Most outdoor CCTV failures I see in the field are not camera failures. They are switch failures: a PoE port that drops out at 70°C inside a sun-loaded pole cabinet, a condensation-damaged board in a trackside enclosure, or a power budget that looked fine on paper until the PTZ heaters switched on in January.
This guide covers how to specify an industrial PoE switch for outdoor CCTV so it survives the site, not just the datasheet. We cover temperature range, PoE standards and power budgeting, the real difference between IP30, IP40 and IP67, and what EN50155 does and does not require.
1. Start With the Installation Location, Not the Port Count
Three installation scenarios account for most outdoor CCTV deployments, and each puts different stress on the switch:
- Cabinet-mounted (DIN rail): The switch sits inside a roadside or perimeter cabinet. Environmental protection comes mainly from the cabinet, but internal temperatures can run well above ambient.
- Pole-mounted: A small enclosure or the switch itself is fixed to a lighting or camera pole. Solar load, wind-driven rain and vibration are all constant.
- Trackside or wayside: Switches sit near rail lines, tunnels or platforms, with vibration, dust, brake particulates and washdown or heavy rain exposure.
Decide which of these you are in before comparing models. It determines the IP rating, mounting style and connector type you actually need.
2. Operating Temperature: Why -40°C to +75°C Matters
Commercial-grade switches are typically rated 0°C to 40°C or 0°C to 50°C. That is fine in an air-conditioned wiring closet. It is not fine on a pole in Harbin in January or in a sealed steel cabinet in Dubai in July.
An industrial switch rated for -40°C to +75°C gives you margin on both ends:
- Cold start: At -40°C, capacitors and power stages must still start and deliver PoE without a warm-up period. This matters for unattended sites that restart after a power cut.
- Cabinet heat soak: A closed cabinet in direct sun can run 20°C to 30°C above ambient air. A switch rated to +75°C keeps working where a +60°C or +70°C unit would throttle or fail.
- Full-load PoE: A PoE switch generates its own heat, and more PoE load means more heat. Always check that the full PoE budget is available across the stated temperature range, not only at 25°C. If the datasheet is silent on this, ask the manufacturer for the derating data.
Use the rated range as a minimum. If your site's recorded extremes are -35°C and 55°C ambient, a -40°C to +75°C switch inside a cabinet gives you a sensible safety margin. A switch rated to +60°C does not.
3. PoE Standards: 802.3af, 802.3at and 802.3bt in Practice
The IEEE standards define how much power the switch (PSE) can deliver and how much a camera (PD) can actually draw after cable loss:
| Standard | Common name | Max. PSE port power | Typical outdoor CCTV use |
|---|---|---|---|
| IEEE 802.3af | PoE (Type 1) | 15.4 W | Fixed bullet and dome cameras, small IR units |
| IEEE 802.3at | PoE+ (Type 2) | 30 W | Cameras with IR illuminators and heaters, PTZ dome cameras |
| IEEE 802.3bt | PoE++ (Type 3 / Type 4) | 60 W / 90 W | Heavy PTZ cameras with wipers and heaters, multi-sensor cameras, outdoor Wi-Fi access points |
A switch that supports IEEE 802.3af/at/bt on its PoE ports lets you mix camera generations on one switch. That matters in real projects, where you rarely install a single camera model across 10 years.
Per-port power vs. total power budget
This is the mistake that causes the most field callbacks. A switch with four 802.3bt ports does not necessarily deliver 90 W on all four at once. The total PoE budget is a separate figure. Four 90 W ports with a 180 W total budget can only power two 90 W loads at full draw.
Work it out like this:
- List the maximum draw of each camera, including heater, IR and wiper operation, not the idle figure.
- Add the cable loss allowance. On a long run near 100 m, power at the PD is noticeably lower than at the PSE.
- Sum the loads and add 15% to 20% headroom.
- Compare against the total PoE budget at your highest operating temperature.
For a pole carrying one PTZ camera and one auxiliary AP, a single 802.3bt port plus one 802.3at port is usually enough. For a perimeter cabinet feeding eight fixed cameras at roughly 12 W each, you need a budget of at least 100 W with headroom, so check that figure against your supply voltage and temperature range.
4. IP30, IP40 and IP67: What the Ratings Mean Outdoors
IP ratings come from IEC 60529. The first digit covers solids, the second covers liquids. The three ratings you will see on industrial switches are very different in practice.
IP30
Protected against solid objects larger than 2.5 mm, with no protection against water. This is the typical rating for DIN-rail switches with a metal case and open ventilation-free design. It is a cabinet rating. Never install an IP30 switch where water can reach it. In a roadside cabinet with a proper gasketed door, it is fine. On an open pole bracket, it is not.
IP40
Protected against solid objects larger than 1 mm, again with no water protection. IP40 is only marginally better than IP30 for dust, and the second digit is still zero. Do not read IP40 as "better for outdoors." It is still a cabinet-class rating, suited to a clean, dry, enclosed location such as a control room or a sealed telecom cabinet.
IP67
Dust-tight (first digit 6) and protected against temporary immersion in water, typically up to 1 m for 30 minutes (second digit 7). This is the rating for switches mounted directly outside: on a pole, on a trackside wall, in a tunnel niche or under a platform canopy where rain, washdown or flooding is possible.
An IP67 rating only holds if the cabling matches it. That means sealed connectors, such as M12 connectors with a waterproof coupling, and proper cable glands. A sealed housing with unsealed RJ45 ports is not IP67 in the field. When you evaluate a unit, check how the rating is achieved at the connectors and what condition the test assumed.
Which one do you need?
- Inside a gasketed roadside or perimeter cabinet: IP30 or IP40 DIN-rail switch, provided the cabinet itself provides weather protection and thermal management.
- Directly on a pole, wall or trackside with no cabinet: IP67.
- Tunnel or underpass with washdown or condensation: IP67, with M12 connectors.
One cost note: an IP67 switch can eliminate the cabinet, glands, heater and thermostat at remote poles. Compare the full installed cost, not just the switch price.
5. EN50155 Does Not Mandate IP67
This is a common misunderstanding in rail procurement, so it is worth stating clearly: EN50155 certification does not require an IP67 rating.
EN50155 is the standard for electronic equipment used on rolling stock. It covers operating temperature classes, supply voltage variations and interruptions, insulation, and, together with EN 61373, shock and vibration. It does not set a mandatory ingress protection level. The required IP rating depends on where the equipment is mounted: an interior passenger saloon rack, an equipment cabinet, or an exposed underframe location.
So an EN50155 switch might be IP40 and perfectly suitable for an interior cabinet, or IP67 for an underframe or trackside location. Seeing "EN50155" on a datasheet tells you the switch was designed for railway conditions. It does not tell you it is waterproof.
When you specify for railway CCTV, check three things independently:
- The EN50155 temperature class and the EN 61373 shock and vibration category.
- The IP rating, matched to the mounting location.
- The connector type. M12 is the standard answer for vibration-prone rolling stock and trackside installations because RJ45 can loosen over time.
6. Power Input, Isolation and Surge Protection
Outdoor CCTV lines are long, exposed and attract surges. When comparing models, check:
- Wide DC input range. Industrial sites run on 12 V, 24 V or 48 V systems. A switch that accepts your site voltage directly avoids an extra converter. Note that 802.3bt ports need a sufficiently high input voltage to deliver full power, so confirm the input range against the PoE rating.
- Redundant power inputs. Dual inputs let you feed from a mains PSU and a battery or solar controller, which matters at remote poles.
- Surge and EFT protection. Long outdoor Ethernet runs act as antennas for induced surges. Look for stated surge and EFT immunity levels and ask for the test standard referenced.
- Redundancy protocols. For ring topologies along a perimeter or rail line, ERPS or RSTP lets the ring recover after a cable cut.
7. Managed or Unmanaged?
Unmanaged switches are cheaper and fine for small, isolated groups of cameras. For a perimeter, campus, or trackside system with more than a handful of cameras, use a managed switch. You get VLANs to separate camera traffic, IGMP snooping for multicast video, per-port PoE control (to remotely power-cycle a frozen camera), and monitoring that tells you which port has failed before someone drives out to the site.
8. Selection Checklist
- Confirm the mounting location: cabinet, pole or trackside.
- Choose IP30/IP40 for enclosed cabinets, IP67 for exposed locations.
- Require -40°C to +75°C operation, and confirm PoE output at the upper temperature limit.
- Match PoE standard (802.3af/at/bt) to the highest-draw camera, then check the total power budget with 15% to 20% headroom.
- Match the input voltage range to the site power system, and add a redundant input where possible.
- Check surge immunity, and use M12 connectors in vibration-prone installations.
- Verify EN50155 and EN 61373 only where the project is railway-related, and check IP rating separately.
FAQ
What temperature range should an outdoor CCTV PoE switch support?
-40°C to +75°C is the practical industrial range. It covers cold-climate starts and heat soak inside sealed cabinets. Verify that full PoE output is available at the upper limit.
What is the difference between IP30, IP40 and IP67?
IP30 and IP40 protect against solid objects (over 2.5 mm and over 1 mm respectively) but not water. IP67 is dust-tight and withstands temporary immersion up to 1 m.
Can I install an IP30 switch outdoors?
Only inside a weatherproof, gasketed cabinet. IP30 has no water protection, so it must not be exposed to rain, spray or condensation directly.
Does EN50155 require IP67?
No. EN50155 covers temperature, supply voltage, and, with EN 61373, shock and vibration for rolling stock electronics. The IP rating depends on the mounting location.
Which PoE standard do outdoor PTZ cameras need?
Many PTZ cameras with heaters and wipers need 802.3at (30 W) or 802.3bt (60 W to 90 W). Check the camera's maximum draw, not its idle consumption.
How do I check whether a switch has enough PoE budget?
Add the maximum draw of every connected device, add cable loss, and include 15% to 20% headroom. Compare the total with the switch's overall PoE budget, not the per-port rating.
