Manual

RB5009UPr+S+OUT

Seven PoE ports, a 2.5 Gbit inlet and 10 Gbit fibre, in an outdoor enclosure.

The RB5009UPr+S+OUT is the outdoor RB5009 with PoE-out. Seven feeding gigabit ports, one 2.5 Gbit port and one 10 Gbit SFP+ cage, in an enclosure that may hang on a wall or live in an outdoor cabinet. That makes it the centre of a site: cameras, access points and intercoms take power and data from the same box.

The catalogue records the default configuration router with ether1 as the WAN port, and the port layout is verified, so you will not see the "port layout not verified" note here.

The ports

  • ether1: 2.5 Gbit, no PoE-out. Your WAN port by default, and the fastest copper port on the device.
  • ether2 through ether8: seven 1 Gbit ports, all seven with PoE-out.
  • sfp-sfpplus1: one 10 Gbit SFP+ cage. For fibre to another building or an uplink to a 10 Gbit switch.

Because the catalogue records seven feeding ports, the PoE-out per port field appears with ether2 through ether8 in its list. Per port you choose auto-on, forced-on or off. The script writes that as poe-out on that port.

The tool knows which ports feed, but nothing about the power budget: not per port, not in total, and not what your supply delivers. Switching seven ports on does not mean seven devices come up. Add up what you connect and see PoE-out per port and Cables and PoE in practice.

Nine wired ports is well over the three the VLAN roles demand. See Bridge and ports and VLANs for what joins the bridge and which port becomes the trunk.

What is inside

From the catalogue: ARM 64bit, 1 GB of memory, licence level 5 and the 88E6393 switch chip. The small-board warning never appears here. hw_vlan is empty, so bridge VLAN filtering is the right route on this model and the note about losing hardware offload stays away. Leave the Hardware offloading (switch chip) toggle under Ports on.

No radios and no modem, so no Wi-Fi package and no Wi-Fi generation in the catalogue entry.

What it is good at, and where it runs out

Good at: powering and routing a site from one box, with a fast WAN side and fibre to the rest. For camera work it is the obvious choice; see Recipe: connecting cameras. As a small core with OSPF it works too; see OSPF.

Where it runs out:

  • No Wi-Fi. All Wi-Fi roles are greyed out with "No wifi radio". Wi-Fi comes from access points powered here, centrally managed through CAPsMAN if you want.
  • No modem. LTE / 5G router is greyed out with "No LTE modem".
  • The power budget. Switching seven ports on takes a moment; actually feeding them all is a question outside the tool.
  • One 2.5 Gbit port. If you need more than one fast copper link, this is not the device.
  • Throughput figures. Our catalogue does not record them, so we do not quote them.

Which roles fit

  • Office router with VLANs: the usual choice. Cameras, users and management each in a VLAN of their own.
  • Home router: for one network without VLANs.
  • Core router (CCR / RB5009): the role is named after this family for a reason. Routed interfaces without a bridge, OSPF and BGP, a strict management ACL.
  • VPN gateway, Router + CAPsMAN and Hotspot: available.
  • Switch: offered, for instance when a router is already in place and this device mostly feeds.
  • Harden only (baseline): for an RB5009 that is already running.

The quickest route to a working configuration

  1. Pick One device and search for RB5009. Make sure you take the UPr+S+OUT and not one of the other RB5009 variants.
  2. Pick Office router with VLANs, or Switch if a router is already in place.
  3. Put the internet connection on ether1; that is the 2.5 Gbit port.
  4. Walk through the VLAN step and mark one VLAN as management.
  5. Go to advanced, the Ports section, and switch PoE-out on for the ports you use.
  6. Set an admin password, reset the device and paste the script. See Using the script.

With several devices on the site, Multiple devices lays out the cables and trunks on the network board.

What trips people up

  • Switching seven ports on and hoping. The tool does not work out the power; you do.
  • Reaching for forced-on when in doubt. Voltage without detection can damage equipment that expects no PoE.
  • Looking for PoE on ether1. That port does not feed and is therefore not in the list.
  • An empty SFP+ cage. Without a module or DAC there is no link; see SFP port does not link.
  • Confusing the variants. The plain RB5009 and the RB5009 with PoE are different devices with a different port layout.

Want to try it right away? Open the configurator