How Should a Hong Kong Company Choose a Network Switch?
Key Takeaway
The three decisive numbers are port count and total PoE power budget, uplink speed, and management mode. The most common mistake in Hong Kong offices is an insufficient PoE budget (treating "power per port" as "total power"), followed by connecting Wi-Fi 7 access points over 1G-only uplinks. Also note that subscription-based licences (such as Meraki) disable the equipment's features once they expire, so subscription fees must be counted into the TCO before purchase.
Key Comparison
| Standard | Name | Power Per Port | Typical Use |
|---|---|---|---|
| IEEE 802.3af | PoE | 15.4W | Older VoIP phones, 2.4GHz APs |
| IEEE 802.3at | PoE+ | 30W | IP cameras, Wi-Fi 5 / 6 APs |
| IEEE 802.3bt Type 3 | PoE++ | 60W | Wi-Fi 6E / Wi-Fi 7 APs, multi-radio APs |
| IEEE 802.3bt Type 4 | PoE++ | 90W | Thin clients, POS, digital signage |
Practical Takeaways
- The PoE budget is the number-one trap: the "power per port" on a spec sheet (e.g. 30W) and the "total power for the whole switch" (e.g. 370W or 720W) must be distinguished. A switch labelled "24-port PoE+, 30W per port" usually has a total budget of only 370 to 450W, not 720W. Connecting 16 Wi-Fi 6E access points (about 25W each, 400W in total) plus 4 cameras (32W) already exceeds the budget, and the switch will start throttling power. Rule of thumb: the sum of the peak power draw of all PoE devices + 30% headroom.
- Management mode: whenever VLANs, PoE budget control, 802.1X authentication or stacking of multiple switches is needed, always choose Fully Managed. For an office of 20 to 80 people, "an access layer + one L3 switch as a small core" is usually sufficient - there is no need to introduce a full three-tier architecture.
- Derive the uplink from equipment specifications: general office use (documents, video conferencing) takes 1G access + a 10G SFP+ uplink; high-density Wi-Fi 6E / 7 takes 2.5G or 5G access + a 10G / 25G uplink; server connections take 10G access + a 25G / 100G uplink. Cabling reminder: Cat5e can generally run 2.5GBASE-T but almost never 10GBASE-T; Cat6A is recommended for new builds, and fibre for cross-floor and long-distance runs.
- Must-have feature list: VLAN (802.1Q), 802.1X / MAB, ACL, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard, IGMP Snooping (essential for IPTV and AV-over-IP), QoS / DSCP, RSTP / MSTP, LACP, SNMP v3 / Syslog, port mirroring, and stacking.
- The licence model must be counted into the TCO: Cisco Catalyst requires purchasing Network Essentials / Advantage licences; Cisco Meraki is subscription-based and loses management and features if the subscription is not renewed on expiry; some HPE Aruba CX features require a Central subscription; Ubiquiti UniFi and TP-Link Omada have no subscription. This is a trap many Hong Kong companies have fallen into.
- Hong Kong practice: rented offices often do not allow casual drilling or re-cabling, so confirm the grade of the existing cabling before planning - otherwise you may buy a 2.5G switch and never see that speed. The communications cabinet has limited space: a 48-port switch plus a firewall and a modem often fills it already, so cooling and socket counts must be considered. Switches are a hotspot for grey imports (price gaps can reach 30% to 40%); for core enterprise network equipment, strongly prefer authorised-channel stock and add a rapid hardware-replacement service (such as Cisco Smart Net Total Care or HPE Care Pack).
Tip: eight steps to selection: inventory the devices (add 30% for growth) → calculate PoE demand (add 30% headroom) → decide port speeds (derived from AP and server specifications) → decide the uplink (10G is the minimum standard) → choose the management mode and brand → confirm the licence model and 3- to 5-year TCO → plan redundancy (whether the core is stacked or dual) → confirm warranty and spare parts.
