Configure PoE

1. Ensure that the device you want to provide power to is connected to the firewall using an Ethernet cable through a supported PoE port on the firewall.

   Using a Cat5 or Cat6 Ethernet cable ensures the most reliable power transfer. A Cat3 cable, for example, will only be able to transfer as much as 20W.
2. Select NetworkInterfacesEthernet and choose the interface you have cabled.
3. PoE is active on all PoE ports by default. On the Ethernet Interface window, selecting Advanced and viewing PoE Settings shows that PoE Enable is already enabled.

   You can also use the CLI to enable or disable PoE. After logging in to the firewall using terminal emulation software, enter configure followed by set network interface ethernet ethernet1/9 poe poe-enabled {yes | no} where “ethernet1/9” corresponds to the PoE port you wish to enable or disable.

   Before continuing to the next step, determine the maximum amount of power that is supported by the connected powered device (PD). This value is dependent on the type and class of the PD.
4. Set the amount of power reserved by the port by entering a value (in Watts) for PoE Rsvd Pwr. This value must be a number between 0 and the Maximum Reserved Power of the port as defined in PoE. A 0 indicates that no power is reserved by that PoE port.

   You can also use the CLI to configure PoE reserved power. Enter configure followed by set network interface ethernet1/9 poe poe-rsvd-pwer <value> where “ethernet1/9” corresponds to the PoE port you wish to configure and “<value>” refers to the number of Watts ranging from 0 to the maximum supported by the interface.

   The total PoE Rsvd Pwr of all of your PoE ports should not exceed the Total PoE Budget Allowed. If you go over the Total PoE Budget Allowed, one or more powered devices will enter the Den (Power Denied) state until you reallocate the reserved power.

   A PoE port can also enter Den or Dis (Disabled) state based on the current Total Allocated Power. Total Allocated Power refers to the sum of all PoE ports' Reserved Power or to the sum of Actual Allocated Power permitted by all PDs. If the total Reserved Power is less than the total Actual Allocated Power, the PoE port enters the Dis or Den state.

   A PoE port in the Dis or Den state cannot be resolved by disconnecting and reconnecting the PD. Instead, use one of the following methods to resume sensing power on the connected PD:

   • Disable PoE on the interface by unchecking PoE Enable. Apply the setting and then go back to the same interface and check PoE Enable.
   • Set the affected port link state to auto or up.
   • Change the PoE Rsvd Pwr of the affected PoE port to equal or greater than the PD's power requirement.

   If no device is connected to a PoE port, ensure that either PoE Enable is unchecked or the PoE Rsvd Pwr value is 0 to avoid consuming a portion of the PoE budget.
5. Click OK.
6. Commit your changes.
7. Verify the status of the PoE ports by either checking the firewall web interface or the CLI.

   1. To verify by the firewall web interface, log in to the firewall and select DashboardWidgetsSystemInterfaces. Hover the mouse over the PoE port icons, identified by a lightning bolt symbol, for specific interface details. Select DashboardWidgetsSystemPoE Power Budget for power allocation information. To view status messages and other PoE information, select NetworkInterfacesPoE.
   2. To verify using the CLI, enter show poe or show poe detail.