IP Camera PoE Installation Guide (UK) — CCTV over Power-over-Ethernet

Twenty years ago, a typical commercial CCTV installation needed two separate cable runs to every camera — a 75-ohm coaxial for the analogue composite video signal and a 230 V mains drop (or, more commonly, a 12 V DC fly-lead from a centralised PSU). Each camera position required either a local fused spur or a long DC run with voltage-drop headaches, and every relocation meant pulling new cable.

Modern IP CCTV collapses both runs into a single Cat6 or Cat6a UTP cable carrying Ethernet data plus DC power under the Power-over-Ethernet (PoE) standards published by the IEEE. The camera draws its working voltage from the same eight-conductor cable that streams its H.265 video back to the Network Video Recorder (NVR). The result is faster installs, no 230 V at exposed external positions, and a single switch that powers and records the entire system.

IEEE 802.3 has now published four generations of PoE, each colloquially named differently. Choosing the wrong class is the single most common reason a CCTV install fails to commission: the camera negotiates an inadequate budget, the IR illuminator dims, the heater never engages, and the system "works fine" in the showroom but goes dark on the first cold night on site.

1. Type 1 — IEEE 802.3af, 2003. Up to 15.4 W at the PSE port, ~12.95 W guaranteed at the Powered Device (PD). Suitable for fixed-lens bullet cameras, indoor minidomes, simple analytics cameras with no heater.
2. Type 2 — IEEE 802.3at, 2009, "PoE+". Up to 30 W at the PSE, ~25.5 W at the PD. The everyday workhorse for outdoor bullets and turrets with IR, heaters and microphones. The default class to specify for a UK external install unless you have explicit reason not to.
3. Type 3 — IEEE 802.3bt, 2018, "PoE++" or "4PPoE" (four-pair PoE). Up to 60 W at the PSE, ~51 W at the PD. Required for most PTZ domes with heater + wiper + extended IR, and for many multi-sensor multi-imager cameras.
4. Type 4 — IEEE 802.3bt, 2018, "Hi-PoE". Up to 90 W at the PSE, ~71 W at the PD. Reserved for high-performance PTZs, thermal imaging cameras, and multi-sensor 360° devices. The same physical RJ45 connector — but only Cat6a or Cat6 cabling is realistically suitable because of conductor heating at this current.

Always check the camera datasheet for the worst-case power draw — most manufacturers publish a "normal" and a "max" figure, and the max figure includes IR illuminator at full intensity plus heater. Specify the next class above the max, not the next class above the normal. For more on the upper end of the standard, see our PoE++ Type 4 90 W installation guide.

On smaller systems (up to 16 channels), the NVR is a single box with built-in PoE ports — one cable per camera, no separate switch. On larger systems the NVR records but does not power: cameras are fed from a separate managed PoE switch and the NVR sits on the local LAN to pull the streams.

Sizing the PoE budget is the first design step. Add up the worst-case PoE class for every camera, multiply by the rated PD draw, and compare against the switch's total PoE budget — not its port count. A 16-port switch labelled "PoE+ capable" might only have a 180 W total budget — fine for sixteen Type 1 cameras but only six Type 2 cameras at full load.

Two separate rating systems govern camera body selection in the UK: IP (Ingress Protection, BS EN 60529) and IK (Impact Protection, BS EN 62262). The two are independent — an IP67 camera may have no meaningful impact protection — and both must be specified.

1. Indoor, low-traffic — IP30 is generally adequate (protected against solid objects > 2.5 mm). No water protection needed. IK04–IK07 for impact in offices, retail and corridors.
2. Indoor, wet or wash-down — IP65 or IP66 for kitchens, food processing, leisure centres. IK08 minimum for sports halls and changing rooms.
3. Outdoor, soffit-mounted or under canopy — IP66 (dust-tight, powerful water jets). IK08 if not reachable, IK10 if reachable from ground level (within 2 m).
4. Outdoor, fully exposed — IP66 minimum, IP67 preferred (temporary submersion). IK10 mandatory for any position reachable from ground level or window sills.
5. Pole-top, marine or coastal — IP66/IP67 with marine-grade housing (316 stainless or anodised aluminium). Salt-mist resistance to BS EN 60068-2-52 is the industry benchmark.

IK10 is the highest impact rating in BS EN 62262 — resistance to a 5 kg mass dropped from 400 mm, roughly a determined kick or a heavy thrown object. IK10 is the standard for any camera in a custody suite, school corridor, or external position at ground level.

PoE shares a four-pair UTP cable between data and DC power. Cable category, jacket compound and shield matter more than on a non-powered data run, because conductor temperature rises with PoE current and the cable spends years in conditions the indoor data cable was never designed for.

Solid-core cabling is for fixed permanent links — wall-to-wall, in conduit, in tray. Stranded patch cord is for short flexible jumpers at each end. Do not run stranded cable as a permanent link: it has higher attenuation and will not pass a permanent link test.

PoE is ELV, but it shares containment and routes with LV mains in almost every commercial building. BS 7671 Section 528 governs the proximity of cables of different voltage bands, and BS EN 50174-2 gives the structured cabling separation distances against power circuits — the two together drive the routing design.

1. Use a dedicated CCTV containment route — separate tray, trunking or basket — wherever practicable. This simplifies segregation, EMC and future maintenance.
2. Where CCTV cabling shares containment with LV cables, the LV cables must have insulation rated for the highest voltage present, or there must be physical separation by an earthed metallic partition (BS 7671 528.1).
3. BS EN 50174-2 separation distances — minimum 50 mm separation between unscreened data cable and LV power, reducing to 0 mm where the data cable is screened and the power cable is in a metal containment system. Crossings should be at 90°.
4. Conduit and trunking — outdoor runs should be in galvanised steel conduit or UV-stable PVC conduit. Avoid running PoE cable loose externally; it sags, ages, and presents a snagging hazard.
5. Bend radius — Cat6 minimum installed bend radius is 4× cable diameter (typically 25–30 mm). Tight 90° bends at containment exits will degrade NEXT and Return Loss; use radius pieces.
6. Cable ties — do not over-tighten. Hook-and-loop ties or loose plastic ties only; a deformed cable jacket means deformed conductor geometry and out-of-spec performance.

BS 7671 Section 715 covers Extra-Low Voltage Lighting Installations, and its principles are informative for ELV PoE power distribution where the camera is in essence an ELV-powered device on a structured cabling system. Treat the PoE switch as the ELV source and apply Section 715's requirements for protection against electric shock by SELV/PELV separation.

Any external cable leaving the equipotential zone of the building is a potential surge entry path. A direct lightning strike on or near an external CCTV camera couples thousands of volts into the Cat6 cable and follows it back to the NVR, the LAN switch, and the rest of the network. The damage bill from a single unprotected camera position can exceed the whole installation cost.

An external metallic camera housing is an exposed-conductive-part if it is liable to become live under fault conditions and is accessible. PoE is ELV, but cable jackets can degrade, induced surge can elevate the chassis, and a faulty heater element could couple LV onto the housing. The defensible position is to bond every metallic external housing to the building's MET.

1. Use a dedicated 4 mm² (minimum) green/yellow PVC-insulated bonding conductor from the camera mounting bracket back to the nearest earthed structure or directly to the MET.
2. Where the camera is on a metal pole, bond the pole at its base to the MET. The camera bracket bonds to the pole, the pole bonds to MET, and the camera shares the equipotential zone.
3. Use a stainless steel or galvanised crimp ring under a serrated washer; do not rely on paint-piercing alone for an external bond — visual inspection cannot confirm the contact.
4. Label the bond at the camera end with a "Safety Electrical Connection — Do Not Remove" label to BS 951.
5. On non-metallic housings (polycarbonate domes), bonding is not required — but the SPD bonding lead at the cable entry remains mandatory.

A CCTV camera that records identifiable individuals is, in UK law, processing personal data. The data protection framework — UK GDPR and the Data Protection Act 2018 — applies in full, and for "relevant authorities" (police, local authorities, certain other public bodies) the Surveillance Camera Code of Practice issued under the Protection of Freedoms Act 2012 also applies.

BS EN 62676-4 sets out four operational requirement (OR) categories for CCTV image quality: Monitor, Detect, Recognise, Identify. The pixels per metre of subject required rises sharply — 25 px/m to detect, 125 px/m to recognise, 250 px/m to identify. Choosing a camera and lens combination that matches the OR is the design task.

IP cameras have historically been one of the most exposed device classes on the internet. Default credentials, unpatched firmware and UPnP-assisted WAN exposure produced the largest botnets in history (notably Mirai), assembled almost entirely from compromised cameras and NVRs. A defensible UK install treats cybersecurity as a first-class design concern.

1. Change every default password before the camera is connected to any network. Use a unique password per camera, generated by a password manager, stored against the asset register.
2. Disable UPnP on the customer's router. Do not allow the NVR to "automatically" open WAN ports for remote viewing.
3. Place the CCTV system on its own VLAN with no internet access. Remote viewing should be via the manufacturer's authenticated relay service (P2P cloud) or via a customer-managed VPN — never via a direct WAN port forward.
4. Apply firmware updates at commissioning and as part of the annual service visit. Many manufacturers publish security advisories monthly.
5. Disable any services not in use — ONVIF, RTSP, FTP, SMB, Telnet. The narrowest attack surface is the safest.
6. Document the customer's administrator credentials in a sealed handover envelope; do not retain customer credentials on installer infrastructure.

A correctly installed PoE CCTV system is tested end-to-end before handover: structured cabling as a permanent link to BS EN 50346, PoE delivery verified at each camera, the IP layer via a managed-switch report, the video stream at the NVR with bit-rate and frame-rate logging, and the user experience by walk-through with the client.

Producing a defensible CCTV quotation — PoE budget, NVR sizing, storage, GDPR notice, cable schedule — is a half-day exercise on a clean sheet of paper. Elec-Mate brings the calculation, the standards references, and the document generation into a single mobile flow that produces a client-ready quotation, a method statement, and a handover pack from a short site survey interview.