Cat6A Cabling for KNX IP Backbone and 10G PoE Switches
Selecting Cat6A over Cat6 for KNX IP installations is not merely future-proofing — it determines whether 10GBase-T reaches every outlet reliably, whether PoE power budgets hold at elevated cable temperatures, and whether S/FTP shielding protects KNXnet/IP data from EMI sources inside the same building.
Why Cat6A over Cat6 for KNX IP networks
Cat6A (Augmented Category 6) operates to 500 MHz and supports 10GBase-T at full channel lengths of 100 metres. Standard Cat6 supports 10GBase-T only to 55 metres — a length that is marginal for the 90-metre horizontal runs that are common in commercial buildings. Once the horizontal cable run approaches 90 metres, any structured cabling contractor who installs Cat6 and claims 10G capability is delivering a non-compliant installation.
For KNX buildings the S/FTP (screened foiled twisted pair) variant of Cat6A is strongly preferred. Variable frequency drives (VFDs) for fan coil units, motors on roller blinds, and busbar runs in distribution panels all generate broadband EMI in the frequency range that corrupts 10G Ethernet. The S/FTP overall braid screen and individual foil screen on each pair attenuates this interference before it reaches the differential signal. An unshielded UTP Cat6A cable routed in the same tray as VFD output cables is a recipe for intermittent 10G link drops that are extremely difficult to diagnose.
| Parameter | Cat6 (Class E) | Cat6A (Class EA) |
|---|---|---|
| Bandwidth | 250 MHz | 500 MHz |
| 10GBase-T channel length | 55 m maximum | 100 m maximum |
| PS-ANEXT requirement | Not required | ≥67 dB at 500 MHz |
| Typical OD (S/FTP) | 6.5 mm | 7.5–8.5 mm |
| PoE current capacity | Adequate for 802.3af/at | Adequate for 802.3bt Type 4 |
| EMI susceptibility | Moderate (UTP) | Low (S/FTP shielded) |
ISO/IEC 11801 Class EA channel requirements
ISO/IEC 11801 Edition 3 defines the Class EA permanent link and channel parameters that a Cat6A installation must meet. A channel comprises the permanent link (fixed horizontal cable from patch panel to outlet, maximum 90 m) plus equipment cords at both ends (maximum 10 m total), giving the 100 m channel. A channel test verifies the entire end-to-end path as it will be used; a permanent link test verifies only the fixed installation.
Class EA channel parameters at 500 MHz
Insertion loss (attenuation): ≤ 20.9 dB at 500 MHz Return loss: ≥ 10.0 dB at 500 MHz NEXT (near-end crosstalk): ≥ 35.3 dB at 500 MHz PS-NEXT: ≥ 32.3 dB at 500 MHz ELFEXT (equal level FEXT): ≥ 12.8 dB at 500 MHz PS-ELFEXT: ≥ 9.8 dB at 500 MHz PS-ANEXT (alien near-end XT): ≥ 67.0 dB at 500 MHz PS-AACRF (alien FEXT): ≥ 40.0 dB at 500 MHz Propagation delay: ≤ 548 ns Delay skew: ≤ 50 ns
PS-ANEXT (power-sum alien near-end crosstalk) is the parameter that most commonly fails when Cat6A cables are bundled in large groups without sufficient spacing. Alien crosstalk is electromagnetic coupling between adjacent cables — not between pairs within the same cable. Cat6A S/FTP largely eliminates alien crosstalk via the overall braid screen, but correct installation practice still requires that bundles do not exceed the manufacturer specification for bundle diameter.
LSOH cable jacket — mandatory in public buildings
EN 50266 (harmonised with IEC 60332-3) requires Low Smoke Zero Halogen cable jackets in escape routes, public corridors, and multi-occupancy residential buildings. Cat6A S/FTP LSOH variants (e.g. Draka UC900 LSOH, Belden 10GX LSOH) produce minimal toxic smoke if exposed to fire. Standard PVC-jacketed cables are not permitted in these locations regardless of cabling standard compliance.
PoE budget planning for KNX devices
Power over Ethernet delivers DC power alongside data on the same Cat6A cable pairs. IEEE 802.3 defines four PoE standards with increasing power delivery: 802.3af (Type 1, 15.4 W at PSE port), 802.3at (Type 2, 30 W), 802.3bt Type 3 (60 W), and 802.3bt Type 4 (100 W). The power available at the powered device (PD) is always less than the PSE port power due to cable resistance losses.
| Device | PoE class | PD power draw | Notes |
|---|---|---|---|
| Gira G1 touch display | 802.3at (Type 2) | 25 W | Requires 802.3at switch port; 802.3af insufficient |
| Axis P3245-V camera | 802.3af (Type 1) | 12.95 W | Most Axis fixed cameras draw under 13 W |
| 2N IP Verso intercom | 802.3at (Type 2) | 30 W | Max 802.3at budget; select switch with 30W per-port |
| Ubiquiti UniFi AP | 802.3af (Type 1) | 9 W (typical) | Actual varies by model; U6-Pro draws 802.3at |
| IP door lock controller | 802.3af (Type 1) | 6–10 W | Low draw; any 802.3af port sufficient |
| IP display/signage panel | 802.3bt (Type 3) | 35–50 W | Requires 802.3bt switch — verify per model |
Switch total PoE budget is a hard limit shared across all ports. A 24-port 802.3at switch with a 370 W PoE budget cannot simultaneously deliver 30 W to all 24 ports (which would require 720 W). Plan the switch PoE budget by summing the maximum draw of all connected devices and adding a 20 percent margin. For buildings where PoE loads grow over time, select switches with field-upgradeable PoE power supplies.
Temperature derating — critical for bundled cables
Cat6A S/FTP cable resistance increases with temperature. At 20°C: ~9.38 Ω/100m per pair At 60°C: ~11.1 Ω/100m (18% increase) At 80°C: ~12.0 Ω/100m (28% increase) PoE power loss in cable = I² × R At 80°C cable temperature, a device drawing 15 W at 48V (313 mA) over 100m Cat6A: Resistance = 12.0 Ω/100m × 2 pairs (supply+return) Voltage drop = 0.313A × 12.0Ω = 3.76V PD voltage = 48V - 3.76V = 44.24V ✓ (still in range) Bundled cables in conduit reach 80°C easily under full PoE load. Apply derating factor per IEC 60228 for bundled conductors. Cat6A handles PoE current well within conductor rating (rated for continuous 10A at 1000V — PoE never exceeds 1A).
VLAN design for KNX IP networks
Segmenting a KNX building network into VLANs provides security isolation between subsystems and controls KNXnet/IP multicast flooding. Without VLANs, KNXnet/IP multicast frames (addressed to 224.0.23.12 on UDP port 3671) are forwarded to all ports on the switch, consuming bandwidth and exposing automation telegrams to every connected device in the building.
| VLAN | ID | Members | Notes |
|---|---|---|---|
| KNX Automation | VLAN 10 | KNX IP routers, Gira X1, WAGO controllers | IGMP snooping enabled; DSCP AF41 for QoS |
| Security | VLAN 20 | IP cameras, NVR, 2N intercoms, door controllers | Isolated from automation; no internet access |
| Building IT | VLAN 30 | Staff PCs, printers, building management server | Standard DHCP; internet via firewall |
| Guest | VLAN 40 | Guest Wi-Fi, visitor devices | Internet only; isolated from all other VLANs |
IGMP snooping on VLAN 10 constrains KNXnet/IP multicast to only those switch ports where KNX IP routers, the Gira X1, or a KNX visualisation server have joined the multicast group 224.0.23.12. The switch learns which ports have multicast listeners by inspecting IGMP join and leave messages, then forwards multicast only to those ports. Without IGMP snooping, multicast is treated as broadcast and delivered to all ports in VLAN 10, which undermines the segmentation.
QoS for KNXnet/IP
Mark KNXnet/IP UDP traffic (port 3671) with DSCP AF41 (Assured Forwarding class 4, low drop precedence) at the switch ingress port connected to KNX IP routers. This ensures KNX telegrams are queued ahead of bulk data transfers during periods of network congestion. On Cisco switches, configure a DSCP-to-queue map that places AF41 in the priority queue. On Ubiquiti UniFi, enable Smart Queues and tag KNX VLAN with appropriate DSCP marking at the wireless uplink.
Cable routing — separation from power cables
ISO/IEC 11801 and EN 50174-2 specify minimum separation distances between structured cabling and power cables to control EMI coupling. The required separation depends on the cable type, the power cable voltage, and whether any EMI sources such as VFDs or large motors are present in the same cable route.
| Scenario | Minimum separation | Alternative |
|---|---|---|
| UTP Cat6A parallel to 230V power cable | 50 mm | Use S/FTP to reduce to 20 mm |
| S/FTP Cat6A parallel to 230V power cable | 20 mm | Physical separator in shared tray |
| Any Cat6A parallel to VFD output cable | 300 mm minimum | Separate tray; conduit for data cables |
| Crossing power cable (perpendicular) | 0 mm (cross at 90°) | Perpendicular crossing acceptable at any separation |
| In shared cable tray with power | Physical separator required | Separate compartments within tray |
Installation technique matters as much as separation. The maximum pulling tension for a Cat6A 4-pair cable is 110 N — exceeding this compresses the pair twist geometry and permanently degrades the crosstalk performance. Use cable lubricant in long conduit runs and pull from the panel end toward the field outlet. The minimum bend radius is 8 times the cable outer diameter: for an 8 mm OD Cat6A cable, this is 64 mm. Kinking Cat6A at a 90-degree bend over a cable tray edge is a common installation error that causes channel test failures.
Patch panel in KNX and electrical panels
DIN-rail Cat6A keystone patch panels from Metz Connect (artLine series), Belden (KeyConnect DIN), and Telegärtner (MFP8) mount directly on a 35 mm DIN rail inside a standard electrical panel enclosure. This eliminates the need for a separate 19-inch network cabinet in residential and light commercial KNX installations.
Wire each keystone port to either T568A or T568B — choose one convention and use it project-wide without mixing. T568B is more common in European commercial projects. For S/FTP cables, the screen drain wire and the metal keystone body must be connected to the patch panel earth bar, which in turn connects to the PE bar of the panel via 4 mm² green-yellow wire. Connect the screen at the patch panel end only — connecting the screen at both ends creates a ground loop that introduces 50 Hz hum into the cable and can damage sensitive electronics in abnormal fault conditions.
Label each patch panel port with the ISO 11801 outlet identifier: building code, floor number, room number, and outlet number in the format B1-F2-R5-01. The same label appears on the field outlet faceplate and on both ends of any patch cord. This labelling convention makes fault-finding and moves-adds-changes straightforward without a floor plan being present.
Channel testing requirements
Every installed Cat6A channel must be tested with a field tester calibrated to the Cat6A augmented standard before the installation is accepted. Acceptable testers include the Fluke DSX-8000 and the Fluke Versiv platform with DSX-8000 head. Testing to TIA-568-C.2-1 (Cat6A augmented) or ISO/IEC 11801 Class EA is both common in Europe; the ISO standard is preferred for international projects.
Required test report contents per channel
For each channel: - PASS / FAIL result - Worst-case parameter (insertion loss, NEXT, ANEXT, etc.) - Margin to limit (dB) for worst-case parameter - Measured cable length - Propagation delay and delay skew - Test date and time - Field tester make, model, firmware version, serial number - Calibration certificate expiry date - Technician name and signature 10GBase-T uses all 4 pairs for both transmit and receive simultaneously (full-duplex 4-pair). A single pair failure disables the link entirely — unlike 100Base-TX which uses only 2 of the 4 pairs. Verify all 4 pairs pass on every link. Retain test reports for the building lifetime — they are required evidence for any future insurance or warranty claim.
Managed switch selection for KNX IP backbone
KNX IP backbone switches must be fully managed — consumer unmanaged switches cannot be configured for VLANs, IGMP snooping, QoS, or PoE power management, and their use in a professional KNX installation is technically non-compliant with KNX Association IP router commissioning guidelines.
| Switch model | PoE budget | Uplinks | Suitability |
|---|---|---|---|
| Cisco SG350-28P | 195 W | 2× GbE + 2× SFP combo | Residential and small commercial KNX; IGMP v2/v3 |
| Ubiquiti USW-Pro-24-PoE | 400 W | 2× 10G SFP+ | Medium commercial; UniFi ecosystem; cloud management |
| Netgear M4250-26G4F-PoE+ | 480 W | 4× SFP+ | AV and KNX combined; IGMP, DSCP, 802.1Q VLAN |
| Cisco CBS350-24P-4G | 195 W | 4× SFP | Mainstream commercial; full VLAN, DHCP snooping, mirror |
Minimum feature requirements for any KNX IP backbone switch: 802.1Q VLAN tagging, IGMP v2 and v3 snooping, 802.3at PoE minimum (802.3bt preferred for future devices), DHCP snooping to prevent rogue DHCP servers from disrupting KNX device addressing, port mirroring for KNX network monitoring and fault diagnosis, and SNMP or REST API management for integration with building management systems.
Need a certified Cat6A and KNX IP network installed to spec?
We design and install Cat6A structured cabling, DIN-rail patch panels and managed PoE switches — fully tested per ISO/IEC 11801 and integrated with your KNX smart building panel.
Request a quote →