35  Wired Access: Ethernet

networking-core
network
physical
wired

35.3 Prerequisites

Before diving into this chapter, you should be familiar with:

Ethernet is the most common wired networking technology. Think of Ethernet cables as highways for data - they’re fast, reliable, and can carry lots of traffic without interruption.

When you plug your computer into a router with a cable, that’s Ethernet! The cable has 8 wires inside arranged in twisted pairs that carry electrical signals representing your data.

Term Simple Explanation
Ethernet Wired connection using twisted-pair cables (like RJ45 “phone jack” connectors)
100BASE-T Fast Ethernet - 100 Mbps (megabits per second)
1000BASE-T Gigabit Ethernet - 1000 Mbps (10x faster than 100BASE-T)
PoE Power over Ethernet - delivers both data AND electricity through one cable
Cat5e/Cat6 Cable quality ratings - higher numbers = better performance

“Why would anyone use wires when wireless is so convenient?” asked Sammy the Sensor. Max the Microcontroller had a quick answer. “Reliability! Ethernet never drops out because of interference, it delivers data at consistent speed, and it can even provide power through the same cable.”

“Power over Ethernet is amazing,” said Lila the LED. “A single Ethernet cable plugs into a security camera and delivers both the network connection AND up to 90 watts of power. No separate power cable needed! That is why PoE is so popular for IP cameras, Wi-Fi access points, and building sensors.”

“Ethernet also has zero radio interference,” added Bella the Battery. “In a factory with lots of motors, welders, and heavy machinery that mess up wireless signals, a wired Ethernet connection keeps working perfectly. For critical infrastructure like factory control systems and building automation gateways, wired is the way to go.”

“The trade-off is obvious though,” said Sammy. “You cannot put Ethernet cables in a farmer’s field or on a moving robot. Ethernet is perfect for STATIONARY devices where reliability matters more than mobility. Match the connection type to the job!”


35.4 IEEE 802.3 Ethernet for IoT

Time: ~8 min | Difficulty: Intermediate | Reference: P07.C11.U02

Start with the physical promise: Ethernet can be inspected. The first pass names the standards, speed choices, cable limit, and negotiation evidence you need before comparing it with wireless options.

IoT devices may be connected via a wired connection. For permanent installations, Ethernet is commonly used. The data rate using Ethernet can range from 10 Mbps to more than 1 Gbps (1000 Mbps).

Timeline diagram showing Ethernet standard evolution from 10BASE-T (10 Mbps) through 100BASE-T (Fast Ethernet), 1000BASE-T (Gigabit), 10GBASE-T (10 Gbps), and Power over Ethernet variants (PoE, PoE+, PoE++), with IEEE 802.3 amendment designations and power delivery capabilities for each generation
Figure 35.1: Evolution of Ethernet standards showing increased speeds and Power over Ethernet capabilities

35.4.1 Common Ethernet Standards

10BASE-T: 10 Mbps, found on small microcontrollers and legacy industrial equipment

100BASE-T: 100 Mbps (Fast Ethernet), common on higher-powered microcontrollers or single-board computers like Raspberry Pi

1000BASE-T: 1000 Mbps (Gigabit Ethernet), used for high-bandwidth applications like IP cameras and industrial gateways

Packet PeteCheckpoint: Link Identity

You now know:

  • 10BASE-T, 100BASE-T, and 1000BASE-T describe 10 Mbps, 100 Mbps, and 1000 Mbps Ethernet links.
  • Cat5e supports Gigabit Ethernet up to 100 m, while Cat6 improves crosstalk performance.
  • Auto-negotiation can only select a speed supported by both ends of the link.

35.6 Knowledge Check

Quiz: Ethernet vs Wi-Fi for 4K Video

35.7 How the PoE Budget Calculator Works

Planning a PoE deployment requires matching the switch’s total power budget to the devices it must power. The interactive calculator below is the primary learning activity; this table explains the same logic without making learners read a long code listing.

Step What to Check Why It Matters
1 List every powered device and its maximum wattage The switch must survive peak draw, not just typical draw
2 Multiply each device wattage by its device count Many small loads can exceed the switch’s total budget
3 Check each device’s PoE class against the switch port A switch may have enough total watts but still lack PoE+ or PoE++ per-port support
4 Compare total peak draw with the switch budget If peak draw exceeds the budget, the switch can shut down low-priority ports
5 Leave at least 20% headroom Future devices, cold-start draw, and cable losses all need margin

Why this matters: A 48-port PoE switch might advertise 370 W total budget but support 30 W per port. If you connect 24 devices at 15 W each (360 W), the switch is near capacity and cannot support another powered device at full draw. Always calculate the aggregate budget, not just per-port limits.

PoE planning is the power version of speed negotiation: the port, switch budget, cable route, and device peak draw all have to agree at the same time.

Try It: PoE Switch Budget Calculator

Adjust the device counts to see whether your PoE switch budget is sufficient. The calculator shows peak and typical draw and flags oversubscription.

Packet PeteCheckpoint: Power and Cable Budget

You now know:

  • PoE, PoE+, and PoE++ map to 15.4 W, 30 W, and 60 W or 100 W service classes.
  • A 370 W switch budget can be consumed by many small loads; leave at least 20% headroom.
  • Standard 100BASE-TX and 1000BASE-T runs are limited to 100 m unless a switch, extender, or fibre path regenerates the link.



Common Pitfalls

Standard Ethernet (100BASE-TX, 1000BASE-T) is limited to 100 m per segment. Exceeding this causes signal degradation and high bit error rates. Fix: use a switch or Ethernet extender for runs over 100 m, or switch to fibre optic.

A 24-port PoE switch may have a total power budget of 370 W. Connecting 24 devices each drawing 15.4 W (PoE) exceeds the budget by 2×. Fix: calculate total PoE load and verify it does not exceed the switch’s power budget before deployment.

Poorly terminated connectors, damaged cable jackets, or incompatible cable categories cause Ethernet errors that are harder to diagnose than RF issues. Fix: test Ethernet links with a cable tester before deployment and verify auto-negotiation is operating correctly.

Label the Diagram

Code Challenge

35.8 Ethernet Reliability Contract

Ethernet is often chosen for IoT when the deployment needs predictable delivery more than mobility. A switched full-duplex link gives each device a dedicated path to a switch port, so the design removes radio contention and the old shared-medium collision model.

That reliability is not automatic. It depends on cable length, terminations, switch capacity, power budget, VLAN design, grounding, UPS coverage, and testing. A good Ethernet design records those constraints before the device is mounted high on a wall or bolted into a cabinet.

The practical contract is broader than “plug in a cable.” The device needs a cable plant that can hold the negotiated speed, a switch port with enough power and buffering, a labeled path through patch panels, and an upstream route that will not be saturated by video, telemetry, firmware updates, or management traffic. A stationary sensor may have a stable copper link while the service still fails because the closet switch lost UPS power or because several cameras share an undersized uplink.

For IoT teams, Ethernet is usually the right answer when physical access is possible and the device must be observable for years. The cable gives technicians a place to test continuity, pair order, length, link speed, duplex mode, PoE class, and error counters. Those measurements turn connectivity into evidence that can be reviewed before blaming firmware, cloud services, or radio coverage.

This is why the access-link decision should be made with facilities, network operations, and device owners in the same review. The cable route, switch closet, breaker panel, and maintenance window all become part of the connectivity design.

Ethernet IoT topology showing sensor and PLC devices connected through Cat5e or Cat6 cables to an Ethernet switch, gateway uplink, and PoE-capable network path.
Figure 35.2: Ethernet IoT topology showing sensor and PLC devices connected through Cat5e or Cat6 cables to an Ethernet switch, gateway uplink, and PoE-capable network path.
Reliability area What Ethernet improves What still must be checked
Dedicated link Each device gets its own switched port, so a camera or controller does not compete for airtime with neighboring devices. Cable category, termination quality, link speed, duplex mode, and port error counters.
Shared switch The switch fabric, uplink, VLAN policy, and buffering replace radio airtime as the shared resource. Uplink capacity, switch buffering, VLAN policy, loop prevention, and monitoring.
Power path PoE turns the network cable into the power path. Wattage, port class, cable loss, inrush current, and backup power.
Decision signal

Choose Ethernet when the device is stationary and the value of stable bandwidth, power, security, or deterministic timing justifies the cable run.

35.9 Ethernet Deployment Record

A practical Ethernet record shows that the physical link, power budget, and network service all match the device’s job. This matters because most field failures are not caused by the Ethernet standard itself; they are caused by underspecified installation details.

Start the record at the device and walk outward. Capture the device model, MAC address, expected data rate, required PoE standard, cable category, measured run length, patch-panel label, switch, port number, VLAN, IP addressing source, gateway path, and owner. Then attach evidence: cable certification or tester results, observed negotiated speed and duplex, switch PoE allocation, baseline error counters, and a short load calculation for the uplink. This makes the installation auditable when a technician replaces a switch, moves a patch lead, or adds another high-bandwidth device to the same closet.

The record should also state the design margin. A PoE installation that passes at idle can still fail when heaters, pan-tilt motors, infrared illuminators, or radios enter peak draw. A gigabit access port can still become a bottleneck if many devices converge through a single 1 Gb/s uplink. Treat these margins as acceptance criteria during commissioning, not as notes to investigate after the deployment is already in service.

Record field Example value Why it matters Evidence to keep
Link speed and media 1000BASE-T over Cat6, 72 m run Speed only holds if the cable category, length, and terminations support it Cable-test report and negotiated link speed
PoE class PoE+ camera, 25 W max, 30 W port Total switch budget and per-port class both have to fit Device datasheet and switch PoE allocation screen
Traffic load 25 Mbps stream plus control and management traffic Uplinks, storage, and monitoring paths can bottleneck even when access ports are gigabit Bandwidth calculation and switch utilization capture
Reliability controls UPS-backed switch, tested cable, VLAN, alert on port errors Ethernet removes RF risk but still needs power, physical, and operations proof UPS runtime, VLAN map, error-counter baseline
Deployment moment Checks to perform
Commissioning Verify continuity, pair order, cable length, link speed, duplex, PoE class, and device boot under worst-case power draw.
Operations Monitor link flaps, CRC errors, PoE power draw, switch temperature, uplink utilization, and unexpected speed downgrades.
Change control Record which switch port, VLAN, cable route, and patch-panel label belong to each device so maintenance does not create hidden outages.

The deployment record is where the earlier choices become accountable. If the field evidence does not match the planned speed, power, and route, the release should pause before the device becomes hard to reach.

Escalation trigger

If a cable run approaches 100 m, a PoE budget exceeds 80%, or a port negotiates below the planned speed, treat the installation as a design issue, not a firmware issue.

35.10 Duplex Fixes Collisions Only

Modern switched Ethernet does not use CSMA/CD on full-duplex links, so classic Ethernet collisions are gone. The failure modes move elsewhere: damaged pairs, marginal connectors, cable attenuation, duplex or speed mismatch, oversubscribed uplinks, PoE overload, spanning-tree loops, and unmanaged broadcast traffic.

Industrial Ethernet and TSN add another layer: timing becomes a scheduled resource. The physical link can be healthy while the system still fails if time-aware shapers, VLAN priority, clock synchronization, or switch queueing are misconfigured.

At link-up, auto-negotiation exchanges advertised capabilities and chooses speed, duplex, and flow-control behavior. A bad pair, poor termination, or marginal connector may still produce a link, but the port can downshift, flap, or accumulate frame check sequence and CRC errors under load. These symptoms are physical-layer evidence. They should be checked against cable length, bend radius, connector quality, electromagnetic exposure, and the actual speed reported by both ends of the link.

Above the cable, switching behavior decides whether the reliable access link remains useful. MAC address learning directs frames to the right port, VLAN tags separate traffic domains, and spanning tree or rapid spanning tree prevents loops when redundant paths exist. If those controls are wrong, broadcast storms, blocked ports, or accidental VLAN leaks can break devices whose local link lights still look healthy. PoE adds another hidden state machine: the powered device and power sourcing equipment classify load, apply power, and must survive inrush and peak draw without exhausting the switch budget.

An 802.1Q VLAN tag is a four-byte field inserted into the Ethernet frame after the source MAC address. The tag uses EtherType 0x8100, carries priority bits for traffic handling, and uses a 12-bit VLAN identifier, which gives 4096 possible codes before reserved values and operational policy reduce the usable set. Access ports usually send ordinary untagged frames for one assigned VLAN; trunk ports carry tagged frames for multiple VLANs. A configured native VLAN is the compatibility exception on many trunks: frames for that VLAN cross the trunk without a tag, so the native VLAN must be documented and kept consistent to avoid accidental leakage or confusing packet captures.

Long cable routes add a security and maintenance problem that a short patch lead hides. A submarine fiber, campus backbone, buried sensor trunk, or utility-corridor Ethernet run can fail because the cable is cut, crushed, flooded, bent past its radius limit, tapped, or damaged by construction and wildlife. Treat those runs as field infrastructure: record the route, burial or conduit protection, splice points, inspection owner, and the expected signal margin before the service depends on it.

Physical tapping is part of that review. A conductive tap makes direct electrical contact with a copper conductor; an inductive tap couples to electromagnetic fields and may be harder to notice because it does not require the same visible break. Optical fiber changes the details but not the principle: a bend, splice, or clamp can leak or disturb signal energy. Countermeasures start with physical inspection and route control, then add protective conduit, pressurized or monitored enclosures where justified, faster bitrate or optical-power baselines that make loss changes visible, and alarms on unexpected error, attenuation, or spectrum changes.

Time-domain reflectometry (TDR) turns cable troubleshooting into a measurement instead of a guess. The tester sends a pulse down the line and measures reflected energy. The delay estimates distance to the anomaly; the shape helps distinguish an open cut, short, bad termination, moisture intrusion, crushed section, splice, or tap. The same idea explains why a wave pulse reflects differently at a soft boundary than at a hard boundary: impedance changes decide what returns to the tester.

Pete’s Delivery Slip

  • Address: a deployment record starts at the device – model, MAC, cable category, and measured run length.
  • Route: switch, port, VLAN, and gateway path all belong in the same record as the cable itself.
  • Receipt: a TDR pulse’s delay names the distance to a fault, and its shape says whether it’s a cut, short, or bad termination.

Environmental protection belongs in the same record. Rodents may chew cable jackets, insects may attack fills or seals, birds may nest on aerial routes, and water can enter damaged sheath or poor glands. A robust design uses the right sheath, armored or wrapped sections where needed, sealed joints, strain relief, slack loops, drip paths, and periodic inspection. The important lesson for IoT is operational: do not call a wired link “reliable” until the physical route has a diagnostic method and a maintenance plan.

For deterministic industrial traffic, the failure pattern can be even subtler. Time-Sensitive Networking features such as IEEE 802.1AS time synchronization and IEEE 802.1Qbv time-aware scheduling depend on compatible devices, clock design, queue configuration, and profile discipline across the path. A single unmanaged switch, gateway boundary, or unverified queue policy can destroy timing even though ordinary pings and file transfers appear normal.

Failure area Typical evidence First checks
Physical errors CRC errors, link flaps, and speed downgrades Cable, connector, length, bend radius, and electromagnetic environment
Power errors Reboots, brownouts, or PoE class warnings under load Class negotiation, inrush draw, total budget, cable loss, and UPS behavior
Switching errors Devices unreachable despite good link lights Loops, VLAN mistakes, congested uplinks, blocked ports, and broadcast storms

Packet PeteCheckpoint: Operations Evidence

You now know:

  • A reliable Ethernet record includes device identity, cable category, run length, switch port, VLAN, PoE class, and owner.
  • CRC errors, link flaps, speed downgrades, and PoE class warnings are physical evidence, not vague connectivity symptoms.
  • A run near 100 m, PoE utilization above 80%, or a port below planned speed should trigger design review.

Knowledge Check: PoE Deployment Record

35.11 Summary

Ethernet remains the gold standard for wired IoT connectivity, offering unmatched reliability and performance for stationary devices.

Key Takeaways

When to Use Ethernet:

  • High-bandwidth applications (video, large data transfers)
  • Mission-critical systems requiring deterministic timing
  • Security-sensitive deployments (no wireless eavesdropping)
  • Static installations where cabling is feasible
  • Devices that can benefit from PoE (cameras, access points, sensors)

Ethernet Standards for IoT:

  • 10BASE-T: 10 Mbps for legacy equipment and simple low-data-rate sensors.
  • 100BASE-T: 100 Mbps for microcontrollers and basic IoT gateways.
  • 1000BASE-T: 1 Gbps for cameras, gateways, and industrial systems.
  • PoE (802.3af): 15.4 W for basic cameras, VoIP phones, and sensors.
  • PoE+ (802.3at): 30 W for 4K cameras, Wi-Fi 6 access points, and access-control devices.
  • PoE++ (802.3bt): 60 W or 100 W for PTZ cameras, displays, thin clients, and other high-power devices.

Best Practices:

  1. Use PoE whenever possible to simplify installation
  2. Plan cable runs during construction (cheaper than retrofit)
  3. Use Cat6 or better for future-proofing
  4. Consider TSN for industrial control applications
  5. Ethernet for backbone, wireless for edge where needed

35.12 What’s Next?

Topic Chapter Description
Wireless Wi-Fi for IoT Wireless Network Access: Wi-Fi for IoT IEEE 802.11 protocols including Wi-Fi 6 and Wi-Fi HaLow designed for IoT density and range requirements
Network Access Overview Network Access and Physical Layer Overview How the physical and network access layers fit into the OSI model and IoT protocol stacks
Bluetooth and BLE Bluetooth Fundamentals Short-range wireless for wearables, beacons, and battery-powered sensors
LoRaWAN LoRaWAN Overview Long-range, low-power WAN technology for outdoor and agricultural IoT sensors
Network Topologies Topologies Introduction Star, mesh, bus, and hybrid topologies and when each suits specific IoT deployments
Industrial Protocols Industrial IIoT Protocols PROFINET, EtherNet/IP, and Time-Sensitive Networking (TSN) for deterministic industrial control