The Mechanics of PoE 802.3at Negotiation
Power-over-Ethernet (PoE) systems deliver up to 30W of DC power over standard Cat5e/Cat6 cabling by superimposing voltage onto the twisted data pairs. The Power Sourcing Equipment (PSE)—typically a managed PoE network switch—must verify that a valid, compliant Powered Device (PD) is connected before applying high voltages (44-57 VDC).
The Hardware Detection Handshake
This process relies on an exact physical protocol sequence: Detection, Classification, and Turn-on. During Detection, the PSE applies two consecutive voltages (between 2.8V and 10.1V) and measures the current draw to calculate the input impedance of the PD. If the impedance is not precisely between 23.7 kΩ and 26.3 kΩ, the PSE suspects a non-PoE device is connected and cuts power. In many smart home touch panels, leaky bulk input capacitors or poor PCB trace isolation degrade this signature impedance, preventing startup.
Diagnostic Protocols: Inline Logic Analysis
To diagnose signature negotiation faults, you must monitor the startup voltage and current characteristics of the Ethernet lines under physical load conditions.
Step-by-Step Diagnostic Method:
- Connect an inline PoE splitter or breakout board between your smart panel and the PoE switch.
- Attach two oscilloscope probes: Channel 1 on the DC voltage rails of the PoE input (VPORT), and Channel 2 across a 1 Ω series current-sense resistor.
- Power cycle the switch port and observe the transient voltage steps.
- Check for the presence of the 10V Detection step. If the voltage jumps directly to 48V and then immediately drops to 0V, the PSE detected an overcurrent/inrush fault during classification.
System Logic Diagram: IEEE 802.3at Negotiation Cycle
PSE Output Voltage Profile:
Volts (V)
54V | +———— (Operational Power)
| |
20V | +—(Class Phase)-+
| |
10V | +-(Detect Phase)–+
| |
0V +–+————————————————— Time (ms)
PD Hardware State Transitions:
[Idle] –> [Connect 24.9k Ohm Resistor] –> [Present Class Resistor (Class 4)] –> [Open Gate FET] –> [System Boot]
Mitigation & Remediation Protocols
1. Implement an Active Signature Bypass Switch
To avoid bulk capacitors on the power supply stage interfering with the 25 kΩ signature impedance check, use a dedicated PD controller (such as the Texas Instruments TPS2378). This chip isolates the main load circuit using an internal pass MOSFET until the detection phase completes and voltage climbs past 30V.
2. Add an Inrush Current Control Stage
Ensure that the input capacitive load of the touch panel’s DC-DC converter does not pull more than 400 mA during the first 50 milliseconds of startup. Limit this by configuring the gate drive slew rate of the PD controller’s hot-swap MOSFET, protecting the PSE switch from triggering short-circuit protection.
Diagnostic Matrix
| Negotiation Stage | Target Electrical Range | Failure Indicators & Fixes |
|---|---|---|
| Detection Phase | 2.7V – 10.1V / 23.7kΩ – 26.3kΩ | Impedance too low. Check for bad TVS protection diodes on the RJ45 input lines. |
| Classification Phase | 14.5V – 20.5V / 10mA – 44mA | No class current detected. Swap out the class program resistor (R_CLASS). |
| Inrush Transient Limit | < 400mA ramp limit | Over-current shutdown. Increase the soft-start capacitor value on your power circuit. |
About the Author: Sotiris
Sotiris is a senior IoT systems architect specializing in high-availability smart infrastructure and wireless protocol security.
About the Author: Sotiris
Sotiris is a senior systems integration engineer and home automation architect with 12+ years of professional experience in enterprise network administration and low-voltage control systems. He has custom-designed and troubleshot home automation networks for hundreds of properties, specializing in RF link analysis, local subnet isolation, and secure local IoT integrations.