Build a business network that powers your cameras, covers the site in Wi-Fi and can be managed from one screen.
This guide is for CCTV installers, IT buyers and business owners choosing TP-Link kit: Omada switches, access points, gateways and controllers, the unmanaged PoE switches that sit behind most camera systems, and the 4G and 5G routers that get a site online where there is no broadband. It explains what each part does, how to size a PoE switch for CCTV, and which products in our range fit which job.
Which questions decide it?
How many devices need power over the cable? Cameras, access points and phones. This sets your PoE port count and, more importantly, your PoE budget.
Do you need to see and control the network remotely? If yes, you want Omada managed kit and a controller. If no, unmanaged switches will do.
Do you need Wi-Fi, and where? Indoor offices, outdoor yards, or a link between two buildings.
Is there broadband at the site? If not, or if it drops, a 4G or 5G router is the answer.
Will the network grow? Leave spare ports and spare PoE budget. Adding a second switch later costs more than buying the right one now.
What is TP-Link Omada?
Omada is TP-Link's software-defined networking (SDN) range for businesses. Switches, access points and gateways are adopted into one Omada controller, so every port, VLAN, Wi-Fi network and PoE budget on the site is set up and monitored from a single dashboard rather than a separate web page for each device.
The practical benefit for a CCTV or IT installer is remote visibility. From the controller you can see which port a camera is on, how much power it draws, and restart it without driving to site. On a site with a dozen devices, that saves hours over the life of the system.
Browse the full TP-Link Omada range. Zenith Security Co. is an official TP-Link VAR Partner.
Omada controller options
Omada devices can generally be set up on their own, but central management comes from a controller. There are four ways to run one:
Hardware controller: a small box on site that manages everything with no PC left running. We stock the OC200 for smaller sites and the OC300, listed for up to 500 access points, for larger ones.
Software controller: a free download from TP-Link that runs on your own PC or server. Good value, but the machine has to stay on.
Omada Cloud: manage sites through a web portal and the Omada app with no controller on site. Useful for installers who look after several customer sites. Check TP-Link for current plans and licensing.
Fusion gateway: a router and controller in one device. Our range includes the Fusion 2.5G, the Fusion G+ and the Fusion 2.5G PoE.
Unmanaged switches plug in and work; managed switches let you see and control each port. TP-Link sells switches in three tiers that matter here:
Unmanaged (TL-SG, TL-SF, LS models): no setup, no interface. Fine for a small, self-contained CCTV system where the switch only has to power cameras and pass video to the recorder. The TL-SG1005P (5 ports, 4 PoE+) and the TL-SG1218MP (18-port rackmount, 16 PoE+) are typical examples.
Omada Easy Managed (ES models): VLANs, PoE control and port monitoring, with Omada cloud visibility, at a lower price than full managed switches. The ES205GP (5 ports, 4 PoE+) is a small example. Read our Easy Managed switch guide.
Omada Smart Managed (SG and SL models): full L2+ features, SFP uplinks on many models, and complete control from the Omada controller. The SG2210P (10 ports, 8 PoE+, 2 SFP) and the SG2428P (28 ports, 24 PoE+, 4 SFP) are the models installers ask for most.
TP-Link also sells an older "Easy Smart" tier under the TL-SG range. We don't currently list those, as the Omada Easy Managed models cover the same ground and join the Omada controller.
For a site where you'll never touch the network again, unmanaged is fine. For any commercial site, or any site you support remotely, choose Omada. Being able to see that port 7 has dropped and power-cycle the camera from your phone pays for the difference quickly.
PoE+ (802.3at) supplies more power per port than standard PoE (802.3af). As general figures from the IEEE standards, 802.3af gives up to about 15.4W per port at the switch and 802.3at up to about 30W. Higher classes, often sold as PoE++ (802.3bt), go further again and are used for devices such as large PTZ cameras.
A basic fixed turret or bullet camera will usually run happily on standard PoE. Cameras with heaters, strong white lights, active deterrence sirens, motorised lenses or PTZ motors draw more, and some need PoE+ or higher. Always check the camera's datasheet for its maximum power draw and PoE class.
Every TP-Link switch named in this guide is listed in our range as PoE+ on its PoE ports, so per-port power is rarely the problem. The limit you hit first is the switch's total budget.
Choosing a PoE switch for CCTV
Pick on total PoE budget first, port count second. A switch with 16 PoE ports can't necessarily power 16 cameras at full draw. Its power supply has a total budget shared across all ports, and once that's used, further devices won't power up or will restart under load, usually at night when infrared switches on.
Worked example: sizing the budget
The figures below are illustrative, not the ratings of any specific camera or switch. Use your own datasheets.
Device
Quantity
Max draw each (example)
Subtotal
Fixed turret cameras
8
6W
48W
Bullet cameras with white light
4
10W
40W
Ceiling Wi-Fi access point
1
15W
15W
Total
13
103W
Now add headroom. A common rule of thumb is to keep the load to about 75–80% of the budget, so the switch isn't running at its limit and there's room for another camera later. 103W ÷ 0.8 is roughly 130W, so in this example you'd look for a switch with at least 13 PoE ports plus an uplink, and a total budget of about 130W or more.
A 16-port PoE+ switch such as the TL-SG1218MP fits the port count here. Check its product page for the stated PoE budget before you commit.
Other checks for a CCTV switch
Use the maximum draw, not the typical draw. Cameras draw most at night, with infrared or white light on, and in winter if they have heaters.
Cable length: standard Ethernet and PoE are rated to 100m per run. For longer runs, add a PoE extender or put a switch nearer the cameras. Outdoors, the Omada range includes the POE20E-OUTDOOR extender.
Uplink speed: gigabit ports are standard on the models in this guide. On large systems, an SFP uplink (SG2210P, SG2428P) lets you link to a core switch over fibre between buildings.
Your NVR's own PoE ports may be enough for a small system. A separate switch is needed when you run out of ports or budget, or want the cameras on the wider network. See the Hikvision NVR buying guide.
Brand compatibility: PoE is a standard. Standard PoE Hikvision, HiLook, Dahua and Uniview cameras will power from a TP-Link PoE switch within its port and budget limits.
Omada access points
Omada access points provide the Wi-Fi and are managed from the same controller as the switches. Most are powered by PoE, so a single cable from an Omada PoE switch is all each one needs.
Ceiling Wi-Fi 6 for offices and shops: the EAP610 (AX1800) for typical rooms, and the EAP653 (AX3000) where there are more users. EAP673 and the Ultra-Range EAP653 UR and EAP683 UR models are also in the range.
Outdoor: for car parks, yards and campsites, the EAP650-Outdoor (AX3000 Wi-Fi 6), plus EAP610-Outdoor, EAP625-Outdoor HD and Wi-Fi 7 outdoor models such as the EAP772-Outdoor.
Building-to-building links: the EAP bridge kits and Flex Bridge 5 send a network across a yard to a gatehouse or outbuilding without digging a trench. Handy for getting a camera feed back from a remote building.
Wi-Fi 6 covers most offices and shops. Wi-Fi 7 is worth considering on busy sites with newer client devices. Browse all Omada access points.
Omada routers and gateways
The gateway connects the site to the internet and handles routing, firewall and VPN. In an Omada network it is adopted into the controller with everything else.
The ER605 is the common starting point: a gigabit multi-WAN VPN router. Multi-WAN means it can take a second internet connection as a backup.
Fusion gateways combine the router and the controller, so you don't need a separate OC200 or software controller.
4G gateways with a SIM slot, covered in the next section, keep a site online when the broadband drops.
A 4G or 5G router takes a data SIM and shares a mobile connection with everything on site. For CCTV, that gives the NVR an internet connection for remote viewing and alerts on building sites, farms, car parks and site cabins where there's no fixed line.
Business, managed in Omada: the ER706WP-4G (4G+ Cat6, AX3000 Wi-Fi 6, 4 PoE+ ports) can act as router, Wi-Fi and a small PoE switch in one, and offers broadband failover.
Outdoor: the ER701-5G-OUTDOOR (5G, dual nano SIM), ER703WP-4G-OUTDOOR and ER603WP-4G-OUTDOOR mount outside near the best signal and connect back over Ethernet. That helps in metal buildings and rural spots where signal is poor indoors.
Standalone: the Archer MR600 (4G+ Cat6, AC1200, gigabit ports) and Archer NX200 (5G, Wi-Fi 6) are simpler routers for small offices and remote CCTV that won't be managed in Omada.
Points to plan for:
Check coverage at the install address on each network's map, ideally with a phone on site. 4G has the widest coverage; 5G gives more speed where it's available.
Size the data plan to how often you'll view footage. Continuous cloud upload on mobile data gets expensive; viewing on demand doesn't.
Upload speed matters more than download for CCTV, because footage goes from the site to your phone.
Routers are supplied without a SIM. Use a data SIM from the network with the best signal at the site.
TP-Link also makes a CCTV range called VIGI. We don't currently stock VIGI cameras or recorders. Our CCTV range covers Hikvision, HiLook, Dahua, Uniview and Ajax, all of which work with TP-Link PoE switches over standard PoE. See the Hikvision IP camera buying guide for choosing cameras.
List every powered device and its maximum PoE draw from the datasheet.
Add the totals and allow around 20–25% headroom. Choose a switch whose total PoE budget covers that figure.
Count ports: one per device, plus an uplink, plus spares for growth.
Check that no cable run exceeds 100m, or plan an extender or a second switch.
Decide unmanaged or Omada. Pick Omada if you'll support the site remotely.
If Omada, choose a controller: OC200/OC300 hardware, free software, Omada Cloud or a Fusion gateway.
Plan Wi-Fi: indoor ceiling, outdoor or bridge. Power each access point from the PoE switch and include it in the budget.
Choose a gateway. If there's no broadband, choose a 4G or 5G router and check coverage on site first.
Rack or desktop? Larger switches are rackmount; check the product page for rack ears.
Common questions
Which TP-Link PoE switch is best for CCTV?
The one whose total PoE budget covers your cameras' combined maximum draw with headroom, and has enough ports. For a small unmanaged system, a TL-SG1005P or TL-SG1218MP; for a managed commercial site, an Omada SG2210P or SG2428P.
Do I need an Omada controller?
Not to make the devices work. Omada switches and access points can generally be set up on their own. You need a controller (hardware, software, cloud or Fusion gateway) for central management and monitoring across the site.
Is the Omada software controller free?
Yes, the software controller is a free download from TP-Link. Hardware controllers such as the OC200 and OC300 are a one-off purchase. Check TP-Link's current terms for any Omada Cloud licensing.
Will TP-Link PoE switches power Hikvision cameras?
Yes. PoE is a standard, so standard PoE Hikvision and HiLook cameras will power from a TP-Link PoE switch within its per-port and total budget limits.
Can I use a 4G router for remote CCTV viewing?
Yes. A 4G router gives the NVR an internet connection for remote viewing. Check coverage at the site, prioritise upload speed, and size the data plan to how often you'll view footage.
How far can a PoE cable run?
Standard Ethernet and PoE are rated to 100m per run. Beyond that, use a PoE extender or place a switch closer to the cameras.
Send us your camera list, access point count and a rough site layout. We'll work out the PoE budget, suggest the switch, and tell you if a smaller one would do. We are a supplier, not an installer.
