Industrial Ethernet Switch Buying Guide: Managed vs Unmanaged, PoE, DIN Rail (ORing, Phoenix Contact FL SWITCH, Teltonika TSW)

An unmanaged switch is plug and play: no IP address, no configuration, no diagnostics. It suits five to eight devices in one cabinet. A managed switch adds a web page and SNMP, VLANs to separate camera traffic from I/O, quality of service for PROFINET or EtherNet/IP frames, ring redundancy and alarm relays. The moment a network leaves one cabinet, carries more than one kind of traffic or must recover from a broken cable without stopping the line, managed is the answer. Phoenix Contact's FL SWITCH 1000 and 1100 are the unmanaged tier and the FL SWITCH 2000 the managed tier; ORing and Teltonika split the same way by model number.

A Layer 2 switch forwards within one subnet; Layer 3 routes between subnets. Plants keep each cell on its own subnet so OEM IP plans never collide, and routing between cells and SCADA has to happen somewhere; doing it in the backbone switch keeps plant traffic on the plant network and allows VRRP redundancy. Phoenix Contact's FL SWITCH GHS 12G/8 offers Layer 3 as an option, with the GHS 4G/12-L3 as a dedicated version, and its Gigabit Modular Switch takes Layer 3 as a licence on an SD card. A cell switch needs none of this.

A fixed IP camera draws 6 to 13 W, a PTZ dome 25 to 60 W, a Wi-Fi access point 13 to 25 W. IEEE 802.3af delivers 15.4 W per port, 802.3at (PoE+) 30 W, 802.3bt 60 or 90 W. Add the devices, add 20 per cent, and check against the switch's total budget, which is usually less than ports times 30 W. Teltonika's TSW100 gives four PoE+ ports from a 120 W budget and the TSW202 eight PoE+ ports from 240 W; ORing's IGPS series and Phoenix Contact's FL SWITCH 1000T-2POE-GT-2SFP cover the same ground. The budget comes from the DC input, so a 240 W switch needs a 48 to 57 V supply of around 300 W.

A ring survives a cable break anywhere because the switches block one link in normal running and open it when a break is detected. MRP (IEC 62439-2) is the PROFINET standard, recovering in 200 ms or 10 ms depending on class, with one switch as manager and the rest as clients. ERPS (ITU-T G.8032) is the telecom equivalent used by infrastructure and metro networks. Vendor rings are faster: ORing's O-Ring claims recovery under 30 ms across 250 switches, with Open-Ring and O-Chain for mixed and chained topologies; the same ORing models also run MRP and MSTP. Phoenix Contact's FL SWITCH 2000 supports RSTP and MRP; Teltonika's TSW202 lists MRP. Mixed-brand rings should stay on MRP or ERPS.

Copper stops at 100 m and carries earth potential and lightning between buildings; fibre does neither. Multimode OM3 covers 2 km at 100 Mbit/s and about 550 m at Gigabit; single-mode covers 10 to 40 km on standard modules and Phoenix Contact quotes up to 80 km for the FL SWITCH GHS with the right SFP. Specify switches with SFP slots rather than fixed fibre ports: Teltonika's TSW200, TSW202, TSW210 and TSW212 all carry two SFP slots, ORing's IGS models carry two to four, and Phoenix Contact's FL SWITCH 2200 and 2300 add fibre with marine and process approvals. Insist on industrial-temperature SFPs rated minus 40 to plus 85 C.

A cabinet switch should be rated minus 40 to plus 75 C fanless, which all three ranges here meet, in IP30 metal housing for DIN rail. For mounting outside a cabinet, on a machine frame or a vehicle, you need IP67 with M12 connectors, which ORing offers across several series. Conformal coating for coastal and chemical sites, vibration and shock to IEC 60068, and a redundant DC input (typically 12 to 48 V, or 7 to 57 V on Teltonika) with a relay output that closes on power or port loss are the next three lines to check. Wire the alarm relay to a PLC input so a lost supply is noticed.

Rolling stock and trackside equipment call for EN 50155, which covers a wide DC input (24 to 110 V), M12 connectors, EN 45545 fire and smoke behaviour and EN 61373 shock and vibration; ORing's transportation series are built to it. Substations and utility automation call for IEC 61850-3 and IEEE 1613, which specify surge, fast transient and electromagnetic immunity far beyond IEC 61000 industrial levels, plus zero packet loss during the disturbance. Marine and offshore add DNV and similar approvals, which Phoenix Contact's FL SWITCH 2200 and 2300 carry. Ask for the certificate; approvals are per model.

Remote pump houses, solar inverters, weighbridges and kiosks need a cellular router with a firewall, VPN (IPsec, OpenVPN or WireGuard), dual-SIM failover and remote management. Teltonika's RUT241 is the compact LTE unit with two Ethernet ports; RUT951 adds dual SIM, four ports and Wi-Fi; RUT956 adds RS232 and RS485 serial, digital I/O and GNSS for PLC and meter connections; RUTX11 brings Gigabit ports, dual-band Wi-Fi and faster LTE; RUTX50 is the 5G model with five Gigabit ports. For more than four devices put a TSW switch behind the router, and never expose a PLC on the WAN side.

ORing's model numbers tell you the speed and the tier: IGS is Gigabit, IES is Fast Ethernet, IGPS adds PoE, the 1000-series numbers are unmanaged, the 3000 series cost-effective managed and the 9000 series full managed with O-Ring. Phoenix Contact's FL SWITCH ladder runs 1000 and 1100 unmanaged, 2000 managed with PROFINET Conformance Class B and MRP, 2200 and 2300 with fibre and marine approvals, and GHS for Gigabit backbone with optional Layer 3. Teltonika's TSW line: TSW010 (five 10/100 ports, unmanaged), TSW110 (five Gigabit, unmanaged), TSW100 (five Gigabit with four PoE+), TSW200 and TSW210 (eight Gigabit plus two SFP, unmanaged, with and without PoE+), TSW202 and TSW212 (the managed pair, with and without PoE+), all on 7 to 57 V DC. For a PROFINET cell, FL SWITCH 2000 or ORing 3000 or 9000; for CCTV and Wi-Fi, TSW202 or IGPS; for a plant backbone, GHS or ORing 9000 with fibre.

Do I need a managed switch for a small PLC network?

For five to eight devices in one cabinet with no ring, an unmanaged switch is fine. Choose managed as soon as you need ring redundancy, VLANs, PROFINET priority or port diagnostics reported to the PLC.

How do I calculate the PoE budget for a camera network?

Add the rated draw of every camera and access point (fixed cameras 6 to 13 W, PTZ domes 25 to 60 W, access points 13 to 25 W), add 20 per cent, and compare with the switch's total PoE budget rather than its per-port rating. Then size the 48 to 57 V supply for the full budget.

What is the difference between MRP and ERPS?

Both are standard ring protocols. MRP (IEC 62439-2) is the automation standard used by PROFINET and most PLC-vendor switches, with recovery in 200 ms or 10 ms. ERPS (ITU-T G.8032) comes from telecom networks and suits infrastructure rings.

Can I use a Teltonika router instead of a switch?

Only for a site with two to four devices. The RUT routers connect a site to the internet or a private APN with VPN and failover. For a remote site with more devices, put a TSW switch behind the router.

When is a fibre link mandatory?

Any run over 100 m, any link between buildings or between separately earthed structures, and anywhere lightning or heavy EMC is present. Use SFP-slot switches so the module sets the distance, with multimode for up to 2 km and single-mode beyond.