TP-Link TL-SG2210MP managed PoE+, not TL-SG1428PE + TL-SG1008P pair
Context
Section titled “Context”The v1.9 plan specified a two-switch topology:
- One TL-SG1428PE 24-port PoE switch in the computer room (main).
- One TL-SG1008P 8-port PoE switch on the production floor per module (per-line uplink).
This topology made sense for v1.9’s 6–8 camera Phase I scaling to ~20 cameras in Phase II. After the 2026-05-11 hardware revision (ADR-001), Phase I has only 2 cameras — the v1.9 topology is over-provisioned and lacks the management features needed for the new security posture.
Decision
Section titled “Decision”Use a single TP-Link TL-SG2210MP smart-managed PoE+ switch (8× PoE+ ports + 2× SFP, 150 W PoE budget) for Phase I.
Why:
- Sufficient port count. 2 cameras + Jetson + 1 uplink = 4 ports used; 4 spare for Phase I/II growth.
- Managed features. VLAN support, port isolation, ACLs — required to air-gap the Amcrest camera VLAN per ADR-001.
- PoE budget. 150 W covers 2× IPC-grade cameras (~5 W each) with massive headroom.
- Single device. Simpler install, single point to monitor, no inter-switch wiring on the production floor.
Consequences
Section titled “Consequences”- Phase III scale will outgrow it. 24 cameras at ~10 W each = 240 W, plus 24 ports. Phase III plan: TL-SG3428MP (28 ports, 384 W PoE) or fan out by module.
- Single-switch failure domain. If the switch fails, all cameras lose connectivity. Acceptable for Phase I; revisit redundancy for Phase III.
- End-of-Sale note. TL-SG2210MP is EOS; successor model (same form factor) is fine if a replacement is needed.
References
Section titled “References”- ADR-001 (Amcrest cameras) — the camera VLAN requirement is what drove “managed” not “smart.”