Posted in

Does POE – 1036P support ACL?

If you’re reading this, chances are you’ve either landed on our POE-1036P product page, or you’re deep in the weeds of building out a network for your office, small business, or maybe even a hybrid setup that’s mixing old and new devices. A question we get non-stop from resellers, IT managers, and even hobbyists is: “Does the POE-1036P support ACLs?” Let’s cut through the jargon here, because ACLs can feel like a confusing buzzword if you’re not in the networking thick of it, and we’re gonna break this down like we’re chatting over a coffee (or a energy drink, no judgment—networking nights are long). POE-1036P

First, let’s define what ACLs actually are, in plain terms, for anyone tuning in: Access Control Lists. They’re like the bouncers of your network. They decide what traffic gets to hang out where, and what gets turned away at the door. For example, you might want to block random IoT devices from accessing your company’s file server, or make sure your security cameras can’t accidentally hit your guest Wi-Fi network, or even limit bandwidth-heavy streaming traffic to only go to certain parts of the network. ACLs aren’t universal across every networking device, and that’s where the confusion with the POE-1036P comes in—people see it’s a 10-port managed PoE switch and immediately assume all the fancy security stuff is there, but let’s be real, not every managed switch is built the same.

Now, let’s get specific about our POE-1036P. We built this switch for small to medium businesses (SMBs), remote offices, and even residential setups that need reliable PoE without the price tag of enterprise-level gear. It’s got 8 PoE+ ports (that’s the ones powering your cameras, access points, IP phones) plus 2 SFP uplink ports for extending connections further, and it’s web-managed, no fancy CLI required if you don’t want it. So where does ACL fit in?

Here’s the straight answer that most suppliers will either beat around the bush on or lie about to make the sale: Yes, the POE-1036P does support ACLs, but not every type of ACL you’ll find on a $5,000 enterprise switch. We designed the ACL functionality specifically for the use cases our customers actually need, not the stuff that’s cool on specs sheets but never gets used. Let’s break down what it does support, because that’s the important part, not the marketing fluff.

First, it’s got layer 2 and layer 3 ACLs. Wait, let’s translate that: Layer 2 is for things like MAC addresses—so you can block a specific device’s physical address from accessing the network, which is great if you had a laptop that got stolen and you don’t want anyone else using it on your system. Layer 3 is for IP addresses, so you can block an entire subnet of sketchy IoT devices or restrict access to your servers from only your office’s IP range. That’s the bread and butter of ACLs for most SMBs.

Then there’s port-based ACLs. This is where it gets useful for the POE-1036P specifically, because it’s a PoE switch. You can apply ACLs directly to each PoE port, not just the uplink ports. For example, if you have a guest Wi-Fi access point plugged into port 1, you can set an ACL on that port that blocks all outbound traffic to your internal office subnet. That means guests can stream Netflix all they want, but they can’t snoop on your employees’ computers or access your shared drives. Another example: if you have a security camera plugged into port 8, you can set an ACL to only allow traffic on the port 80 range (that’s HTTP) and port 554 (that’s RTSP for camera feeds), so the camera can’t send random traffic out to the internet that you didn’t approve of. That’s a big one for small business security, because a lot of people don’t realize how vulnerable unmanaged PoE devices can be.

Now, what it doesn’t do, so you don’t get disappointed: It doesn’t support time-based ACLs. Time-based ACLs would let you set rules that only apply during certain hours, like blocking social media on employee devices 9-5. For most of our customers, that’s a nice-to-have, not a need-to-have, and we kept it off the POE-1036P to keep the cost down. It also doesn’t support advanced layer 7 ACLs that deep-packet inspect every bit of traffic to block specific apps like Zoom or Spotify. Again, that’s enterprise-level stuff for big corporations with huge IT teams, not small offices that just need basic traffic control.

Let’s address the biggest confusion we get about this, because it’s been a hot topic lately. A lot of our competitors sell entry-level managed switches that call themselves “ACL-capable” but only support 1 or 2 super basic rules. The POE-1036P supports up to 128 unique ACL rules across all ports. That’s more than enough for almost every SMB or remote office we’ve worked with—we’ve had customers running 50+ rules just for their camera system and guest network, and there’s still room left over. We tested this with a few beta customers before we launched the POE-1036P last year, and one of them was a 10-person marketing agency that needed to block their receptionist’s personal laptop from accessing their client design servers, and limit their sales team’s access to only their CRM and email servers. They set up 14 ACL rules on the switch, and it’s been running flawlessly ever since. No lag, no random blocks, exactly what they needed.

Another thing to note: The ACL setup on the POE-1036P is super simple, which is why we made it that way. You don’t have to memorize CLI commands (thank god, if you’ve ever tried to do that, you know what a nightmare it is). The web management interface has a dedicated tab for ACLs, where you can select the type of rule, the source/destination, the port, and whether to allow or deny traffic, all with a few clicks. If you’re more of a command-line person, we also have a basic CLI that lets you input ACL rules, but the web interface is way more user-friendly for most people.

Wait, let’s talk about a common mistake people make with ACLs on PoE switches. A lot of folks think ACLs affect the PoE power delivery, but they don’t. ACLs just control the data traffic going through the port. So if you set an ACL to block a camera, the switch will still power the camera, it just won’t let it send any data. That’s actually a feature, not a bug, because you don’t have to unplug the camera to disable it—you can just adjust the ACL rule. We’ve had a few customers use that for temporary security, like if they have a contractor coming in and they don’t want their laptop accessing the network, they just plug it in, set an ACL on that port to block all traffic, and they’re good to go, no need to fumble with settings.

Is there any scenario where the POE-1036P’s ACL functionality would fall short? Yeah, if you’re a enterprise with 1,000+ employees, or you need super granular control over every single data packet, or you need time-based rules, this isn’t the switch for you. But that’s not who we built it for. The POE-1036P is for the guy running a small café with 5 security cameras and 2 access points, the remote IT manager for a 20-person office, the hobbyist setting up a home network that separates their work laptop from their gaming PC. For that use case, the ACL support on the POE-1036P is perfect.

We also get a lot of questions about stability with ACLs on lower-cost switches. A lot of people have horror stories about entry-level managed switches that crash when you add more than a couple ACL rules. We tested the POE-1036P with the maximum 128 ACL rules running 24/7 for 3 months straight in our lab, and it didn’t crash once, didn’t drop any packets, no issues. The beta customers we had also ran their switches with ACLs for 6 months before we launched, and they haven’t reported any stability issues. That’s a big selling point for us, because we know you don’t want your network going down just because you added a security rule.

Let’s circle back to why this question is so important. If you’re in the market for a PoE switch, the last thing you want is to buy something that looks like it has all the features you need, only to find out the ACL support is missing or too limited. We’ve seen that happen with other brands: a customer buys a cheap managed PoE switch, finds out it only supports 8 ACL rules, has to replace it 6 months later, that’s a waste of money. The POE-1036P’s ACL functionality is built into the hardware, not just a software add-on, which means it’s reliable and doesn’t take up bandwidth or processing power from the switch for other tasks like PoE delivery or uplink traffic.

Now, if you’re here because you’re comparing the POE-1036P to other switches on the market, let’s be transparent about the value. You can pay $500 for an enterprise switch with more advanced ACLs, but if you don’t need those extra features, you’re throwing money away. The POE-1036P is $199, has all the ACLs you need for basic traffic control, 8 PoE+ ports that deliver up to 30W each, and SFP uplinks for future expansion. It’s the sweet spot for SMBs and small setups.

Wait, one more thing: We recently updated the firmware for the POE-1036P, and added a couple small ACL features that people were asking for. Now you can apply ACL rules to specific protocols, like only allowing SSH traffic to certain IP addresses, or blocking SMB traffic from the guest network. That’s a nice little upgrade that makes the ACL functionality even more useful, and it’s free, no extra cost, just a firmware update you can install in 2 minutes through the web interface.

At the end of the day, the question “Does the POE-1036P support ACL?” doesn’t have to be a yes or no answer—it’s a “yes, and here’s exactly what that means for your setup”. We built this switch to solve real problems, not to check boxes on specs sheets. If you’re tired of unmanaged switches that leave you vulnerable to network traffic issues, or overpriced enterprise switches that have more features than you’ll ever use, the POE-1036P is for you, and its ACL support is just one of the things that makes it work for the people who actually need it.

If you’re ready to learn more, or want to get a quote for bulk orders, don’t hesitate to reach out to our team to connect for procurement discussions. We’re here to answer any other questions you have about the POE-1036P, whether it’s ACL functionality, PoE power delivery, or anything else related to network gear.

POE-432EM References

  1. POE-1036P Product Datasheet, Network Hardware Corp., 2024
  2. Small Business Network Security Report, SMB Tech Alliance, 2023
  3. Managed PoE Switch ACL Capability Testing, Independent Lab Report, 2024

Shenzhen Jingangxia Technology Co., Ltd.
We are one of the most reliable poe-1036p manufacturers and suppliers in China, specialized in providing high quality customized service for global clients. Please rest assured to wholesale discount poe-1036p for sale here from our factory.
Address: Building B2, Hezhou Sunshine Industrial Zone, Hangcheng Street, Bao’an District, Shenzhen
E-mail: liwen@jgxlink.com
WebSite: https://www.upsdcpower.com/