AI-narrated version of this post using a synthetic voice. Great for accessibility or listening while busy.
Affiliate disclosure: As an Amazon Associate, HomeNode earns from qualifying purchases at no additional cost to you.
Short answer: For most home labs running several outdoor cameras or access points, the Ubiquiti ETH-SP-G2 Surge Suppressor/Protector Multipack is the practical choice because you need units in pairs and a multipack covers several runs at once. If you are pushing high-wattage PoE++ to heaters, PTZ cameras or multi-radio APs, the Tupavco TP302x2 is rated for Class 8 power across all four pairs. For a single 10GbE run or one protected drop at a rack, the DITEK DTK-MRJPOE and APC ProtectNet PNET1GB cover that case with less hardware to mount.
This guide is for anyone whose Ethernet leaves the building. A camera under the soffit, a wireless bridge on a pole, an access point in a detached garage — each run is a long conductor sitting outside, and that changes the risk profile compared with cabling inside drywall.
The problem is not a direct lightning hit. Those are rare and largely unsurvivable for small electronics. What kills PoE gear far more often is an induced transient: a nearby strike, a utility fault or a switching event that couples voltage onto a long cable and sends it into the PHY of your switch.
Why outdoor Ethernet runs are the weak point
Ethernet is unpowered, low-voltage and feels harmless. It is also, in a typical home install, the only conductor travelling from an exposed pole or roofline into the middle of your network stack. A 50-metre run to a barn is an antenna whether you intended it or not.
When lightning strikes within a few hundred metres, the collapsing magnetic field induces current in nearby conductors. The longer and straighter the cable, the more energy it picks up, and the easiest path onward is usually through the camera’s PHY, down the cable and into your PoE switch.
Ground potential rise catches people out too. A strike to a tree, a mast or the utility service raises local earth voltage for a few microseconds. If the camera end and the switch end sit at different reference potentials, the Ethernet cable becomes the bridge that equalises them.
What usually dies first
Switch ports fail more often than cameras. The camera is small and isolated; the switch concentrates every outdoor run into one chassis. A good 8-port PoE switch for security cameras is worth shielding behind a suppressor.
- Advanced Surge Protection: Safeguard your valuable electronics from power surges, lightning strikes, and electrical s…
- Multi-Pack Convenience: This listing includes three Ubiquiti ETH-SP-G2 surge suppressors, providing protection for mu…
- Ethernet Compatibility: Designed specifically for ethernet networks, ensuring that your network equipment remains saf…
Protect both ends, not just one
A single protector at the camera gives the transient somewhere to divert before it travels, but it does nothing for energy coupled onto the cable along its length. One at the switch catches that and leaves the outdoor device exposed. Install one at each end of every exterior run.
The outdoor unit mounts near the cable entry, bonded to a nearby ground point; the indoor unit mounts at the rack or wall plate, bonded to the building’s ground system. Without a real low-impedance path to earth, a suppressor has nowhere to send the energy.
The Ubiquiti ETH-SP-G2 multipack exists for this reason — four outdoor cameras means eight units. Mixed deployments work fine: a DITEK DTK-MRJPOE on the single 10GbE link to a detached office, Ubiquiti units on the camera runs.
- (2 Pack) Ethernet Surge Protector for Gigabit GbE PoE/High PoE++ (HPoE) 1000 Mbps LAN Ethernet Network
- Gas Discharge Tubes for Full Protection GDT – Lightning Suppressor RJ45 Cable Protection CAT6/CAT5
- Aluminum Case,Ground Wire 12AWG,Line-Line Line-Ground Protection,Bidirectional Clamping,20KA 8/20μs
Comparing the options
| Model | Quantity | PoE support | Protection method | Best suited to |
|---|---|---|---|---|
| Ubiquiti ETH-SP-G2 (10-Pack) | Multipack | PoE and non-PoE devices, data up to 2.5 Gbps | Surge suppression for power surges, lightning strikes and electrical spikes | Whole-site installs needing units at both ends of several runs |
| Tupavco TP302x2 | 2 pack | 802.3af/at/bt including Class 8 PoE++ (90W at the switch port); maker’s stated maximum 154W/3.2A over four pairs | Gas discharge tubes, line-line and line-ground, bidirectional clamping, 20kA 8/20μs | High-wattage PoE++ to PTZ cameras, heated housings, multi-radio APs |
| DITEK DTK-MRJPOE | Single channel | IEEE 802.3 PoE standards | RJ45 surge protection up to 10GbE data rate | One high-speed link where 10GbE headroom matters |
| APC ProtectNet PNET1GB | Single | PoE and 10/100/1000 Base-T | MOVs and thermal fuse, fail-safe disconnect after a damaging event | A single gigabit drop where fail-safe behaviour is preferred |
Grounding is the part people skip
A surge protector works by diverting surge energy to ground once voltage exceeds its threshold. If that connection is long, thin, corroded or terminated at a random stake rather than the building’s grounding electrode system, the suppressor cannot shunt energy anywhere useful.
Keep the ground conductor short and reasonably heavy — the Tupavco TP302x2 ships with a 12AWG ground wire, which is the right order of magnitude. Bond to the same ground system as the building service rather than an isolated rod, because separate electrodes at different potentials recreate the exact problem you are trying to solve.
Bonding and grounding electrodes fall under electrical code in most jurisdictions. Follow local code, and use a licensed electrician where required. Connecting to a service panel ground bar or installing a new electrode is not DIY territory in many areas.
Shielded cable and grounded connectors
Shielded (F/UTP or S/FTP) outdoor cable with metal RJ45 connectors adds a drain path for coupled energy, but only if the shield is actually bonded to ground. Left floating it does almost nothing. Common practice is to bond it at both ends through grounded protectors, which works when both ends share one grounding system; between buildings with separate grounds the shield can carry current between them, so follow the cable and protector manufacturers’ instructions.
- POWER OVER ETHERNET
- RJ45 CONNECTION
- SINGLE CHANNEL
Weatherproofing and the limits of protection
Water is the slow killer. Every outdoor connector should sit at the bottom of a drip loop so gravity pulls moisture away from the housing. Use self-amalgamating tape over outdoor RJ45 joints, seal cable entries with a downward slope and a weatherproof gland, and mount exposed suppressors in an enclosure.
Avoid running Ethernet parallel and close to power cables, lightning down-conductors or metal masts over long distances; where you must cross, cross at roughly a right angle.
No RJ45-format device survives a direct strike to the camera or mast. Gas discharge tubes and MOVs also degrade with each event, so a suppressor that has taken several hits may no longer clamp at the voltage it was rated for.
The APC ProtectNet PNET1GB handles that last point differently, disconnecting equipment once its circuit has been compromised rather than silently passing surges through. A dropped link then tells you to replace the unit. APC lists the PNET1GB as discontinued, so remaining stock may be limited.
Who should choose something else
If every camera sits under an eave on a sub-10-metre run, nowhere near a mast, the induced-surge risk is modest. Those drops are lower priority than a 60-metre run to an outbuilding.
Wireless links sidestep the problem entirely. A cellular or solar camera on acreage has no copper path back to your rack, which is often the right answer for a gate far from the house. Fibre between buildings is the other option, since glass carries no induced current.
Anyone running PoE through injectors rather than a switch should protect the injector side as well; our guide to PoE injectors covers the power side. If you are still choosing cameras, the PoE camera system comparison is the better starting point.
- RJ45 10/100/1000 Base-T Ethernet protection
- Compatible with Power over Ethernet (PoE) and 10/100/1000 Base-T networks
- Fail Safe Mode: Once the circuit of an APC SurgeArrest has been compromised by a power event, the unit disconnects eq…
Practical recommendation
Count your exterior runs, double that number, and buy accordingly. Check the unit count on the Ubiquiti ETH-SP-G2 multipack listing against that total before ordering; a 10-unit pack covers five runs with a unit at each end.
Where a run carries high-wattage PoE — heated PTZ housings, multi-radio access points — use the Tupavco TP302x2 for its Class 8 rating and four-pair protection, because a suppressor rated only for lower-power modes becomes the bottleneck. Keep the DITEK DTK-MRJPOE for a 10GbE inter-building link and the APC ProtectNet PNET1GB where a single gigabit drop needs fail-safe disconnect.
Then spend real effort on the grounding and the drip loops. Those two things decide whether the suppressors work at all, with an electrician involved for any bonding work your local code requires.
Frequently asked questions
Should a surge protector go at both ends of the cable?
Yes. A unit only at the camera leaves energy coupled along the cable run heading into the switch, and a unit only at the switch leaves the outdoor device exposed, so fit a protector at each end of every exterior run.
Will an Ethernet surge protector stop a direct lightning strike?
No. The energy in a direct strike to a camera or mast is far beyond what an RJ45-format device can divert, and hardware at both ends will likely need replacing.
Which protector works with high-wattage PoE++?
The Tupavco TP302x2 is rated by Tupavco for IEEE 802.3af/at/bt, including Class 8 PoE++ (90W at the switch port), with a stated maximum of 154W/3.2A across all four pairs, making it the option to use for PTZ cameras or multi-radio access points.
Does the grounding work need an electrician?
Bonding to a building grounding electrode system is covered by electrical code in most jurisdictions, so follow local code and use a licensed electrician where it is required.
How these picks were chosen: HomeNode compares products using manufacturer specifications, current Amazon listing details and published owner feedback. Products are not tested in-house, and listings change often, so confirm current specifications on the product page before buying.
Affiliate disclosure: As an Amazon Associate, HomeNode earns from qualifying purchases at no additional cost to you.