Copper cabling and PoE

Copper cabling, from patch panel to desk

I design copper cabling to last twenty years: the right category, the 100 m rule, routes across the floor, records that stay true, and tests that prove every link. This page teaches twisted pair from the basics up, with RJ45 (registered jack 45) pinouts, PoE (Power over Ethernet), coax and the other copper still found in buildings, and tools to try.

  • Twisted pair
  • Cat5e to Cat8
  • 100 m rule
  • RJ45 pinouts
  • Office floors
  • Patching records
  • Certification
  • PoE
  • Coax
Copper from the patch panel to every device A PoE switch patches through a patch panel. Three horizontal cables run from the panel to an access point in the ceiling, a desk outlet with a laptop and phone, and a camera. Data flows both ways on each cable, and power flows out to the access point, the phone and the camera. PoE switchaccess Patch panelCat6A jacks Access pointdata and power Desk outletlaptop and phone Cameradata and power 90 m at most one record per port
Live view · data and power on the same cable
Twisted pair

Copper that carries data because it is twisted

An Ethernet cable holds four pairs of thin copper wires, twisted together. The twist is not decoration: it is what lets a cable carry gigabits past power cables and fluorescent lights without the data turning to noise. Everything else on this page builds on that idea.

Why the pairs are twisted A sender drives a pair of wires with opposite signals, one in orange and its mirror in purple, along a twisted pair to a receiver. A power cable above the pair sends noise, shown in red, onto both wires equally. The receiver subtracts one wire from the other, so the signal doubles and the noise cancels. The twists keep both wires equally exposed along the run. One pair, two wires, opposite signals Power cable nearbynoise hits both wires Senderplus and minus Receiversubtracts wire A carries the signal wire B carries its mirror Noise lands equally on both wires, so it cancels when the receiver takes the difference. The twists keep both wires the same distance from the noise, along the whole run.

Swipe sideways to see the whole diagram.

Animation

Every pair carries the signal and its mirror. Noise from a power cable, a motor or a fluorescent fitting lands on both wires at once, so it cancels at the receiver. Each pair has a different twist rate, which keeps the pairs from coupling with each other.

Screened and unscreened cable

Twisting deals with most noise. Screens add more protection, but only when they are earthed properly at the patch panel. A screen that is not earthed can make things worse, because it acts as an aerial. I choose unscreened cable for most offices, and screened cable near heavy electrical noise or where alien crosstalk between bundled 10G links is a risk. The naming follows ISO/IEC 11801, the international cabling standard from ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission). The letters before the slash describe the overall screen, the letters after it describe each pair. U means unscreened, F means foil and S means braid, and TP is twisted pair. So U/UTP (unscreened twisted pair) has no screen at all.

NameOverall screenPair screenWhere it is used
U/UTPNoneNoneMost office cabling. Light, flexible and simple to terminate.
F/UTPFoil around all four pairsNoneCommon for Cat6A where noise or alien crosstalk is a concern. The foil must be earthed at the panel.
U/FTPNoneFoil around each pairGood pair to pair isolation. Often used for Cat6A in data centres and industrial sites.
S/FTPBraid around all four pairsFoil around each pairCat7 and Cat7A. Heavier and stiffer, with the best noise rejection.
SF/UTPBraid and foil togetherNoneOlder screened designs, still found in some industrial and broadcast cabling.

Solid, stranded and what to avoid

PartTypical conductorWhy it matters
Installed cable, Cat5e24 AWG (American wire gauge), solid copperSolid conductors keep their shape in an IDC (insulation displacement connector) and give the lowest loss.
Installed cable, Cat6 and Cat6A23 AWG, solid copperThicker copper means lower resistance, which helps PoE (Power over Ethernet) run cooler.
Patch cords24 to 26 AWG, strandedStranded copper survives bending. Thin 28 AWG cords save space but lose more signal, so they count for more length.
CCA (copper clad aluminium)Aluminium with a copper skinNot a recognised cable. It breaks when flexed, runs hot with PoE and fails certification. I reject it on site.

Gauges are typical. The datasheet for each cable is the source I design from.

Categories

Cat5e to Cat8, and which one to buy

Every cable is tested to a category, which sets the frequencies it must carry cleanly. TIA (the Telecommunications Industry Association) in North America calls them categories. ISO/IEC 11801, used in the UK and Europe, calls the installed link a class. The current TIA cabling standard for twisted pair is ANSI/TIA-568.2-E, approved by ANSI (the American National Standards Institute) and released in October 2024.

Cable categories by bandwidth Five horizontal bars compare bandwidth on a log scale: Cat5e at 100 MHz, Cat6 at 250 MHz and Cat6A at 500 MHz. Cat7 and 7A reach 1000 MHz and Cat8 2000 MHz, each with its ISO class. Choosing a category highlights its bar and shows the Ethernet speeds and distance it supports. Bandwidth of each category, on a log scale 100 MHz 250 MHz 500 MHz 1000 MHz 2000 MHz Cat5e Class D Cat6 Class E Cat6A Class EA Cat7 and 7A Class F, FA Cat8 Class I, II Cat5e: 1000BASE-T and 2.5GBASE-T, 100 m channel Cat6: 5GBASE-T, and 10GBASE-T to 37 m, up to 55 m with care Cat6A: 10GBASE-T, 100 m channel Cat7 and 7A: 10GBASE-T, no faster application, ISO only, not TIA Cat8: 25GBASE-T and 40GBASE-T, 30 m channel

Swipe sideways to see the whole diagram.

Cat5e, Class D, 100 MHz. Still the most installed cable in older offices. It carries 1000BASE-T to 100 m, and the IEEE (Institute of Electrical and Electronics Engineers) standard 802.3bz added in 2016 2.5GBASE-T and 5GBASE-T over existing Cat5e and Cat6, so newer access points can run faster on old cable. I test before I promise it.

Cat6, Class E, 250 MHz. Carries 1000BASE-T and 5GBASE-T to 100 m. For 10GBASE-T, TIA TSB-155 (a Telecommunications Systems Bulletin) says it should work to 37 m, may work from 37 to 55 m depending on alien crosstalk, and needs mitigation beyond that. I only rely on it after alien crosstalk testing.

Cat6A, Class EA, 500 MHz. The cable I specify for new buildings. It carries 10GBASE-T over the full 100 m channel, and TIA recommends Category 6A or better for new installations that deliver power, because thicker copper runs cooler in bundles.

Cat7 and Cat7A, Classes F and FA, 600 and 1000 MHz. ISO/IEC 11801 categories that TIA does not recognise. The standard called for GG45 or TERA connectors, but most products use RJ45, which limits them to Cat6A performance. No Ethernet application needs more, so I do not specify them for LAN (local area network) cabling.

Cat8, Classes I and II, 2000 MHz. Built for 25GBASE-T and 40GBASE-T (IEEE 802.3bq, 2016) over a 30 m channel, server to switch in a data centre. Cat8.1 (Class I) keeps the RJ45. Cat8.2 (Class II) uses TERA or GG45. In practice fibre and DAC (direct attach copper) cables won this space.

Animation
CategoryISO/IEC classBandwidthEthernet it carriesChannelWhere it is used
Cat5eClass D100 MHz1000BASE-T and 2.5GBASE-T; 5GBASE-T on many links, after testing100 mExisting offices
Cat6Class E250 MHz1000BASE-T to 5GBASE-T; 10GBASE-T to 37 m, or to 55 m after alien crosstalk testing100 mMany offices built in the last twenty years
Cat6AClass EA500 MHz10GBASE-T100 mNew buildings, access points, high power PoE
Cat7, Cat7AClass F, FA600, 1000 MHz10GBASE-T100 mSome European projects; ISO only
Cat8 (8.1 and 8.2)Class I, II2000 MHz25GBASE-T, 40GBASE-T30 mData centre server links, rarely chosen

Bandwidth is the frequency the cable is tested to, not its data rate. Ethernet squeezes several bits into each hertz with clever coding, which is why 10GBASE-T fits on a 500 MHz cable. Distances are for a channel built from parts of the same category.

Try it: which category does this link need?

Pick the speed, the length and the power. The answer gives the minimum that works and the cable I would specify for a new build.

Minimum that works
Cat6A
What I would install
Cat6A U/UTP

10GBASE-T over 70 m needs Cat6A: Cat6 is only dependable to 37 m. Up to 60 W of PoE also points to Cat6A, which TIA recommends for new links that carry power.

Connectors

RJ45, pin by pin, and why the order matters

The plug at the end of every Ethernet cable is an 8P8C connector, which everyone calls RJ45. The order of the eight wires follows one of two schemes in TIA-568, T568A or T568B. Get the order or the pairing wrong and a link may still light up, then fail at speed.

The RJ45 pinout, pin by pin An RJ45 plug seen from the contact side, pins 1 to 8 from left to right, with the wire colours for T568B or T568A. Further states show which pairs 10 and 100 Mb/s Ethernet use, how gigabit and faster use all four pairs in both directions, and which pairs carry power for PoE Alternatives A and B. 1 2 3 4 5 6 7 8 Clip at the back, contacts facing you, pin 1 on the left T568B T568A send receive on 3 and 6 both ways both ways both ways pair on 3 and 6, both ways A Alternative A: 1, 2 and 3, 6 B B Alternative B: 4, 5 and 7, 8

Swipe sideways to see the whole diagram.

T568B. The orange pair on pins 1 and 2, green on 3 and 6, blue on 4 and 5, brown on 7 and 8. Both schemes carry data equally well. What matters is that every outlet and panel on a site uses the same one.

T568A. The green and orange pairs swap places, so green is on 1 and 2 and orange on 3 and 6. A cable with T568A at one end and T568B at the other is a crossover. In structured cabling that is a fault, even though Auto MDI-X (automatic medium dependent interface crossover) ports would cope.

10 and 100 Mb/s. 10BASE-T and 100BASE-TX use two pairs: pins 1 and 2 send, 3 and 6 receive. The blue and brown pairs sit idle, which is why old installs sometimes shared one cable between two devices. I never do that today.

1 Gb/s and faster. 1000BASE-T, 2.5G, 5G and 10GBASE-T send on all four pairs, in both directions at once, with echo cancellation. Every pair must be correct. A cable that worked at 100 Mb/s with one bad pair fails at 1 Gb/s.

Which pairs carry power. Older PoE uses two pairs: Alternative A puts power on the data pairs 1, 2 and 3, 6, and Alternative B on the spare pairs 4, 5 and 7, 8. IEEE 802.3bt Types 3 and 4 use all four pairs, which halves the current in each pair and the heat.

Animation
PartWhat it isWhere I use it
8P8C plug (RJ45)Eight positions, eight contacts. RJ45 is the name everyone uses.Patch cords and device ends
Keystone jackA snap in socket terminated with an IDC punch down, rated to the cable categoryOutlets, floor boxes and modular patch panels
Punch down block (LSA or 110)IDC contacts on a panel or block. LSA is common in the UK and Europe, 110 in North AmericaPatch panel backs, voice frames
Field terminated plugA plug fitted on site straight onto installed cable, with no outletCameras and access points in ceilings, where TIA allows a modular plug terminated link
GG45 and TERAConnectors defined for Class F and Class II, with contacts placed apart to reduce crosstalkRare. I have not needed them for LAN work
Shielded RJ45A metal bodied plug or jack that continues the cable screen to the panel earthAll F/UTP and U/FTP links

Keep the twists to the contact

I untwist no more than the connector needs, usually a few millimetres. Untwisting more is the most common reason a link fails NEXT (near end crosstalk).

Same scheme everywhere

One site, one scheme. I write it in the cabling specification and check it in the test reports. A mix of T568A and T568B creates crossovers.

Rated parts as a system

Cable, jacks, panels and cords from one tested system, of the same category. A Cat6A cable on Cat6 jacks is a Cat6 link.

Try it: build a cable and read its wire map

Choose the scheme at each end and add a fault. The wire map is what a cable tester shows first.

Pin at AWirePin at B
1white orange1
2orange2
3white green3
4blue4
5white blue5
6green6
7white brown7
8brown8

Straight through: every pin lands on the same pin at the far end, and every pair stays together. This passes the wire map.

Office floor

From the comms room to every desk

Most of my copper work ends in an office: a comms room on each floor, a riser between floors, and a cable to every desk, access point and camera. The design is mostly about routes, space and rules, so the cabling outlasts the furniture plan.

From the floor comms room to the desk A floor comms room holds a PoE switch, a copper patch panel and a fibre panel that links up a riser to the main comms room. One horizontal cable runs under the raised floor to a floor box, then up to a desk with a laptop and an IP phone, with frames flowing both ways. Another runs through the ceiling tray to an access point that takes data and power on the same cable. Ceiling void and cable tray Raised floor Floor comms room PoE switchaccess layer Patch panelCat6A jacks Fibre panelbackbone riser fibre to the main comms room Access pointPoE powered Floor box Laptopdock IP phonePoE horizontal cable, 90 m at most one cable carries data and power

Swipe sideways to see the whole diagram.

Animation

Fibre climbs the riser between comms rooms. Copper takes over for the last 90 m: through the ceiling to access points and cameras, and under the floor or down a pole to each desk. Frames flow both ways, and the same cable carries power to the phone and the access point.

SpaceWhat it holdsCabling
Main comms room (equipment room)Core switches, carrier lines, servers or links to the data centreBackbone fibre to every floor
Floor comms room (telecommunications room)Access switches, patch panels and UPS (uninterruptible power supply)Horizontal copper to the floor, within 90 m
RiserA vertical route between floorsFibre, with copper only for short links
Ceiling and floor voidsTrays, baskets and floor boxesHorizontal cable to outlets, access points, cameras and sensors
Work areaDesks, meeting rooms, printers and displaysOutlets and cords

Outlets per desk

I plan two data outlets per desk as a typical baseline, plus outlets for every printer, display, access point and camera position. Spare outlets are cheap at installation and expensive later.

Containment

Cable sits in tray, basket or trunking, supported along its length, never laid on ceiling tiles. I follow the maker's minimum bend radius and leave room in the containment for the next tenant.

Separation from power

BS EN 50174-2, the British edition of the European standard (BS for British Standard, EN for European Norm), sets the gap between data and power cables. It depends on the cable's segregation class, from a to d, the type of containment and how many power circuits run alongside. Metal dividers reduce the gap, and crossings are at right angles.

Ceiling devices

Access points, cameras and sensors get their own outlets near the device, so a short cord connects them and a moved device does not mean a new cable.

Fire performance: the CPR in the UK

Since July 2017, cables installed permanently in buildings have been classed under the CPR (Construction Products Regulation) by how they behave in a fire. BS 6701, the UK standard for installing telecommunications cabling, sets a minimum of Cca, s1b, d2, a2 for new work. The extra codes rate smoke (s), flaming droplets (d) and acidity of the fumes (a). I also specify LSZH (low smoke zero halogen) sheaths inside buildings.

EuroclassReaction to fire, as the classes are usually describedWhere it fits
AcaNo reactionNon combustible cables. Rare for data
B1ca, B2caVery low and low reactionEscape routes and high risk buildings, where the fire strategy asks for it
CcaReduced reactionThe UK minimum under BS 6701, with s1b, d2 and a2
DcaImproved reactionBelow the UK minimum
EcaBasicBelow the UK minimum for permanent installation
FcaUndeterminedNever in a building

The building's fire strategy can ask for a better class than the minimum. I check it before ordering cable.

Patching and records

Patching that stays true for years

A cabling system is only as good as its records. When the schedule is right, a fault on desk 4B12 takes two minutes to trace. When it is wrong, it takes an afternoon. I treat the patching schedule like configuration: every change goes through it.

A patch change, done properly Six steps of a patch change from left to right: request, check the record, patch, test, label, and update and close. A marker moves along the steps, and a label under the flow shows an example for each step, from a request for the voice VLAN at a desk to the schedule being updated. Requestticket Look upschedule Patchpanel port Testspeed, VLAN Labelboth ends Updateand close Desk 4B12 needs the voice VLAN outlet 4B12 = panel TR4.PA port 12 panel port 12 to switch Gi1/0/12 link up at 1 Gb/s, VLAN 20, phone powered TR4.PA.12 on the panel and the outlet schedule updated, ticket closed The record changes in the same change as the cable. Otherwise it is wrong by Friday.

Swipe sideways to see the whole diagram.

Step 1
  1. Every patch change starts with a request, even a small one, so there is a trail. The request names the outlet, the device and what it needs, for example the voice VLAN (virtual LAN) for a new phone.

  2. I look up the outlet in the patching schedule to find its panel port, then check which switch ports are free and already set up for the VLAN. If the record and the floor disagree, I fix the record first.

  3. A cord of the right length runs from the panel port to the switch port, dressed into the cable managers. No long loops, no cords across the front of other equipment.

  4. I confirm the link speed, the VLAN and, for a phone or access point, that PoE has powered it. A quick check here saves a second visit.

  5. Both ends carry the same identifier. The outlet, the panel port and the cord all match the schedule.

  6. The schedule is updated before the ticket closes. That is the step that keeps the records true.

A patching schedule

OutletPanel portSwitch portVLANDeviceLast change
4B12TR4.PA.12TR4SW1 Gi1/0/1220 voice, 10 dataPhone and desktopCHG 2041
4B13TR4.PA.13TR4SW1 Gi1/0/1310 dataPCCHG 1987
4C01TR4.PB.01TR4SW2 Gi2/0/130 wirelessAccess pointCHG 2033
4C02TR4.PB.02not patchednoneSparenone

An example patching schedule with made up identifiers. In larger sites the same data lives in a DCIM (data centre infrastructure management) tool or NetBox, and the switch side comes from the network itself.

Labelling to a standard

TIA-606-D classScopeWhat I record
Class 1One equipment roomPanels, ports, cables and earthing
Class 2One building with several comms roomsClass 1, plus backbone cables and firestops
Class 3A campus of buildingsClass 2, plus buildings and campus cabling
Class 4Several sitesClass 3, plus sites and links between them

ANSI/TIA-606-D, published in 2021, is the current TIA standard for labelling and records.

My lab rack follows the same idea on a small scale: patch leads on one side, power on the other, so a trace or a change never means pulling cables across each other.

Rear of my lab rack: green patch leads run down the left side and power strips run down the right
The back of my lab rack. Green patch leads run down the left, power strips down the right, so data and power stay apart.

Colour by use

A typical scheme: blue for user data, green for voice, yellow for access points, red for security systems, grey for spares. The exact colours matter less than writing them down and sticking to them.

Length to fit

Cords sized to the gap, in 0.5 m steps. Short cords keep the front of the rack readable and the airflow clear.

One owner

One team owns the schedule. Anyone can request a change, but only one record is the truth.

Testing

How a link proves it is good before anyone plugs in

A cable that shows a link light is not a tested cable. New cabling is certified with a field tester that measures every pair across the full frequency range of its category, and the reports go into the handover. Here is what the tester measures, in the order it measures it.

What a cable certifier measures A main tester at the patch panel and a remote unit at the outlet are joined by a four pair cable. First the wire map ticks every wire. Then a pulse and its echo give the length, and a large signal arriving small shows insertion loss. Signal leaking into the next pair at the near end shows NEXT. A reflection from a bad joint shows return loss, and the last step gives a pass result. signal in what arrives leaks into the next pair untwisted joint reflects Main unitat the panel Remote unitat the outlet 8 of 8 wires in place, pairs intact length 72.4 m, from the round trip time insertion loss: worst pair 18.9 dB, limit 20.7 dB NEXT: worst margin 4.1 dB at 312 MHz return loss: worst margin 2.6 dB PASS: every test within its limit, with margin Figures are illustrative, for one Cat6A permanent link.

Swipe sideways to see the whole diagram.

Step 1
  1. The tester checks that all eight wires connect pin to pin, and that each pair stays together. Opens, shorts, reversed pairs, crossed pairs and split pairs all fail here, before any frequency test runs.

  2. A pulse goes down the cable and its echo comes back. With the NVP (nominal velocity of propagation) of the cable set in the tester, the round trip time gives the length. The limit is 90 m for a permanent link.

  3. The signal gets weaker along the cable, more at high frequencies, over long runs and in hot ceilings. The tester sweeps the full frequency range of the category and compares the loss to the limit at every point.

  4. NEXT (near end crosstalk) is signal from one pair leaking into another at the end where it is strongest. Poor termination is the usual cause. The tester also measures PS NEXT (power sum), the leak from all three other pairs together.

  5. Any change in impedance, such as a crushed cable or an untwisted joint, reflects some signal back to the sender. Too much reflection corrupts the data, especially at 1 Gb/s and above where pairs send both ways at once.

  6. Every measurement inside its limit is a pass. Some testers mark a result that passes by less than their own measurement accuracy with an asterisk. I treat a starred pass as a link to look at again before handover.

TestWhat it measuresWhat a fail usually means
Wire mapEach wire lands on the right pin and pairs stay togetherBad termination, crossed or split pairs
LengthPhysical length from the signal delayRuns over 90 m, cable coiled in the ceiling
Insertion lossSignal lost along the link, across the frequency rangeToo long, wrong cable, hot environment, thin cords
NEXT and PS NEXTCrosstalk between pairs at each endUntwisted pairs at the jack, mixed categories
ACR-F (attenuation to crosstalk ratio, far end) and PS ACR-FCrosstalk at the far end, compared with the signal that arrivesPoor cable or connectors
Return lossSignal reflected by impedance changesCrushed or kinked cable, poor terminations
Propagation delay and delay skewTime for the signal to arrive, and the spread between pairsMixed cable types in one link
DC (direct current) resistance and resistance unbalanceResistance of each wire, and the difference within and between pairsPoor contacts. It matters for PoE, and TIA-568.2-E now applies it to Cat5e, Cat6 and Cat6A
Alien crosstalk (PS ANEXT, PS AACR-F)Noise from neighbouring cables in a bundle10GBASE-T over Cat6, tightly bundled Cat6A

Three kinds of tester

TesterWhat it doesWhen I use it
CertifierMeasures every parameter against a standard limit, such as a Cat6A permanent link, and stores a report per linkHandover of new cabling, and the maker's warranty
QualifierProves a link can carry an application, such as 1000BASE-T, without full certificationMoves, adds and changes, and fault finding
VerifierChecks continuity and wire map onlyQuick checks while terminating

Every link, every time

I ask for 100 percent of links to be certified, with the reports in the handover pack. Sampling misses the one bad outlet under the chief executive's desk.

Reports I can read

Each report names the link, the standard limit, the cable NVP, the adapter type and the tester's calibration date. A pass against the wrong limit is not a pass.

The warranty

Most cabling makers offer a system warranty, typically 25 years, when certified installers use their parts throughout and submit test results. It is worth having, so I make it part of the specification.

PoE

Power and data on the same four pairs

PoE (Power over Ethernet) lets the switch power phones, access points, cameras and even lights through the data cable. It saves an electrician at every device, and it means one UPS in the comms room keeps the phones working in a power cut. It also turns the cable plant into a power system, with budgets and heat to plan.

How PoE decides to power a device A switch, the power source, is joined by one cable to an access point, the powered device. First the switch detects the device with a small test voltage. The device shows class 4, and power flows. Then the device asks for an exact wattage over LLDP, so the switch reserves less. Finally the switch watches the device, so power stops if it is unplugged. SwitchPSE, power source Access pointPD, powered device a few volts: is there a 25 kΩ signature resistor? the device shows its class, for example class 4 power on at around 50 V DC, up to the class limit LLDP: the device asks for exactly 18.4 W the switch checks the device still draws power Class 4: switch reserves up to 30 W Power flowing on two or four pairs Reservation cut from 30 W to 18.4 W Unplug it and the power stops Wattages are an example for one access point.

Swipe sideways to see the whole diagram.

Step 1
  1. Before sending real power, the switch puts a few volts on the pairs and looks for a 25 kΩ signature resistor in the device. A laptop or an old phone without one gets no power, so PoE is safe on any port.

  2. The device then shows its class, from 0 to 8. The class tells the switch the most power the device may draw, and the switch reserves that much from its budget.

  3. The switch turns on power at around 50 V DC, on two pairs for Types 1 and 2, or on four pairs for the higher classes of Types 3 and 4.

  4. Once the device boots it can ask for an exact figure over LLDP (Link Layer Discovery Protocol), or CDP (Cisco Discovery Protocol) on Cisco gear. The switch can then reserve less than the class maximum, which frees budget for more devices.

  5. The switch keeps checking that the device still draws a small current. When someone unplugs it, the power stops at once, so the bare cable is never left live.

In the standard the switch is the PSE (power sourcing equipment) and the phone, camera or access point is the PD (powered device). Four standards have raised the power over time, and each device announces a class that tells the switch how much to reserve.

StandardTypeClassesAt the switch (PSE)At the device (PD)Pairs
IEEE 802.3af (2003)Type 10 to 315.4 W12.95 WTwo
IEEE 802.3at (2009)Type 2430 W25.5 WTwo
IEEE 802.3bt (2018)Type 35 and 645 W and 60 W40 W and 51 WFour
IEEE 802.3bt (2018)Type 47 and 875 W and 90 W62 W and 71.3 WFour

Power at the device is lower than at the switch because some is lost as heat in the cable. Cisco UPOE (Universal Power over Ethernet) gives up to 60 W per port and UPOE+ up to 90 W, in line with Types 3 and 4.

What devices typically draw

DeviceClass, typicalNote
IP (Internet Protocol) phoneClass 1 to 3A colour screen and sidecar push it up
Wi-Fi 6 access pointClass 4Full features may need more on some models
Wi-Fi 6E and Wi-Fi 7 access pointsClass 4 to 6Check the datasheet: some run reduced radios on class 4
Fixed IP cameraClass 2 to 3Infrared lighting at night adds load
PTZ (pan, tilt, zoom) camera with heaterClass 5 to 8Outdoor units in winter draw the most
Thin client, small display, LED (light emitting diode) lightingClass 4 to 8Often the reason a switch runs out of budget

Typical ranges only. The device datasheet sets the class, and some devices change their features when they get less power than they ask for.

Heat in bundles

Power in a cable turns into heat, and a cable in the middle of a tight bundle cannot lose it. Hot cable has more insertion loss, so a link can pass at handover and fail in a warm ceiling with high power PoE. TIA TSB-184-A and Annex H of ANSI/TIA-568.2-E give the guidance I design to. Use Category 6A or better for new links that carry power, with a maximum ambient of 45 °C and cable rated to at least 60 °C. Keep 26 AWG and thinner cords out of conduit, and split large bundles rather than combing them into tight looms.

Try it: will this switch power everything?

A switch shares one PoE budget across all its ports. Enter the budget from the switch datasheet and the devices you plan to connect. The tool reserves the class maximum for each device, as a switch does before LLDP refines it.

Reserved by class
380.4 W
Share of the budget
51 percent
Ports drawing power
34

Fits with room to spare. I keep at least 20 percent of the budget free, so a power supply failure or a new access point does not leave ports dark.

PoE on a Catalyst switch

! Catalyst IOS XE: what each port is drawing and the budget left
show power inline
show power inline gigabitEthernet1/0/12 detail

! Fix the allocation for a device that does not report its needs well
interface gigabitEthernet1/0/12
 power inline static max 30000

! Turn PoE off on a port that should never supply it
interface gigabitEthernet1/0/24
 power inline never

! Let devices ask for an exact wattage over LLDP
lldp run

For the stage, a mixer and its stagebox link over shielded Cat5e; see my live sound page.

Coax

Coax for television, cameras, radio and broadcast video

Coaxial cable still runs through most buildings: television and satellite feeds, older CCTV (closed circuit television), antenna feeders and the SDI (serial digital interface) video cables in studios and event spaces. The key number is impedance, 75 Ω for video and TV, 50 Ω for radio, and parts from the two never mix.

Inside a coaxial cable A cross section of a coaxial cable shows the jacket, braid screen, foil screen, dielectric and centre conductor. A side view shows a signal travelling inside the screen. Choosing a type shows its impedance, connector and typical use: RG6 for TV and satellite, RG59 for CCTV, 50 ohm cable for radio and antennas, and SDI coax for video. jacket braid screen foil screen dielectric centre conductor the screen surrounds the signal on every side RG6Impedance: 75 ΩConnector: F connectorTV aerial and satellite distribution, and cable broadband (DOCSIS) RG59Impedance: 75 ΩConnector: BNCCCTV over coax, including high definition over coax systems such as HD-TVI and AHD RG58 and low loss feedersImpedance: 50 ΩConnector: BNC, N or SMARadio and antenna feeders, test leads, and old 10BASE2 Ethernet SDI video coaxImpedance: 75 ΩConnector: BNC, 75 ΩBroadcast video from 3G to 12G SDI between cameras and switchers

Swipe sideways to see the whole diagram.

RG6, 75 Ω. The cable behind television aerials, satellite dishes and cable broadband. It has a thicker centre conductor than RG59, so it loses less at the high frequencies satellite and DOCSIS (Data Over Cable Service Interface Specification) use. F connectors screw on and must be fitted with the right tool.

RG59, 75 Ω. Thinner and more flexible, the classic CCTV cable. High definition over coax systems such as HD-TVI (high definition transport video interface) and AHD (analogue high definition) let sites upgrade cameras without recabling. New installs I build as IP cameras on PoE instead.

50 Ω coax. Radio uses 50 Ω, so antenna feeders for Wi-Fi, cellular repeaters and two way radio are 50 Ω, often thick low loss types with N connectors. Never mix 50 Ω and 75 Ω parts in one run: the mismatch reflects signal.

SDI video coax, 75 Ω. SDI carries uncompressed video and embedded audio on a single coax with BNC connectors, and runs much further than HDMI (High Definition Multimedia Interface). The distances, converters and fibre options are on my live streaming page.

Animation
CableImpedanceConnectorTypical use
RG675 ΩF connectorTV aerial and satellite distribution, and cable broadband (DOCSIS)
RG5975 ΩBNCCCTV over coax, including high definition over coax systems such as HD-TVI and AHD
RG58 and low loss feeders50 ΩBNC, N or SMARadio and antenna feeders, test leads, and old 10BASE2 Ethernet
SDI video coax75 ΩBNC, 75 ΩBroadcast video from 3G to 12G SDI between cameras and switchers

Coax carries one signal on a centre conductor inside a screen. Twisted pair carries a balanced signal on a pair. Coax suits high frequencies and long video runs, and twisted pair suits Ethernet and power, which is why most new buildings use twisted pair for nearly everything and keep coax for TV, radio and broadcast video.

Video coax for SDI, and how far each grade reaches, is on my live streaming page.

Other copper

Console, voice, building and audio visual copper

Not every copper cable in a building carries Ethernet. Console cables, telephone pairs, building control buses and audio visual links all share the same routes, and they turn up in surveys and refits.

CableConnectorWhat it carriesWhat I watch for
Console cable (rollover)RJ45 to DB9 serial, or a USB (Universal Serial Bus) adapterOut of band access to Cisco routers and switches, at 9600 baud by defaultKept in every comms room. A console server gives remote access to every port
USB consoleUSB mini B or USB C on the deviceConsole on newer Catalyst switchesNeeds the right driver on the laptop
Telephone cable (CW1308)IDC blocks and BT style socketsAnalogue lines, alarm diallers and lift phonesThe UK is moving landlines to digital voice, so I check what still depends on copper lines
RS-485 twisted pairScrew terminalsBACnet MS/TP (master slave token passing) and Modbus RTU (remote terminal unit) in building systemsDaisy chained, with termination at each end of the bus
HDBaseT over Cat6ARJ45Video, audio, control and power to displays, up to 100 mMore on my audio visual (AV) over IP page
Balanced audioXLR and TRS (tip, ring, sleeve)Microphones and line level audioMore on my live sound page

Console access

A console port is the way in when the network is broken. My lab has a terminal server with console lines to every router and switch, so I can reach any device even when routing fails.

Building systems

Heating, lighting and access control often run on their own copper buses. When I bring them onto the IP network, I segment them as operational technology. More on my operational technology page.

Audio visual

Meeting rooms and event spaces mix twisted pair, coax and audio cable. Video over Cat6A needs the same care as 10G Ethernet: certified links and short, good quality cords.

Troubleshooting

Finding a cabling fault in minutes, not afternoons

Layer 1 faults are the first thing to rule out and often the last thing people check. I work along the link from the cheapest part to swap to the dearest to replace: cords first, then jacks, then the installed cable. Choose a symptom to see where it usually sits and how I prove it.

A copper link fault finder A copper link as a chain of seven parts: switch port, patch cord, panel jack, horizontal cable, outlet, desk cord and device. For each symptom, crosses mark the parts most likely at fault and a label names the check that proves it. The symptoms are no link light, a link stuck at 100 Mb/s, CRC errors, 10G drops on Cat6, a PoE device rebooting, drops when moved, the wrong network at a desk and a NEXT failure at handover. Switchport Patch cordfront Panel jackback Cablehorizontal Outletjack Desk cordwork area DevicePC or AP swap cords, then a wire map show interfaces status shows a 100 show interfaces counters errors length over 37 m, alien crosstalk show power inline wiggle test, then replace show mac address-table interface tester crosstalk locator Choose a symptom: the crosses show where the fault usually is. No link light 100 Mb/s, not 1 Gb/s CRC errors rising 10G drops on Cat6 PoE device reboots Drops when moved Wrong network at a desk Fails NEXT at handover

Swipe sideways to see the whole diagram.

No link light. I start at the cheap end: swap both cords, then check the port is up with show interfaces status. If it is not disabled and still dark, a verifier on the permanent link finds the open wire. A patch to the wrong panel port is common, so I check the schedule too.

Link up at 100 Mb/s instead of 1 Gb/s. Fast Ethernet needs two pairs, gigabit needs four. When one wire in the blue or brown pair is open, many devices fall back to 100 Mb/s instead of failing. A wire map finds it, and a re termination fixes it.

CRC (cyclic redundancy check) errors rising. Frames arrive damaged. I compare the counters over a few minutes. Usual causes are a damaged cord, a poor termination or cable run tight against power. Late collisions instead point to a duplex mismatch, which is a setting, not a cable.

10G links drop on Cat6. Beyond 37 m, Cat6 only carries 10GBASE-T if alien crosstalk from the neighbouring cables is low enough. The fix is a Cat6A link, or letting a multigigabit port settle at 5 Gb/s, which Cat6 carries to 100 m.

A PoE device keeps rebooting. I check show power inline for the budget and the class the device asked for. A switch out of budget, a device that needs more than its class, or resistance in a poor joint can all drop power. Hot bundles make the last one worse.

The link drops when someone moves the desk. Nearly always the desk cord or the outlet jack: a broken clip, a crushed cord or a loose termination. I replace the cord first, then re terminate the jack, and fit cords with enough slack and strain relief.

A desk lands on the wrong network. The cable is fine, the patch or the port is wrong. I find the device MAC (media access control) address on the switch, check that port's VLAN, and compare with the schedule. Then I fix the patch and the record in the same change.

A new link fails NEXT at certification. The tester's crosstalk analysis shows the distance to the problem, and it is almost always at a jack where the pairs were untwisted too far. Re terminating that end fixes it. I watch the first few terminations of every installer for this.

Animation

The commands I use first

! Catalyst IOS XE: port state, speed and duplex for every port
show interfaces status

! Errors on one port, and the counters across the switch
show interfaces gigabitEthernet1/0/12
show interfaces counters errors

! Built in cable test: distance to an open or short, pair by pair.
! The link drops while it runs, so I warn the user first.
test cable-diagnostics tdr interface gigabitEthernet1/0/12
show cable-diagnostics tdr interface gigabitEthernet1/0/12

! Which device is on the port, and on which VLAN
show mac address-table interface gigabitEthernet1/0/12
show lldp neighbors gigabitEthernet1/0/12 detail

! PoE budget and per port draw
show power inline

The switch tells me a lot before I pick up a tester: whether the link is up, at what speed, with what errors, and where an open wire is. The general method I use for any fault is on my troubleshooting page, and every acronym here is in the glossary.

Projects

Where I use it

Copper is the layer every project stands on, from my own rack to data centre builds. These are the places it has mattered most.

Home lab · ongoing

A 42U rack, patched by hand

My lab rack holds Cisco 2811 routers, 3750 and 3560G switches and HP servers, all patched by hand. The 3750 PoE access switches at each site serve the IP phones. See the rack.

Fibre and Copper Cabling · trained

Structured cabling training

Training in fibre and copper structured cabling, which I use when I specify, review and accept cabling designs and test results.

2e2 · 2011 to 2013

A data centre from an empty shell

The £25M Network Rail data centre build, covering structured cabling, building management systems and mechanical and electrical integration.

XIDA · 2021 to 2024

Structured cabling pathways

Prepared data centre infrastructure for high performance workloads: rack allocation, structured cabling pathways and deployment coordination.

EMW Construct · 2017 to 2018

Multi site LAN for construction

LAN, WAN (wide area network) and cloud for multi site real estate and construction, with BACnet/IP building automation and IoT (internet of things) sensor networks.

JJ Food Wholesale · 2007 to 2011

LAN and VoIP across the group

LAN, WAN, VoIP (voice over IP), virtualisation and security across the group, including the warehouse and cold chain systems at the food depots.

Backed by my Fibre and Copper Cabling training, and CCNA (Cisco Certified Network Associate) and CCNP (Cisco Certified Network Professional) Routing and Switching. Fibre has its own page: fibre optics. See all credentials