An unmanaged switch simply connects devices, with no settings to change. A managed switch lets you divide the network into VLANs, prioritize voice, see what each port is doing, and control the power it sends to phones, cameras and access points. Any business with desk phones, guest Wi-Fi, cameras or card terminals should have managed switches at the core. Unmanaged switches still have a place, for a handful of devices on one network where nothing needs separating. If the switch powers devices over Ethernet, size its total PoE budget as carefully as its port count.
Switches get bought by port count and price, often at the last minute before a move. The result is usually a closet where the most important box on the network is the one nobody can log in to. This guide covers the categories, the features that matter for a small business, and the PoE arithmetic that trips people up.
The four kinds of switch
| Unmanaged | Smart (web-managed) | Fully managed | Cloud-managed | |
|---|---|---|---|---|
| Configuration | None, plug and play | A web page with a core set of features | Web page and command line, full feature set | An online dashboard, often for many sites at once |
| VLANs and QoS | No | Usually yes, basic | Yes | Yes |
| Monitoring | Link lights only | Basic port statistics | Detailed statistics, logs, SNMP | Dashboard, alerts, history |
| Good fit | A few devices on one network | A small office with simple segmentation | Larger sites, complex networks, an IT team | Several sites, or owners who want remote visibility |
| Watch for | No way to see or fix problems | Feature gaps between models | Needs someone who knows the command line | Subscription licenses, and what happens if one lapses |
The labels vary by manufacturer. "Smart", "easy smart", "lite managed" and "web managed" can mean quite different feature sets, so read the datasheet rather than the box.
The features that actually matter
- VLANs. Separating staff, phones, guests, cameras and payment terminals is the main reason most small businesses need a managed switch. Our guide to VLANs and network segmentation explains the design.
- Quality of service. Marks and prioritizes voice and video traffic so calls stay clear when the network is busy.
- Loop protection. Spanning tree and loop detection stop a cable plugged in twice from bringing down the whole office, which is a surprisingly common outage.
- PoE control. Turning power on and off per port, scheduling it, and seeing how much each device draws. Being able to restart a frozen access point remotely by cycling its port saves a trip to the ceiling.
- Port statistics and logs. Errors on a port point to a bad cable; a port running at 100 Mbps instead of 1 Gbps points to a damaged one. Our guide to network monitoring covers what to watch.
- Link aggregation. Combining two ports into one logical link between switches, for more capacity or a spare path.
- Security features, such as disabling unused ports and limiting which devices can connect to a port.
Layer 3 switches can also route between VLANs themselves, which matters in larger networks. Most small businesses route between VLANs at the firewall instead, where the rules are easier to manage.
PoE budgets: the number that runs out first
Power over Ethernet sends electricity down the network cable, so access points, desk phones and cameras need no separate outlet. The standards, from 802.3af up to 802.3bt, are summarized in our office network cabling guide. For buying a switch, two numbers matter more than the standard:
- The per-port limit. A PoE+ port can supply up to 30 W; a device that needs more, such as some high-end access points or heated outdoor cameras, needs an 802.3bt port.
- The total PoE budget. The most power the switch can supply across all ports at once. This is often far less than every port running at its maximum. A switch with 24 PoE+ ports might have a budget well below 24 times 30 W.
How to size it
- List every device the switch will power, and look up its maximum PoE draw on the datasheet. Access points in particular draw more when they are busy and when all their radios are on.
- Add them up, then compare the total with the switch's budget, leaving headroom for growth.
- Check that each device's class fits the port it will use.
- Remember that the switch draws its own power on top of the PoE it supplies, which matters when sizing a UPS; see UPS for network equipment.
When a switch runs out of budget, it stops powering ports, usually starting with those it treats as lowest priority. That can look like a random device that keeps going offline, and it is easy to misdiagnose as a bad cable.
Uplinks and port speeds
Port speed matters more than it used to. Current Wi-Fi 6, 6E and 7 access points can move more than 1 Gbps, and many have 2.5 Gbps or faster ports to match. If your access points are fast, check that the switch ports they plug into are too. See Wi-Fi 6 vs Wi-Fi 7 for what the access points need.
Also check the uplinks: the ports that connect switches to each other and to the firewall. A switch with 48 fast ports and a single 1 Gbps uplink is a bottleneck waiting to happen. 10 Gbps SFP+ uplinks are common on business switches and worth having if you have more than one switch or a fast internet circuit.
When an unmanaged switch is fine
- A very small office with a handful of computers, no desk phones, no cameras and a separate guest network handled by the firewall.
- A temporary setup, such as a trade show booth or a construction trailer.
- A few extra ports at one desk, where every device belongs on the same network, as long as it is not chained into a loop.
The moment you need to separate anything or see why something is slow, an unmanaged switch has nothing to show you. Unmanaged switches also cause a specific kind of trouble in managed networks: dropped under a desk to add ports, they can mishandle VLAN tags, and if someone plugs both ends of a cable into one, they can create a loop that the rest of the network has to detect and shut down.
Firmware, warranty and the boring details
A managed switch runs software with an admin login, so like any other network device it needs firmware updates to fix bugs and security issues, and its admin page belongs on the management network, not the guest one. Decide who checks for updates and when they are applied, ideally in a maintenance window rather than mid-morning.
- Warranty and support. Some business lines carry long or lifetime hardware warranties; others offer a year. Check what replacement looks like if a switch fails: next business day shipping, or a return you mail back and wait for.
- Noise and heat. Fanless switches suit a cupboard in an open office; larger PoE switches usually have fans and belong in a ventilated closet.
- Rack or desktop. Rack-mount switches keep the closet tidy alongside the patch panel; small desktop models suit a single room.
Cloud-managed: convenient, with a subscription
Cloud-managed switches are configured and monitored through an online dashboard, which is handy if you have several sites or want your IT partner to see problems remotely. They are typically sold with a subscription license. What happens when the license lapses varies by vendor: some keep switching traffic but lose management, some stop working altogether. Ask before you buy, and put the renewal date somewhere it will not be missed.
A worked example
Hypothetical: the office, device counts and power figures are invented to show the arithmetic. Use the datasheets for your own devices.
A 30-person office is choosing a switch for its closet. It will power:
| Devices | Max draw each | Subtotal |
|---|---|---|
| 24 desk phones | 6 W | 144 W |
| 6 access points | 25 W | 150 W |
| 8 cameras | 10 W | 80 W |
| Total | 374 W |
That is 38 powered devices, plus computers behind the phones and a link to the firewall, so the office looks at 48-port switches. The first model it considers has 48 PoE+ ports but a total budget of 370 W. On paper it fits the ports and misses the power by a few watts, with no room for growth. In practice the phones would rarely all draw their maximum at once, but the access points will when they are busiest, which is exactly when an outage would hurt.
The office chooses a model with a larger budget instead, about half again more. It also checks the access point ports run at 2.5 Gbps for its new Wi-Fi, takes 10 Gbps uplinks to the firewall, and confirms the switch supports VLANs for voice, staff, guests and cameras. The difference in price between the two models is small next to the cost of chasing phones that drop at random.
Questions to ask your provider or installer
- What is the switch's total PoE budget, and what will our devices draw at maximum?
- Do the access point ports match the access points' speed?
- What uplink speed connects the switches to each other and to the firewall?
- Does it support the VLANs, QoS and loop protection we need?
- If it is cloud-managed, what does the license cost, and what happens if it lapses?
- Who updates the firmware, and who gets alerted when a port fails?
One team for the switch and the circuit
Our managed network service covers managed switches, Wi-Fi and cabling, surveyed, installed and monitored by one team from the street to the access point. We also price the internet circuit across several Tier 1 carriers with no markup, because the carrier pays FiberX. The consultation is free with no obligation, you usually hear back the same day, and Phil Morales is your one point of contact. Send us your device list, call 478-758-8091 or text (347) 870-0965.
