Passive PoE and active PoE look identical from the outside — same cable, same connectors — but the difference matters a lot and using the wrong type can damage your equipment. This isn’t a theoretical risk. Plugging the wrong passive injector into the wrong device has destroyed network hardware. Understanding the distinction before you buy is basic due diligence for anyone deploying PoE in a network environment.
What Is Active PoE?
Active PoE refers to Power over Ethernet implementations that follow IEEE standards — specifically 802.3af, 802.3at, and 802.3bt. The defining characteristic is negotiation: before delivering any power, the switch or injector communicates with the connected device to confirm it is PoE-capable and to determine how much power it needs.
This negotiation happens via a detection and classification process on the cable before power is applied. The powered device (PD) presents a specific resistance signature that the power sourcing equipment (PSE) reads. If the signature is correct, the PSE classifies the device into a power class and delivers the appropriate voltage — 48V DC in all IEEE PoE standards — at a current matched to the power class.
The practical result: an 802.3af device plugged into an 802.3at injector will negotiate correctly and draw only what it needs. A non-PoE device plugged into an active PoE port will not present the correct detection signature, and the PSE will withhold power entirely. The data link still functions; only the power is withheld. This is why active PoE is considered safe — you cannot accidentally power something that shouldn’t be powered.
The three main active PoE standards and their power delivery:
- 802.3af (PoE): Up to 15.4W at the PSE, 12.95W at the device after cable loss
- 802.3at (PoE+): Up to 30W at the PSE, 25.5W at the device
- 802.3bt (PoE++): Up to 60W (Type 3) or 90W (Type 4) at the PSE
What Is Passive PoE?
Passive PoE delivers voltage onto the Ethernet cable continuously, with no negotiation, no detection, and no classification. The moment you plug in the cable and apply mains power to the injector, voltage appears on the designated wire pairs — regardless of what is connected at the other end.
Common passive PoE voltages are 24V DC and 48V DC, though you’ll also find 12V and even 5V passive injectors in specialist applications. The voltage is fixed by the injector hardware and cannot be adjusted by the connected device.
There is no IEEE standard for passive PoE in the traditional sense — it is a proprietary or vendor-specific implementation. Some manufacturers call it “passive PoE” explicitly; others use terms like “proprietary PoE” or simply specify a voltage requirement in the device’s power input specifications.
The Key Differences
| Factor | Active PoE | Passive PoE |
|---|---|---|
| Standard | IEEE 802.3af / 802.3at / 802.3bt | No standard — vendor-specific |
| Negotiation | Yes — detects and classifies device first | No — power is always on |
| Voltage | 48V DC (standardised) | Typically 24V or 48V (fixed by injector) |
| Safe for any device | Yes — non-PoE devices receive no power | No — any connected device receives voltage |
| Common use case | Enterprise switches, standard access points, IP cameras | Ubiquiti 24V ecosystem, older CCTV, custom installs |
When Passive PoE Is Used
Passive PoE is not a relic — it remains in active use in several specific contexts.
Ubiquiti’s 24V passive ecosystem: Ubiquiti built a significant portion of their older product line around 24V passive PoE. Earlier UniFi access points, EdgeRouter hardware, and older airMAX gear used 24V passive injectors exclusively. Ubiquiti shipped these with their own branded 24V passive injectors, and the devices would not function correctly on standard 802.3af (48V active) power. This was a deliberate design choice — 24V passive injectors are cheaper to produce and the technology was mature — but it created a parallel ecosystem that has caused considerable confusion.
CCTV and IP camera installations: Many lower-cost IP cameras, particularly older models and budget brands, ship with passive PoE injectors at 12V or 24V. These are matched specifically to the camera and should only be used with the intended device.
Custom and embedded installations: Industrial and embedded networking hardware sometimes uses passive PoE at non-standard voltages where IEEE compliance is not required and power efficiency or cost is the priority.
The Risk of Passive PoE
The risk is straightforward: a passive PoE injector puts voltage on the cable immediately, regardless of what is connected. If you plug a 24V passive injector into a device that expects 802.3af (48V active with negotiation) or a device that expects no PoE at all, that device receives 24V DC across its Ethernet port input circuitry with no warning and no protection beyond whatever the device manufacturer has included.
What actually happens depends on the device:
- Devices with PoE protection circuitry: Many modern 802.3af/at devices include transient voltage suppression and input protection that can tolerate unexpected voltage on the PoE pins. In some cases, the device simply won’t power up and won’t be damaged. In others, protection circuits blow as intended — the device survives but the protection component may need replacing.
- Devices without protection: Voltage is applied directly to sensitive electronics. At 24V applied to a device designed for 3.3V or 5V logic rails, the result is usually immediate and permanent component failure. Ethernet ports, switching chips, and onboard regulators are the most common casualties.
- Standard non-PoE network equipment: A non-PoE switch, laptop NIC, or desktop computer plugged into a passive PoE cable — whether accidentally or through ignorance — is at real risk. Consumer network equipment rarely includes PoE protection.
The 48V passive injectors sold for some CCTV systems are particularly dangerous in mixed environments because 48V DC is the same voltage as active 802.3af — but without the detection and classification handshake, a passive 48V injector will power anything connected to it, including devices that should never receive PoE.
How to Tell If Your Device Needs Active or Passive PoE
Always check the device’s specification sheet or data sheet before connecting any PoE power source. Look for the following:
- “802.3af” or “802.3at” or “802.3bt” in the power input specification — this means the device requires active PoE and will negotiate correctly with any compliant injector or switch.
- “24V passive PoE” or “passive PoE” — the device requires a passive 24V injector. Do not use a standard 802.3af injector or switch port with this device.
- “Proprietary PoE” or a specific voltage listed (e.g., “power input: 24V DC via Ethernet”) — treat this as passive PoE and use only the specified injector.
Ubiquiti products historically shipped with a label on the device itself stating the required PoE type. Older UniFi and airMAX devices often have a yellow sticker warning: “Caution: Use only Ubiquiti PoE adapters.” This is specifically to prevent users from connecting them to 802.3af switch ports, which would deliver 48V where the device expects 24V.
If the device packaging or documentation is unclear, contact the manufacturer before applying power. A few minutes of verification is considerably cheaper than replacing hardware.
Can You Mix Active and Passive PoE?
No. Mixing active and passive PoE in a way that delivers the wrong power type to a device is dangerous and should never be done intentionally. The two systems are not interoperable:
- A 24V passive injector connected to an 802.3af device delivers 24V without negotiation — the device may fail to power up, or worse, may be damaged depending on its input protection.
- An 802.3af switch port connected to a 24V passive PoE device will attempt to negotiate, receive no valid signature, and withhold power — the device simply won’t power on. This is the safer failure mode, but it means the device won’t function.
- A 48V passive injector connected to a non-PoE device will deliver voltage to the Ethernet port immediately — this is where real damage occurs.
The only safe mixing scenario is intentional isolation — using passive PoE hardware exclusively with its matched devices, clearly labelled, in a segment of the network that is physically separate from standard 802.3af/at infrastructure.
Ubiquiti’s Approach to PoE in 2026
Ubiquiti has been progressively migrating their product line away from 24V passive PoE toward standard 802.3af/at compliance. The current UniFi 6 access point range — including the U6 Lite, U6 Pro, U6 Long-Range, and U6 Enterprise — all use 802.3af or 802.3at active PoE. This means they work correctly with any compliant PoE switch or injector, without any special Ubiquiti hardware required.
However, the older UAP-AC range (AC-Lite, AC-Pro, AC-HD) and the airMAX product line still use or were designed around passive PoE in some variants. If you are managing a mixed estate of newer UniFi 6 hardware alongside legacy UAP-AC gear, you need to know which injectors and switch ports are feeding which devices. Labelling your cables and patching at the switch end is essential.
For UK installers managing a transition from legacy Ubiquiti gear to current UniFi hardware, the safest approach is to replace passive injectors and legacy switches with 802.3af/at managed switches as devices are upgraded, rather than running mixed power infrastructure long-term.
For a broader overview of PoE standards and the IEEE classification system, see our guide on PoE standards explained.
