Versions Compared

Old Version 21

changes.mady.by.user Edgars P.

Saved on

compared with

New Version Current

changes.mady.by.user Edgars P.

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Info

Note: Some MikroTik devices support all of the described standards (e.g. CRS112-8P-4S-IN, CRS328-24P-4S+RM, netPower 16P, CRS354-48P-4S+2Q+RM etc...)

PoE-Out Configuration

PoE Configuration is supported on all MikroTik devices with PoE-Out interfaces, the configurations can be edited from the RouterOS and SwOS interfaces.

RouterOS

Usage

RouterOS provides an option to configure PoE-Out over Winbox, Webfig, and CLI, basic commands using the CLI are

...

Global Settings

Some MikroTik PoE-Out devices support the global PoE setting which can be configured under /interface ethernet poe settings menu. Global setting ether1-poe-in-long-cable feature disables strict input/output current monitoring (short detection) to allow the use of PoE-Out with long ethernet cables and/or avoiding improper short-circuit detection.

...

Info

Note: Global setting of ether1-poe-in-long-cable can also affect PoE-Out behavior on PSE which is powered using a DC connector

Port Settings

PoE-Out can be configured under the menu. Each port can be controlled independently.

...

  • auto-on - the board will attempt to detect if power can be applied to the port. For powering there should be resistance in the range from 3kΩ to 26.5kΩ
  • forced-on - detection range is removed. As a result power over Ethernet will be always on
  • off - all detection and power is turned off for this port

...

Highest priority is 0, the lowest priority is 99. If there are 2 or more ports with the same priority then port with the smallest port number will have a higher priority. For example, if ether2 and ether3 have the same priority and over-current is detected then PoE-Out on ether3 will be turned off.

...

How to choose your PoE PSE

This table can help you choose which PSE device is best suitable for your needs. 


Device name


PoE-Out port count


Passive PoE


802.3af/at


802.3bt


Power input

Maximum output per port

Maximum power output, W

Input 18-30V, mA

Input 30-57V, mA

CSS610-8P-2S+IN

8++-

AC &DC 48-57 V

1000625140

CRS328-24P-4S+RM

24++-AC1000450450

CRS354-48P-4S+2Q+RM

48++-AC1000570700

CRS112-8P-4S-IN

8++-DC 18-30V & DC 30-57V100045080

netPower 16P

16++-DC 18-30V & DC 30-57V1100600160

RB5009UPr+S+IN

8++-DC 18-30V or DC 30-57V640420130

hEX PoE

4++-DC 18-30V or DC 30-57V1000450102

PowerBox Pro

4++-DC 18-30V or DC 30-57V1000450102

OmniTIK 5 PoE ac

4++-DC 18-30V or DC 30-57V1000450102

hEX PoE lite

4+--DC 18-30V1000



-

60

PowerBox

4+--DC 18-30V100060

RB260GSP

4+--DC 18-30V100060

OmniTIK 5 PoE

4+--DC 18-30V100060

PoE-Out Configuration

PoE Configuration is supported on all MikroTik devices with PoE-Out interfaces, the configurations can be edited from the RouterOS and SwOS interfaces.

RouterOS

Usage

RouterOS provides an option to configure PoE-Out over Winbox, Webfig, and CLI, basic commands using the CLI are

PropertyDescription
print ()Prints PoE-Out related settings.
export ()export is displayed under /interface ethernet menu.
monitor (string| interface)Shows poe-out-status of a specified port, or all ports with /interface ethernet poe monitor [find] command.
power-cycle (duration:0..1m |; Default: 5s)Disables PoE-Out power for a specified period of time.

Global Settings

Some MikroTik PoE-Out devices support the global PoE setting which can be configured under /interface ethernet poe settings menu. Global setting ether1-poe-in-long-cable feature disables strict input/output current monitoring (short detection) to allow the use of PoE-Out with long ethernet cables and/or avoiding improper short-circuit detection.

PropertyDescription
ether1-poe-in-long-cable (yes | no)Setting it to "yes" will disable short detection on all poe-out ports. This is potentially dangerous settings and should be used with caution


Info

Note: Global setting of ether1-poe-in-long-cable can also affect PoE-Out behavior on PSE which is powered using a DC connector

Port Settings

PoE-Out can be configured under the menu. Each port can be controlled independently.


PropertyDescription
name ()Name of an interface
poe-out (auto-on | forced-on | off; Default: auto-on)Specifies PoE-Out state
  • auto-on - the board will attempt to detect if power can be applied to the port. For powering there should be resistance in the range from 3kΩ to 26.5kΩ
  • forced-on - detection range is removed. As a result power over Ethernet will be always on
  • off - all detection and power is turned off for this port
poe-priority (integer:0..99 | any; Default: 10)poe-priority specifies the importance of PoE-Out ports, in cases when a total PoE-Out limit is reached, interface with the lowest port priority will be powered off first.

Highest priority is 0, the lowest priority is 99. If there are 2 or more ports with the same priority then port with the smallest port number will have a higher priority. For example, if ether2 and ether3 have the same priority and over-current is detected then PoE-Out on ether3 will be turned off.

Every 6 seconds ports will be checked for a possibility to provide PoE-Out if it was turned off due to port priority.
poe-voltage (auto | low | high; Default: auto)

A feature that allows us to manually switch between two voltage outputs on PoE-Out ports. It will take effect only on PSE with switchable voltage modes (CRS112-8P-4S-IN, CRS328-24P-4S+RM, netPower 16P, CRS354-48P-4S+2Q+RM).

poe-lldp-enabled ( yes / no; Default: no)

Link Layer Discovery Protocol (LLDP) is a layer-2 Ethernet protocol for managing devices. LLDP allows an exchange of information between a PSE and a PD. 

Starting from RouterOS version 7.15, the setting has been replaced with the Neighbor Discovery lldp-poe-power property.


Info

Note: Enabling poe-lldp in RouterOS 7.8 can potentially solve issues encountered in VoIP setups.



Info

Note: If poe-voltage=auto and poe-out is set to "forced-on", LOW voltage will be used by default. If the PD supports only high voltage, make sure you also set poe-voltage=high when forcing the PoE output.

 

Power-cycle settings

RouterOS provides a possibility to monitor PD using a ping, and power-cycle a PoE-Out port when the host does not respond. power-cycle-ping feature can be enabled under /interface ethernet poe menu.

PropertyDescription
power-cycle-ping-enabled (yes | no; Default: no)Enables ping watchdog, power-cycles port if a host does not respond to ICMP or MAC-Telnet packets.
power-cycle-ping-address (IPv4 | IPv6 | MAC; Default: )An address which will be monitored. Since RouterOS 6.46beta16, an active route towards PD is required in case an IP address is configured, so make sure PSE can reach the PD. In case the MAC address is specified, PSE will send MAC-Telnet ping requests only from a specified ethernet interface. When configuring a bridge vlan-filtering or some way of VLAN switching, it is recommended to use the IP address for monitoring your PD.
power-cycle-ping-timeout (time:0..1h |; Default: 5s)If the host does not respond for more than <timeout> period of time, then PoE-Out port is switched off for 5s.
power-cycle-interval (time| any; Default: )Disables PoE-Out power for 5s between the specified intervals. Not related with the power-cycle-ping feature.


If power-cycle is enabled, /interface ethernet poe monitor will show the actual status of the host and time when power cycle will be performed [1]

SwOS

SwOS interface provides basic PoE-Out configuration and monitoring options, see more details in the SwOS PoE user manual.

PoE-Out Monitoring

RouterOS

MikroTik devices with PoE-Out controller (not injector) provides port monitoring option. /interface ethernet poe monitor [find]

PropertyDescription
name ()Name of an interface
poe-out ()Shows PoE-Out settings
poe-out-status ()Shows current PoE-Out status on port
  • powered-on - Power is applied to the port, and PoE-Out is operating normally,
  • waiting-for-load - PSE attempts to detect if power can be applied to the port. For powering there should be resistance in the range from 3kΩ to 26.5kΩ;
  • short-circuit - Short-circuit is detected on PoE-Out port, power is switched off, the only detection with low voltage takes place.
  • overload - The PoE-Out current limit is exceeded, power is switched off on PoE-Out port. For port limits see each model specifications.
  • voltage-too-low - PD can not be powered with the voltage provided from PSE.
  • voltage_too_high - PSE controller cannot power PD with high voltage;
  • current-too-low - current-too-low means that PD draws too low current  (<10mA) than normal PoE-Out device should, the reason for this can be:

The delivered voltage at PD is too low for normal powering (for example Vmin =>30V, but provided 24V);

PD uses a second power source which has a higher voltage than PSE, so all current is taken from the second DC source, not PSE PoE-Out port;

  • off - all detection and power is turned off for this port;
  • power_reset - PSE controller resetting the power, for example, when executing the power cycle command or when pings fail (power-cycle-ping);
  • controller_init - PSE controller initialization;
  • controller_upgrade - PSE controller is being upgraded;
  • controller_error - PSE controller does not respond.
poe-out-voltage ()Displays PoE Voltage which is applied to the PD.
poe-out-current ()Displays port current (mA) which is drawn by the PD.
poe-out-power ()Displays PD power consumption

If power-cycle-ping feature is used, /interface ethernet poe monitor [find] will show additional fields:

Info

power-cycle-host-alive: <YES/NO> (Shows if monitored host is reachable)
power-cycle-after:<TIME> (Shows time, after which the port will be power-cycled)

SNMP

It is possible to monitor PoE-Out values using SNMP protocol, this requires enabled SNMP on PSE. SNMP Wiki

SNMP OID tables:

  • 1.3.6.1.4.1.14988.1.1.15.1.1.1 - interface-id
  • 1.3.6.1.4.1.14988.1.1.15.1.1.2 - interface names
  • 1.3.6.1.4.1.14988.1.1.15.1.1.4 - voltage in dV (decivolt)
  • 1.3.6.1.4.1.14988.1.1.15.1.1.5 - current in mA
  • 1.3.6.1.4.1.14988.1.1.15.1.1.6 - power usage in dW (deviwatt)

SNMP values can be requested also from the RouterOS, for example, snmp-walk will print current mA from all available PoE-Out ports:

Info

/tool snmp-walk address=10.155.149.252 oid=1.3.6.1.4.1.14988.1.1.15.1.1.5

To get very specific OID value, use snmp-get tool (displays current mA on ether3 interface):

Info

tool snmp-get address=10.155.149.252 oid=1.3.6.1.4.1.14988.1.1.15.1.1.5.3

PoE-Out notifications

PoE-Out LEDs

Models with dependant voltage output

PoE-Out LED behavior can differ between models, but most of them will indicate PoE-Out state on one additional LED. Devices with one voltage output will light:

  • Red color LED - PoE-Out port state is powered-on (auto or forced-on mode).
  • Blinking Red color LED - PoE-Out port state is short-circuit

Models with selectable voltage output

Models with multiple voltage options can indicate additional information:

  • Green color triangle LED - PoE-Out port state is powered-on (auto or forced-on mode), PD uses low voltage.
  • Red color triangle LED - PoE-Out port state is powered-on (auto or forced-on mode), PD uses high voltage (af/at or passive).
  • Blinking Green color triangle LED - PoE-Out port state (low voltage) is short-circuit or overload
  • Blinking Red color triangle LED - PoE-Out port state (high voltage) is short-circuit or overload

Model-specific LED behavior

  • CRS112-8P-4S-IN - All PoE LEDs flashing: wrong voltage PSU plugged into one of the ports.
  • netPower 16P - All PoE LEDs flashing: wrong voltage PSU plugged into one of the ports.
  • CRS328-24P-4S+RM - indicates an exceeded overall max PoE output limit. Port PoE-Out priorities will work in 3 independent sections (8 ports each) and overload will happen in any section that breaches 150W consumption.

PoE-Out Logs

By default PoE-Out, event logging is enabled and uses "warning" and "info" topics to notify the user about PoE-Out state changes. Log entries will be added to each PoE-Out state change. Important logs will be added with a "warning" topic, informative logs will be added with the "info" topic.  When PoE LLDP is enabled, LLDP status updates are available in the device logs, for example:

Info

06:56:50 poe-out,debug ether4 LLDP TLV 25.0W request denied : hw-limit

Possible denial reasons:

Info
  • budget - requested power exceeds the total PSE budget.
  • hw-limit - requested power is more than hardware supports (PSU affects this).
  • low-voltage - LLDP request made to low-voltage port.
  • off - port is shut down.
  • class-limit - LLDP requires more than the class can provide.
  • cmd-failed - RouterOS could not make a request to the controller
Info

Note: If poe-voltage=auto and poe-out is set to "forced-on", LOW voltage will be used by default. If the PD supports only high voltage, make sure you also set poe-voltage=high when forcing the PoE output.

Power-cycle settings

RouterOS provides a possibility to monitor PD using a ping, and power-cycle a PoE-Out port when the host does not respond. power-cycle-ping feature can be enabled under /interface ethernet poe menu.

...

SwOS

SwOS interface provides basic PoE-Out configuration and monitoring options, see more details in the SwOS PoE user manual.

PoE-Out Monitoring

RouterOS

MikroTik devices with PoE-Out controller (not injector) provides port monitoring option. /interface ethernet poe monitor [find]

...

  • powered-on - Power is applied to the port, and PoE-Out is operating normally,
  • waiting-for-load - PSE attempts to detect if power can be applied to the port. For powering there should be resistance in the range from 3kΩ to 26.5kΩ;
  • short-circuit - Short-circuit is detected on PoE-Out port, power is switched off, the only detection with low voltage takes place.
  • overload - The PoE-Out current limit is exceeded, power is switched off on PoE-Out port. For port limits see each model specifications.
  • voltage-too-low - PD can not be powered with the voltage provided from PSE.
  • current-too-low - current-too-low means that PD draws too low current  (<10mA) than normal PoE-Out device should, the reason for this can be:

The delivered voltage at PD is too low for normal powering (for example Vmin =>30V, but provided 24V);

PD uses a second power source which has a higher voltage than PSE, so all current is taken from the second DC source, not PSE PoE-Out port;

  • off - all detection and power is turned off for this port;

...

If power-cycle-ping feature is used, /interface ethernet poe monitor [find] will show additional fields:

Info

power-cycle-host-alive: <YES/NO> (Shows if monitored host is reachable)
power-cycle-after:<TIME> (Shows time, after which the port will be power-cycled)

SNMP

It is possible to monitor PoE-Out values using SNMP protocol, this requires enabled SNMP on PSE. SNMP Wiki

SNMP OID tables:

  • 1.3.6.1.4.1.14988.1.1.15.1.1.1 - interface-id
  • 1.3.6.1.4.1.14988.1.1.15.1.1.2 - interface names
  • 1.3.6.1.4.1.14988.1.1.15.1.1.4 - voltage in dV (decivolt)
  • 1.3.6.1.4.1.14988.1.1.15.1.1.5 - current in mA
  • 1.3.6.1.4.1.14988.1.1.15.1.1.6 - power usage in dW (deviwatt)

SNMP values can be requested also from the RouterOS, for example, snmp-walk will print current mA from all available PoE-Out ports:

Info

/tool snmp-walk address=10.155.149.252 oid=1.3.6.1.4.1.14988.1.1.15.1.1.5

To get very specific OID value, use snmp-get tool (displays current mA on ether3 interface):

Info

tool snmp-get address=10.155.149.252 oid=1.3.6.1.4.1.14988.1.1.15.1.1.5.3

PoE-Out notifications

PoE-Out LEDs

Models with dependant voltage output

PoE-Out LED behavior can differ between models, but most of them will indicate PoE-Out state on one additional LED. Devices with one voltage output will light:

  • Red color LED - PoE-Out port state is powered-on (auto or forced-on mode).
  • Blinking Red color LED - PoE-Out port state is short-circuit

Models with selectable voltage output

Models with multiple voltage options can indicate additional information:

  • Green color triangle LED - PoE-Out port state is powered-on (auto or forced-on mode), PD uses low voltage.
  • Red color triangle LED - PoE-Out port state is powered-on (auto or forced-on mode), PD uses high voltage (af/at or passive).
  • Blinking Green color triangle LED - PoE-Out port state (low voltage) is short-circuit or overload
  • Blinking Red color triangle LED - PoE-Out port state (high voltage) is short-circuit or overload

Model-specific LED behavior

  • CRS112-8P-4S-IN - All PoE LEDs flashing: wrong voltage PSU plugged into one of the ports.
  • netPower 16P - All PoE LEDs flashing: wrong voltage PSU plugged into one of the ports.
  • CRS328-24P-4S+RM - indicates an exceeded overall max PoE output limit. Port PoE-Out priorities will work in 3 independent sections (8 ports each) and overload will happen in any section that breaches 150W consumption.

PoE-Out Logs

...

  • .


To avoid unnecessary logging in cases when PD is not powered because of current-too-low, RouterOS will filter such events, and add one log per every 512 current-too-low events.

...