CCNA 200-301Chapter 38 of 260Objective 2.8

PoE Standards

Power over Ethernet (PoE) is a technology that allows network cables to carry electrical power to devices like IP phones, wireless access points, and security cameras, eliminating the need for separate power outlets. For the CCNA 200-301 exam, understanding PoE standards is essential because it appears under Network Access (Objective 2.8) and is a common real-world deployment consideration. Cisco exams test your knowledge of IEEE 802.3af, 802.3at, and 802.3bt standards, power budgets, and IOS verification commands. Mastering PoE ensures you can design and troubleshoot modern converged networks efficiently.

25 min read
Beginner
Updated May 31, 2026

The Power Strip Analogy

Imagine you're setting up a home entertainment center. You have a TV, a gaming console, a soundbar, and a streaming device—each needs both a signal (HDMI) and power (wall outlet). Without a power strip, you'd need four separate wall outlets, which is inconvenient and messy. A power strip consolidates power delivery from one wall outlet to multiple devices, but it has a total wattage limit (e.g., 1800W). If you plug in too many devices, the breaker trips.

Now, think of your switch as the power strip. Each port is like an outlet on the strip, and the switch's internal power supply is the wall outlet. The IEEE PoE standards define how much power each 'outlet' can provide: 802.3af (PoE) gives up to 15.4W per port, 802.3at (PoE+) gives up to 30W, and 802.3bt (PoE++) gives up to 60W or 100W. The switch has a total power budget (like the strip's 1800W limit). If you connect a device that requests more than the port's maximum, the switch denies power (like a device that draws too many amps). If the total power drawn exceeds the budget, the switch may shut down lower-priority ports (like unplugging the soundbar to keep the TV on).

Crucially, the negotiation process is like a handshake: the powered device (PD) sends a 'signature' (a 25kΩ resistor) to the power sourcing equipment (PSE, the switch), which detects it and then applies a low voltage to classify the PD's power class before delivering full power. This prevents damage to non-PoE devices. The analogy helps you remember that PoE is about managing limited power resources intelligently, not just sending electricity over Ethernet.

How It Actually Works

What is Power over Ethernet (PoE)?

Power over Ethernet (PoE) is a technology that enables Ethernet cables to carry both data and electrical power simultaneously. It was developed to simplify the deployment of network devices that require power, such as IP phones, wireless access points, and IP cameras, by eliminating the need for separate power cables and outlets. PoE is standardized by the IEEE under 802.3af (original PoE), 802.3at (PoE+), and 802.3bt (PoE++ or 4PPoE). Cisco also has proprietary implementations like Cisco Inline Power, but modern networks use IEEE standards.

How PoE Works at the Frame Level

PoE operates at the physical layer but involves a negotiation process before power is delivered. The process consists of four stages: Detection, Classification, Startup, and Operation.

#### Detection When a device is connected to a PoE-enabled port, the Power Sourcing Equipment (PSE) – typically a switch – sends a low-voltage signal (2.8V to 10V) to detect a valid Powered Device (PD). The PD must present a 25kΩ signature resistor (with a tolerance of ±5%) between the pairs. If the PSE detects this resistance, it proceeds; otherwise, it does not apply power, protecting non-PoE devices.

#### Classification After detection, the PSE applies a voltage between 15.5V and 20.5V to classify the PD's power requirements. The PD responds by drawing a specific current, which maps to a power class:

Class 0: 15.4W (default, unknown)

Class 1: 4.0W

Class 2: 7.0W

Class 3: 15.4W

Class 4: 30W (PoE+)

Class 5-6: 60W (PoE++ Type 3)

Class 7-8: 100W (PoE++ Type 4)

The classification is used by the PSE to allocate power budget. If the PD does not support classification, it defaults to Class 0.

#### Startup Once classification is complete, the PSE ramps up voltage to the nominal 48V DC (range 44-57V) within 400ms. The PD must present a load within 500ms to avoid power removal.

#### Operation During normal operation, the PSE continuously monitors the current draw. If the current drops below a minimum threshold (e.g., 5mA for 350ms), the PSE removes power (disconnect detection). This ensures safe disconnection when the PD is unplugged.

PoE Standards and Power Limits

IEEE 802.3af (PoE): Provides up to 15.4W per port at the PSE, with 12.95W guaranteed at the PD (due to cable loss). Uses two wire pairs (pairs 1/2 and 3/6).

IEEE 802.3at (PoE+): Provides up to 30W per port at the PSE, with 25.5W at the PD. Also uses two pairs, but with enhanced power management.

IEEE 802.3bt (PoE++ or 4PPoE): Type 3 provides up to 60W per port (51W at PD); Type 4 provides up to 100W (71W at PD). Uses all four wire pairs (pairs 1/2, 3/6, 4/5, 7/8). Backward compatible with 802.3af/at.

Power Budget and Management

Cisco switches have a total PoE power budget (e.g., 370W for a Catalyst 2960X-24PD-L). The switch allocates power per port based on classification or configured maximum. If the total requested power exceeds the budget, the switch may deny power to new devices or use a priority scheme (low, high, critical) to shed power from lower-priority ports.

IOS CLI Verification Commands

To verify PoE status on a Cisco switch, use the following commands:

Switch# show power inline

Sample output:

Available:370.0(w)  Used:52.0(w)  Remaining:318.0(w)
Interface Admin  Oper       Power   Device              Class Max
---------------------------------------------------------------------
Gi0/1    auto   on         15.4    IP Phone 7960        3     30.0
Gi0/2    auto   on         4.0     Cisco AIR-AP1131     1     30.0
Gi0/3    auto   off        0.0     n/a                  n/a   30.0
Switch# show power inline gigabitEthernet 0/1 detail

Provides detailed information including measured current, voltage, and power.

Switch# show power inline police

Displays power policing status (action when PD draws more than allocated).

Interaction with Other Features

PoE interacts with EtherChannel, VLANs, and QoS. For example, if a port is part of an EtherChannel, PoE configuration must be consistent across member ports. PoE also affects PoE devices that use LLDP-MED for advanced power negotiation (LLDP-MED can advertise power requirements up to 100W). Cisco switches support both legacy classification and LLDP-MED.

Key Timers and Defaults

Detection voltage: 2.8-10V

Classification voltage: 15.5-20.5V

Nominal voltage: 48V DC (44-57V)

Startup ramp time: <400ms

Disconnect detection: current <5mA for 350ms

Default port power allocation: 30W (for PoE+ capable ports)

Default power management mode: auto (port negotiates power; alternative is "static" which reserves full power)

Common Misconfigurations

Setting "power inline never" disables PoE entirely.

Using "power inline auto" is the default and allows negotiation.

Configuring "power inline static" reserves the maximum power even if not used, which can waste budget.

The command "power inline police" can be used to enforce a power limit and take action (e.g., shutdown) if a PD exceeds its class.

Walk-Through

1

Connect a PoE Device

Physically connect a powered device (e.g., IP phone, AP) to a PoE-enabled port on a Cisco switch using a standard Ethernet cable (Cat5e or better). The switch port must support PoE; check the switch model. For example, Cisco Catalyst 2960X-24PD-L has 24 PoE+ ports. Ensure the device is compatible with the PoE standard (802.3af/at/bt). The switch will automatically detect the device if PoE is enabled (default).

2

Verify PoE Detection

Use the command `show power inline` to check if the switch has detected the PD. Look for the "Oper" column: it should show "on" if powered. If it shows "off", the switch may not have detected a valid PD. Use `show power inline interface <interface> detail` to see the detection state (e.g., "searching", "delivering power"). The detection process involves the switch sending a low voltage and looking for a 25kΩ signature.

3

Check Power Classification

After detection, the switch classifies the PD. Use `show power inline` to see the "Class" column (0-4 for 802.3af/at, 5-8 for 802.3bt). For example, Class 1 indicates 4.0W, Class 3 indicates 15.4W, Class 4 indicates 30W. If the PD does not support classification, it shows Class 0 (unknown). The classification determines how much power the switch allocates from its budget.

4

Monitor Power Budget

Use `show power inline` to view the total available, used, and remaining power budget. For example, if the switch has a 370W budget and you have two devices using 15.4W each, remaining is 339.2W. If you connect a device that exceeds the remaining budget, the switch may deny power or drop a lower-priority device. The command `show power inline budget` shows per-port allocation.

5

Configure PoE Port Settings

To change PoE settings on an interface, enter interface configuration mode and use `power inline {auto | static | never}`. `auto` (default) allows negotiation. `static` reserves the maximum power (e.g., 30W) even if the device uses less. `never` disables PoE. Optionally, set a maximum power with `power inline max <watts>`. Example: ``` Switch(config)# interface gigabitEthernet 0/1 Switch(config-if)# power inline auto Switch(config-if)# power inline max 15.4 ```

6

Troubleshoot PoE Issues

If a device does not power on, check the following: 1) Is the port PoE-enabled? Use `show power inline` to verify. 2) Is the power budget exhausted? Check remaining watts. 3) Is the device compatible? Some legacy devices require Cisco Inline Power (pre-standard). 4) Check for errors: `show interfaces <interface> | include power`. 5) Use `debug power inline` for real-time debugging (caution: can be CPU-intensive). Common issue: a non-PoE device connected may cause the switch to attempt detection and fail, but no damage occurs.

What This Looks Like on the Job

In enterprise networks, PoE is almost ubiquitous for IP telephony, wireless, and surveillance. Consider a medium-sized office with 200 IP phones and 50 wireless access points (APs). Each IP phone consumes about 6.3W (Class 2) and each AP about 15.4W (Class 3). Total PoE requirement: (200*6.3) + (50*15.4) = 1260 + 770 = 2030W. A single Catalyst 9300-48P switch has a PoE budget of 1440W, so you would need two such switches to power all devices, or use PoE injectors for some APs. The network engineer must calculate the power budget carefully and possibly use power management features like power policing or priority to ensure critical devices (e.g., phones for emergency calls) stay powered.

Another scenario: deploying PoE++ for high-power devices like pan-tilt-zoom (PTZ) cameras or digital signage. These require up to 60W (Type 3) or 100W (Type 4). Not all switches support PoE++; you may need a dedicated PoE++ switch or use midspan injectors. Misconfiguration here can lead to insufficient power, causing devices to reboot or fail to operate. For example, if you connect a 60W camera to a switch that only provides 30W per port, the camera may not power up or may operate erratically.

A common real-world problem: when a switch's power budget is exceeded, it may shut down lower-priority ports. This can cause unexpected outages. Engineers configure priority using the power inline priority command (critical, high, low) to ensure essential devices remain powered. Also, monitoring with SNMP and syslog alerts on PoE status is standard practice. In large deployments, power budgeting is integrated into network management tools that track per-switch and per-port power consumption.

Finally, consider the impact of cable length. While PoE can theoretically work up to 100 meters, voltage drop increases with distance. For high-power PoE++ (100W), shorter cables or higher-gauge wires (e.g., Cat6a) are recommended to minimize loss. In practice, most enterprise cabling runs are under 90 meters, so this is rarely an issue, but it's a consideration for outdoor cameras or long runs.

How CCNA 200-301 Actually Tests This

The CCNA 200-301 exam objective 2.8 (Network Access) includes "Configure and verify Power over Ethernet (PoE)". The exam tests your ability to interpret show power inline output, understand the differences between PoE standards (802.3af vs 802.3at vs 802.3bt), and troubleshoot common PoE issues. You will NOT be asked to configure PoE from scratch likely, but you will need to identify misconfigurations and understand power budget calculations.

Common wrong answers and traps: 1. Confusing PoE standards: Many candidates think 802.3af provides 30W; it's actually 15.4W. 802.3at provides 30W. Remember: 'af' = 15W, 'at' = 30W (think 'a' for 'a little', 'a' for 'a lot'? Actually, 'at' is bigger because it has two letters? Not reliable; just memorize: af=15, at=30, bt=60/100. 2. Assuming all switch ports provide the same power: Some switches have different PoE capabilities per port; always check the datasheet. The exam may show a switch with a limited budget and ask which devices can be powered. 3. Misinterpreting 'auto' vs 'static': 'auto' allows negotiation and only allocates power as needed; 'static' reserves the maximum power. Candidates may think 'static' is more efficient, but it actually wastes budget. 4. Ignoring power policing: If a PD draws more than its class, the switch can shut down the port or log an error. The command power inline police enables this. Exam questions may test the default action (log only) vs configured action (shutdown). 5. Incorrectly calculating power budget: For example, a switch with 370W budget and 24 ports each at 15.4W max would theoretically need 369.6W, but the exam may ask if you can power all ports simultaneously. The answer is yes if all devices are Class 0 (15.4W), but if any device is Class 4 (30W), the budget is exceeded. Be careful with numbers.

Decision rule for scenario questions: First, identify the PoE standard required by the PD (check if it's 802.3af, at, or bt). Then, check the switch's per-port power capability and total budget. Use show power inline output to see available and used power. If the PD requires more than the port can provide, it won't power on. If the budget is insufficient, the switch may deny new devices or drop low-priority ones. Always consider the priority setting.

Specific values to memorize: - 802.3af: 15.4W PSE, 12.95W PD - 802.3at: 30W PSE, 25.5W PD - 802.3bt Type 3: 60W PSE, 51W PD - 802.3bt Type 4: 100W PSE, 71W PD - Detection signature: 25kΩ resistor - Nominal voltage: 48V DC - Disconnect detection: <5mA for 350ms

Key Takeaways

IEEE 802.3af (PoE) provides up to 15.4W per port; 802.3at (PoE+) provides up to 30W; 802.3bt (PoE++) provides up to 60W (Type 3) or 100W (Type 4).

PoE detection uses a 25kΩ signature resistor; classification maps to power classes 0-8.

Use 'show power inline' to view power budget and per-port status on Cisco switches.

The default PoE interface mode is 'auto' (negotiate); 'static' reserves full power; 'never' disables PoE.

Power policing (configurable with 'power inline police') can shut down a port if a PD draws more than allocated.

Cisco switches have a total PoE power budget; exceeding it may cause denial of new connections or port shutdown based on priority.

LLDP-MED can be used for advanced power negotiation beyond classification.

Easy to Mix Up

These come up on the exam all the time. Here's how to tell them apart.

IEEE 802.3af (PoE)

Max power per port: 15.4W

Power at PD: 12.95W

Wire pairs used: 2 (1/2, 3/6)

Power class: 0-3

Typical devices: basic IP phones, sensors

IEEE 802.3at (PoE+)

Max power per port: 30W

Power at PD: 25.5W

Wire pairs used: 2 (1/2, 3/6)

Power class: 0-4

Typical devices: advanced APs, PTZ cameras

Watch Out for These

Mistake

All PoE switches provide 30W per port.

Correct

Only 802.3at (PoE+) switches provide 30W per port. 802.3af provides 15.4W, and 802.3bt provides up to 100W. Always check the standard.

Candidates often assume 'PoE' means 30W because many modern switches support PoE+.

Mistake

PoE can power any device as long as it has an Ethernet port.

Correct

Only devices designed as Powered Devices (PDs) with the proper signature resistor can receive PoE. Non-PoE devices will not be damaged but will not receive power.

The detection mechanism prevents powering non-compliant devices, but some think it's universal.

Mistake

Setting 'power inline static' is more efficient because it reserves only the power needed.

Correct

'static' reserves the maximum power (e.g., 30W) regardless of actual consumption, which can waste budget. 'auto' allocates power based on classification, which is more efficient.

The word 'static' might imply fixed allocation, but many think it means 'exact'.

Mistake

If a PD draws more than its class, the switch automatically shuts down the port.

Correct

By default, the switch only logs an error and may continue supplying power. To enforce shutdown, you must configure 'power inline police' with the 'action errdisable' option.

Candidates assume protection is automatic, but Cisco defaults to logging only.

Do You Actually Know This?

Reveal each answer, then mark whether you got it right. Score 60%+ to unlock the next chapter.

Frequently Asked Questions

What is the difference between PoE, PoE+, and PoE++?

PoE (802.3af) provides up to 15.4W per port, PoE+ (802.3at) provides up to 30W, and PoE++ (802.3bt) provides up to 60W (Type 3) or 100W (Type 4). PoE++ uses all four wire pairs, while PoE and PoE+ use two. All are backward compatible. For the exam, remember the power numbers and that PoE++ is also called 4PPoE.

How do I check if a Cisco switch port is providing PoE?

Use 'show power inline' to see a summary of all PoE ports. Look for the 'Oper' column: 'on' means power is being delivered. For a specific port, use 'show power inline interface gigabitEthernet 0/1 detail' to see voltage, current, and power. Also 'show interfaces status' includes a 'PoE' column if enabled.

Can I use a non-PoE switch to power a PoE device?

No, a non-PoE switch does not provide power. You would need a PoE injector (midspan) between the switch and the device. The injector adds power to the Ethernet cable. Alternatively, use a PoE switch or a power adapter for the device.

What is the default PoE configuration on a Cisco switch?

The default is 'power inline auto' on all ports that support PoE. This enables automatic detection and power negotiation. The switch will allocate power based on the PD's classification. No additional configuration is needed for basic PoE operation.

What does 'power inline static' do?

It reserves the maximum configured power (default 30W) for that port, even if the PD uses less. This ensures the port always has power available but can waste budget. Use 'static' for critical devices that must never be denied power due to budget oversubscription.

How does LLDP-MED affect PoE?

LLDP-MED (Media Endpoint Discovery) allows PDs to advertise their exact power requirements (in watts) rather than just a class. This enables more precise power allocation. Cisco switches can use LLDP-MED to override classification. It is especially useful for PoE++ devices that need more than 30W.

What is the maximum cable length for PoE?

The IEEE standard specifies a maximum of 100 meters (328 feet) for the Ethernet segment, including patch cables. PoE works within this distance. For longer runs, you may need PoE extenders or fiber with media converters.

Terms Worth Knowing

Ready to put this to the test?

You've just covered PoE Standards — now see how well it sticks with free CCNA 200-301 practice questions. Full explanations included, no account needed.

Done with this chapter?