a flat LAN, plug-and-play and silent
→ Unmanaged PoE+ switch. Cheapest and often fanless; if you don't need VLAN isolation or per-port visibility, there's nothing to configure.
Several cameras you want isolated on their own VLAN (most home setups)
→ Smart-managed PoE+ switch (VLANs). It adds 802.1Q VLANs and port isolation so cameras can't reach your NAS/PCs, plus QoS and per-port PoE visibility — the recommended sweet spot.
A home-lab that needs 2.5/10GbE uplinks to a NAS and on-switch routing
→ Prosumer managed PoE (UniFi / MikroTik). Multi-gig uplinks, Layer-3 inter-VLAN routing, PoE++ headroom, and one management plane across switch/APs/cameras.
You want the most PoE and 10G per dollar and are comfortable with deeper config
→ Prosumer managed PoE (UniFi / MikroTik). A MikroTik CRS gives a large PoE budget and 10G SFP+ uplinks with L2/L3 at lower cost — trading polish for a steeper RouterOS/SwOS learning curve.
Run the numbers
Turn the decision into a calculation before you buy — size the capacity, the backup, and the UPS for your exact setup.
PoE budget calculator
Check whether one switch can power all your cameras using delivered watts and the total PoE budget, with the 80% rule and headroom for IR and heater spikes.
Camera bandwidth calculator
Add up main and substream bitrates to size your NVR uplink, see what share of a 1/2.5/10GbE link the cameras use, and avoid saturating the network.
Related runbooks
How we verified this guide
2026-06-17 · Reviewed by HomeTechOps. Verified against TP-Link, Ubiquiti, MikroTik, and Netgear spec pages plus Cisco's PoE standards page on 2026-06-17. The 'size the total PoE budget first' rule and the source-vs-delivered watt figures (802.3af ~15.4W source / ~12.95W delivered) are sourced; model names are representative (SKUs rotate by region — verify the live page) and vendor PoE-budget numbers are lab figures, so leave headroom. UniFi fanless status is model-specific (labeled researched). No prices are listed; we link out.
Source-backed checks
HomeTechOps turns official docs and conservative safety rules into a shorter runbook. These links are the source trail for the page direction.