Outdoor wireless access point installation - Data, good!! ESD, bad!!

  • 🏰 The Fediverse is up. If you know, you know.
  • Want to keep track of this thread?
    Accounts can bookmark posts, watch threads for updates, and jump back to where you stopped reading.
    Create account

Cheddar Supremacist

Ein Volk, Ein Reich, Ein Käse
True & Honest Fan
kiwifarms.net
Joined
Sep 10, 2025
I've recently set up an Ubiquiti U7 Pro Outdoor AP to cover the property which is powered by a (grounded) PoE+ injector. Though it's currently up and running, I'm trying to figure out how to reasonably reduce the risk of electrical damage to the rest of the network as I'm in an area prone to thunderstorms.

It's currently attached to a wooden post beside the front porch. I did purchase two of these ethernet surge protectors, but the intended use of those is that the one nearest the AP would be connected directly to earth with the other placed immediately prior to connection to the network with the majority of the cable run being outdoors. The problem is that the AP is too far away from the building's grounding rod and I don't want to introduce a ground loop by driving in another metal pole and attaching to that. Also, there's currently no AC power readily available near the porch/AP. So, what to do?

Right now, I'm considering buying a small, dedicated UPS for indoors and attaching the injector to that. The ground of one of the ethernet surge protectors could be connected one of the grounding pins of the UPS. At the network entry point, I could install the second ethernet surge protector and similarly attach it to another ground pin though I'm unsure how helpful that will be if the rest of the cable run is indoors.

Another option I've read about is using media converters and introducing an optical path from the PoE injector to the network. There's still the power connector concern, but I imagine it couldn't hurt (aside from the loss of 1.5Gb of bandwidth from the AP). Also, the indoor cable run value perspective mentioned above would apply.

I've read a couple of threads elsewhere on other forums about similar scenarios but I didn't see any resolutions so I figured I'd post here and see if any Kiwis could put me on some knowledge/experience.

As far as the AP itself goes, my first impressions are very positive. Despite the obstruction by many trees and other structures, the coverage is superb. I was already in the Ubiquiti ecosystem with my near-decade-old UAP-AC-PRO so UniFi Network was already running via Docker container. Adding it to the network was genuinely a plug-and-play affair.
 
Fiber is always best. If you can just get it inside with power and a transition to fiber then you're probably good and the worst case will be it obliterates the AP and UPS. If you really need the speed you could use a 10G media converters instead or a media converter at the near outside end and an SFP+ at the inside, if you have the ports, for a "small" additional cost. https://www.amazon.com/Converter-Ethernet-10GBase-T-Gigabit-Multimode/ for instance, not sure if the 10G copper is multi-gig, so that SFP+ might need to be replaced. A ground loop shouldn't be a problem in any case if you're not using shielded cable as the lightning arrester is just going to be a MOV or Gas Discharge Tube on each pin to the local ground. If you are using shielded you could break the shield just before the connection to the inside protector. And the more local the ground the better, relying on building wiring for a ground means more resistance and more stuff along the path that could get fried.
 
A ground loop shouldn't be a problem in any case if you're not using shielded cable as the lightning arrester is just going to be a MOV or Gas Discharge Tube on each pin to the local ground. If you are using shielded you could break the shield just before the connection to the inside protector.
Ah, okay. In other Internet discussions, I did note a difference of opinion regarding the likelihood of introducing a ground loop by grounding the AP's surge protector to its own pole but I think that the use of an unshielded (or floating shield) cable to connect from the surge protector to the injector was what I was missing. Right now, I'm using unshielded cable which I was planning on sticking into conduit so I should be okay.

I may still opt for a pair of media converters for that additional protection. I know that I could go 10Gb but, for my use case, I would probably just cheap out and stick with 1Gb as there will likely only be a couple of people using the AP at any given time. It'll probably still bug me, though.

Thanks for the reply!
 
why are you so concerned about surge, is your house regularly getting struck by lighting?
i live in a thunderstorm prone area and mount p2p links on the roofs of buildings all the time and almost never have to deal with lightning blowing stuff up.
you are more likely to get surge coming in from your power lines, biggest issue we face is the jacket failing on the cat5 from uv and water getting in the jacket and running all the way down the cable and right into your switch, good idea to make a downward bend and slit the jacket inside, you will need to replace the cable anyway but atleast it saves the switch.
fiber is a bit overkill and kind of pointless as you would need to have some copper bonding somewhere to get power to the ap anyway.
 
This is probably overkill and a bit too pricey, but MikroTik RB5009UPr+S+OUT is a thing.
1761954320351.png
It's a fully fledged PoE router in a waterproof enclosure with grounding, and it also has an SFP+ slot. So for example, you could set up your outdoor copper wiring to congregate in the 5009 as the main power box, have it powered by the 2-pin terminal, and then have a fiber connection with an SFP insert bridging it with the rest of your network. Technically, it shouldn't get fried by lightning on it's own, and if a power surge were to fry the router via the power connector, it won't touch the rest of your network.

As for mixing Ubiquiti with MikroTik, people do it all the time, and it's actually a very popular setup to use MikroTik for core network and routing and Ubiquiti for wireless access points. MikroTik routers support a metric fuckton of features, including Docker containers, so in theory you could make that 5009 your Ubiquiti controller if you really wanted to. It has the USB port for the flash memory needed for Docker containers as well as plenty of processing power and RAM for it. But, again, a 5009 for an outdoor AP congregation is most likely overkill.
 
why are you so concerned about surge, is your house regularly getting struck by lighting?
i live in a thunderstorm prone area and mount p2p links on the roofs of buildings all the time and almost never have to deal with lightning blowing stuff up.
I acknowledge that I may be overthinking this. This is my first time setting up an outdoor AP and I'm just trying to abide by best practices. I'm not aware of this place having lightning related damage but that luck will probably run out at some point and, when that happens, I want to know that I took reasonable steps to prevent it.
This is probably overkill and a bit too pricey, but MikroTik RB5009UPr+S+OUT is a thing.
View attachment 8107281
It's a fully fledged PoE router in a waterproof enclosure with grounding, and it also has an SFP+ slot.
Yeah, I think that's overkill for this specific use case. But, it's good to know what's out there for some possible future project.
 
I acknowledge that I may be overthinking this.
lightning is an agent of chaos, i try not to overthink it. if i am concerned that my gear is higher then anything else around or mounted to a literal lighting rod (like a radio tower) i just try to put something sacrificial, like a cheep switch that is grounded in between it and anything i care about.


on the topic of cheep switches has anyone seen the deals on used cisco switches right now. some great shit is coming off support and you can get crazy deals on them right now.

like 80$ for a 48 x 1gb poe+ and 4x sfp+

or 100gb switches at under 400$

i cant find them now but i was seeing 100gb switches at around 200$ a few weeks ago.
you could put a 32000$ msrp switch in your house for a few benjamins
eg
160$ ish shipped albeit this one has cages, i would spend a bit more and get a rj45 one.
1762013148273.png

but you have to remember that these nexuses are datacenter switches, so they are going to be super loud and take like 5 min to boot.
 
Back
Top Bottom