PoE Standards Explained: 802.3af vs 802.3at vs 802.3bt

Power over Ethernet (PoE) lets a single Ethernet cable carry both network data and DC power. For anyone speccing a PoE switch, an injector, an IP camera, a wireless access point, a VoIP phone or a building-automation device, the PoE standard is the detail that decides two things: how much power the device actually receives, and whether your equipment will work together at all.

• 802.3af (PoE) powers low-draw devices, up to 15.4 W at the switch port.
• 802.3at (PoE+) covers mid-power devices, up to 30 W per port.
• 802.3bt (PoE++, also called 4PPoE) handles high-power devices through Type 3 and Type 4 power levels, up to 90 W per port.

Which one you need comes down to three numbers working together: the maximum power your powered device draws, the per-port output of your switch or injector, and the total PoE budget shared across all ports. Get any one of those wrong and devices boot in a degraded mode, drop offline under load, or never power on.

802.3af vs 802.3at vs 802.3bt

If you only read one section, read this one. The table below is the fastest way to match a standard to a power class and a typical workload.

Two figures appear for every standard for a reason: the power leaving the switch (PSE) is higher than the power reaching the device (PD), because some is lost as heat in the copper. When you compare devices, the PD column is the one that matters. Power values are defined by the IEEE 802.3af, 802.3at and 802.3bt standards; the class structure and the 71.3 W PD ceiling for Type 4 follow the Ethernet Alliance PoE Certification Program, which tests products for interoperability against those clauses.

What Are PoE Standards?

PoE stands for Power over Ethernet: the same twisted-pair cable carries data and DC power to a connected device. That is useful wherever a separate AC outlet would be awkward or expensive, such as a ceiling, an exterior wall, a gate, or a camera pole. You can see the breadth of where PoE is used in real installations, from surveillance to wireless coverage to smart-building endpoints.

Every PoE link has two roles:

• Power Sourcing Equipment (PSE) supplies the power. This is usually a PoE switch or a PoE injector.
• Powered Device (PD) receives it. Common PDs include IP cameras, wireless access points, VoIP phones, access-control readers, intercoms, sensors and some thin clients.

The point that trips people up: the wattage printed on a switch port is the PSE output, not what arrives at the device. After cable loss, a 30 W PoE+ port delivers about 25.5 W to the PD. That gap is exactly why PoE standards publish both numbers.

PoE Classes: How Type 1–4 Maps to Class 0–8

Type and class are related but different. The Type (1 to 4) tells you which standard generation applies. The class (0 to 8) is how the PSE and PD negotiate just enough power, so a low-draw device does not reserve a full port's worth of budget. PoE classes are defined across eight levels tied to the standards as follows.

Why this matters in practice: classification is what lets a 24-port switch with a modest total budget power a mix of class-2 cameras and class-4 access points without exhausting itself. The switch allocates each port to its negotiated class rather than reserving maximum power everywhere. When you size a system, plan around the class each device actually requests, not the highest number the port could theoretically supply.

802.3af PoE: Best for Low-Power Devices

IEEE 802.3af is the original mainstream standard, supplying up to 15.4 W from the source and roughly 12.95 W at the device. It comfortably covers VoIP phones, fixed indoor IP cameras, simple access-control readers, low-power sensors and basic access points.

Where 802.3af runs out of room is the moment a device adds a power-hungry feature. A plain desk phone is fine on 802.3af, but the same model with a video screen or a USB charging port may need PoE+. Likewise, an indoor fixed camera works on 802.3af, but add a heater, infrared illuminators or a motor and the budget is gone. As a rule of thumb for installers: if a device has a screen, a heater, a motor or more than one radio, assume it has outgrown 802.3af.

802.3at PoE+: The Practical Baseline for Modern Networks

IEEE 802.3at, or PoE+, roughly doubles usable power versus 802.3af and has become the sensible default for new deployments. The reason is concrete rather than aspirational: most current access points, video access-control readers and higher-resolution cameras now draw more than 802.3af can safely deliver, so PoE+ gives the headroom that keeps those devices from running underpowered.

PoE+ is well matched to dual-band and Wi-Fi 6 access points, security cameras with richer feature sets, video phones, and access-control panels. It still has a ceiling, though. Some high-end Wi-Fi 6E and Wi-Fi 7 access points, outdoor PTZ cameras, larger displays and certain building devices need 802.3bt to reach full performance. The amount of power varies by model and feature mode, so for a new switch purchase that has to last several refresh cycles, confirm whether the access points on your roadmap disable radios or USB ports when run on PoE+.

802.3bt PoE++ (4PPoE): Type 3 vs Type 4

IEEE 802.3bt is the high-power standard, marketed as PoE++, 4PPoE or 4-pair PoE. It exists for devices that simply need more than 802.3at can provide, and it comes in two levels:

• Type 3 supplies up to 60 W at the source and about 51 W at the device.
• Type 4 supplies up to 90 W at the source and about 71.3 W at the device.

The defining change is that 802.3bt powers across all four twisted pairs, where earlier PoE used two. Spreading the current over four pairs is what makes the higher wattage practical and reduces the heating that two-pair delivery would otherwise cause at these power levels. That is also the origin of the "4-pair PoE" name.

Typical 802.3bt loads include multi-radio and high-end wireless access points, PTZ cameras, outdoor devices with heaters, LED lighting, smart-building controls, digital signage, thin clients and industrial IoT gateways. One warning for switch buyers: if a device specifies 802.3bt, do not assume a PoE+ switch will quietly cope. The device may power on but disable features, reboot when load peaks, or behave erratically rather than failing cleanly.

PoE, PoE+, PoE++ and Vendor Naming

Naming is where most confusion starts. The standards are IEEE 802.3af, 802.3at and 802.3bt, but product pages reach for marketing labels: PoE, PoE+, PoE++, 4PPoE, Ultra PoE, High-Power PoE, UPOE and similar vendor terms. These are not applied consistently. One manufacturer's "PoE++" is 60 W Type 3; another's is 90 W Type 4. Some proprietary schemes do not behave exactly like standards-based PoE at all, which is precisely the problem the Ethernet Alliance PoE Certification Program was created to solve by labelling products that interoperate with the IEEE standard.

For purchasing decisions, ignore the marketing name and confirm these seven details instead:

• IEEE standard: 802.3af, 802.3at or 802.3bt
• PoE type: Type 1, 2, 3 or 4
• Per-port power output
• Total switch PoE budget
• The powered device's input requirement
• Cable category and installation conditions
• Whether the device expects active PoE or passive PoE

Active PoE vs Passive PoE

Active PoE is standards-based PoE. Before applying full power, the source runs a handshake to confirm a real PoE device is connected. Cisco describes how that detection and classification step works, including the signature resistance the PSE looks for so it never energizes a non-PoE device by mistake.

Passive PoE skips that negotiation and simply puts a fixed voltage, such as 24 V, 48 V or 54 V, onto the cable. Because there is no handshake, passive PoE is not automatically compatible with standards-based IEEE PoE, and connecting a passive source to the wrong device can damage it. The safe engineering rule is narrow: unless the device datasheet explicitly states it accepts passive PoE at that exact voltage and pinout, do not connect it to a passive source.

Mode A vs Mode B and Powered Pairs

PoE can deliver power on different wire pairs inside the cable. Mode A sends power on the pairs that also carry data; Mode B uses the spare pairs in 10/100 Ethernet. With standards-based active PoE you rarely choose a mode by hand, because a compliant PD is designed to accept power from a compliant source either way.

Where Mode A and Mode B still matter is the messy middle: reading injector specifications, troubleshooting older two-pair equipment, and working with passive PoE, where polarity and pinout are not negotiated for you. On modern gigabit links all four pairs carry data, and 802.3bt uses all four for power as well, which is another reason it is called 4-pair PoE. Mistakes here usually show up as a device that powers from a switch but not from a particular injector, which is a mode or pinout mismatch rather than a faulty device.

How to Calculate Your PoE Power Budget

A switch with many PoE ports cannot necessarily deliver maximum power on all of them at once. The total PoE budget is a separate, smaller number than "ports × max watts," and it is the figure that determines how many real devices you can run.

A workable sizing formula is:

Required PoE budget ≈ (sum of all device power draws) × (1 + headroom)

Use 20–30% headroom to absorb inrush at power-up, future ports, and thermal derating in warm racks. Two worked examples make the difference clear.

Example A, undersized: a 16-port PoE+ switch rated at a 150 W total budget, feeding eight access points at 18 W each. Demand is 8 × 18 = 144 W against a 150 W budget, which is only about 4% spare. If those APs spike at startup, the switch may deny power to some ports or trigger reboots.

Example B, sized with headroom: the same eight 18 W APs planned at 25% headroom need 144 × 1.25 = 180 W, so you specify a switch with at least a 180 W PoE budget and 802.3at-capable ports.

A simple procurement worksheet: list every PD and its rated draw, add them up, multiply by 1.2–1.3, then confirm both the total budget and the per-port type on the switch you are choosing as your network switch. The total budget and the per-port rating are two independent checks; passing one does not guarantee the other.

How to Choose the Right PoE Standard

A repeatable way to choose, in order:

• Device maximum draw. Start at the PD datasheet and find the exact standard and worst-case wattage. "Supports PoE" is not enough; you need the type and the number.
• Per-port rating. Confirm each port can supply that device's class. An 802.3af port will not satisfy an 802.3at camera, and an 802.3at port can leave an 802.3bt access point in a reduced mode.
• Total budget. Add up every device and apply the headroom from the section above.
• Cable condition. Account for run length, cable category and bundle density, which matter more as power rises.
• Feature modes. Check whether the device needs more power to enable heaters, extra radios or USB ports.
• Future expansion. Leave room for the next refresh so you are not re-cabling in two years.

One more boundary worth stating plainly: passive PoE and active IEEE PoE are not interchangeable. If a device requires 24 V passive PoE, a normal 802.3af/at switch will not power it; if a device expects standard active PoE, a passive injector can be unsafe. When the two worlds meet, follow the power source the device manufacturer recommends.

PoE Standard vs Device Type

A practical starting point by device class. Treat it as a first cut, then confirm against the specific model, because a single product line can span two standards depending on options.

PoE Distance, Cable Category and Heat

Standards-based PoE follows the same 100-metre channel limit as the data it rides on. Within that span, cable quality drives how much power survives the run: longer or thinner cable loses more to resistance, so high-power links are more sensitive to it than low-power ones.

For basic low-power devices, ordinary structured cabling is straightforward, and most installs already meet the requirement. For 802.3bt at 60 W or 90 W, conductor gauge, cable category and the size of the bundle start to matter, because higher current means more heat, and heat is worst in the middle of a large, tightly packed bundle inside a conduit. This is where the Ethernet cable categories from Cat5e to Cat8 become a real design choice rather than a default. Cat5e can carry PoE, including higher-power PoE on short, well-ventilated runs, but for dense high-power deployments a heavier-gauge category such as shielded Cat6A cabling gives more thermal margin and headroom.

On high-density 802.3bt projects, plan bundle sizes deliberately and follow the relevant cabling standards and local code; you can also manage cable bundle temperatures with looser bundling, better airflow and, where appropriate, cable rated for limited-power use. The temperature rise in a bundle is a function of total current and how the cable is installed, not of any single link.

Common PoE Compatibility Mistakes

• Assuming PoE+ is always enough. Many devices are fine on PoE+, but modern PTZ cameras, multi-radio access points and smart-building gear can require 802.3bt.
• Counting ports, not budget. A 24-port switch may still have a limited total budget. Add up the real combined demand before you trust the port count.
• Confusing PSE power with PD power. A 30 W PoE+ port does not put 30 W into the device. Compare against the PD-side rating.
• Using passive PoE without checking voltage. Passive PoE must match the device voltage and pinout; the wrong combination can destroy equipment.
• Ignoring feature-based power. A device can run on PoE+ yet need PoE++ to switch on every radio, and a camera that is happy in mild weather may demand more when its heater kicks in.

Real-World PoE Selection Examples

Twelve Wi-Fi 6 access points. Each AP peaks near 22 W, so device demand is 12 × 22 = 264 W. With 25% headroom that is 330 W, so you choose an 802.3at switch with at least a 330 W PoE budget. Before ordering, confirm none of the APs need 802.3bt to enable a second 5 GHz or 6 GHz radio; if any do, move those ports to a Type 3 switch. The same discipline applies when selecting a wireless access point in the first place.

Eight outdoor PTZ cameras with heaters and IR. These combine a motor, illuminators and a heater that only draws in the cold, so worst-case power is well above PoE+. Specify 802.3bt Type 3 or Type 4 per the camera datasheet, and size the budget against the heater-on figure, not the mild-weather figure.

VoIP phone rollout. Standard handsets are low-power, so a basic 802.3af switch is usually enough. If the phones add video screens or USB ports, verify whether they cross into PoE+ before you commit to af-only hardware.

Smart building and lighting. LED fixtures, occupancy sensors, access control and automation devices have widely different appetites. For these projects, set both the per-port requirement and the total switch budget early in the design, because retrofitting capacity after the cabling is in place is the expensive option.

Conclusion

Choosing a PoE standard is really a matching exercise, not a guessing game. Read the device's required type and worst-case wattage, confirm the port can supply that class, add up the total budget with headroom, and check the cable can carry the power over the distance involved. 802.3af handles simple low-power endpoints, 802.3at is the practical baseline for most current networks, and 802.3bt powers the demanding gear: high-end access points, PTZ cameras, lighting and building automation.

The single habit that prevents most field problems is designing around the device's actual power requirement and a realistic budget, rather than the port count on the switch or the marketing name on the box.