Managed vs unmanaged switches: which does your home network need?

The short version

• An unmanaged switch is right when everything plugged into it belongs on the same network: more ports behind the TV, a desk, or a closet feeding a mesh kit or access points that broadcast one Wi-Fi network. Even NETGEAR's basic GS308 honors 802.1p and DSCP priority tags and supports Energy-Efficient Ethernet; you just can't change anything.
• One home need forces a smart or managed switch: VLANs. If a single cable has to carry more than one network (the run to an access point that broadcasts your main, IoT and guest Wi-Fi) or wired devices on different networks plug into the same switch, that switch has to be configurable. Ubiquiti's setup guide says every port between the access point and the gateway must allow the network's VLAN, and that a third-party switch "will need to be manually configured".
• "Smart" is enough for most homes. NETGEAR's Plus and TP-Link's Easy Smart switches list VLANs, IGMP snooping, QoS, port mirroring and static link aggregation in a web page. Fully managed switches, and some pricier models sold as smart, add negotiated link aggregation (LACP), spanning-tree control, access lists and more. Cloud-managed lines (UniFi, Omada, NETGEAR Insight, Zyxel Nebula) range from smart to fully managed; what they add is one app that configures the switches along with your access points.
• Management doesn't have to cost much more. In our catalog an eight-port unmanaged NETGEAR GS308 lists at $27.99 and a five-port managed UniFi Flex Mini at $29, though the Flex Mini needs a UniFi controller. The real costs are setup time, a controller for some brands, and settings that can break things when they're wrong.

This article is about the switch decision. For what VLANs are and how to plan them, see VLANs for home networks; for switch speed on a fast fiber plan, see when a cheap switch beats a pricier router.

The four kinds of switch, in the makers' words

Every switch forwards Ethernet frames between its ports. The difference between the kinds is how much of that you can change, and from where.

The labels are loose, so read the feature list rather than the name. NETGEAR's GS308E page is titled "Plus Switch" while its breadcrumb files it under Easy Smart. TP-Link's own Omada store sells the SG2008P as a "Smart" switch, while its US product page titles it "Omada Access 8-Port Gigabit Switch with 4-Port PoE+" and labels the Access line "L2+". Our catalog records the SG2008P as smart and the SG3210XHP-M2 as managed because that's how TP-Link's store names them.

Which kind for your setup

VLANs: the feature that forces the decision

A VLAN-aware network marks each frame with a VLAN number (an IEEE 802.1Q tag) wherever several networks share a cable. Every switch on that path has to know which ports carry which tags. Ubiquiti's terms are the common ones: the Native VLAN is "the VLAN assigned to 'untagged' traffic passing through a switch port", a trunk port is "a switch port with 'Tagged VLANs'", and an access port "only permits traffic belonging to the Native (untagged) VLAN".

Ubiquiti's instructions for creating a Wi-Fi network say to "ensure all ports between your selected APs and gateway are configured to allow the specified network's VLAN ID", warn that failing to do so "will result in clients being unable to join the WiFi", and add that "UniFi Switches enable all traffic by default, but any third-party switch will need to be manually configured." An unmanaged switch has nothing to configure. None of the unmanaged-switch datasheets we read say whether tagged frames pass through untouched, so plan on an unmanaged switch carrying exactly one network.

That last point also gives you a cheap way out at the edges. A smart switch's access port hands over one network untagged, and Ubiquiti says devices connected to a port "will be placed on this Native VLAN". An unmanaged switch plugged into that port extends that one network to everything behind it: a desk where every device belongs on the main network, or a media cabinet where every device is on the IoT network.

The VLAN plan itself (which networks, which rules between them, and what breaks casting and smart-home control) is in our VLAN guide's hardware section. For keeping card terminals and guests apart in a shop, see the small-office router guide.

The other features, and when a home uses them

IGMP snooping: multicast that doesn't flood every port

A plain switch sends multicast out of every port. RFC 4541, the IETF's informational guide to snooping switches, says this means packets are "flooded into network segments where no node has any interest in receiving the packet" and "significant bandwidth can be wasted by flooding". An IGMP snooping switch listens to devices joining multicast groups and forwards each stream only to the ports that asked for it. Ubiquiti's definition: it "reduces multicast flooding by forwarding traffic only to switch ports with active multicast group members."

At home that matters mostly for multicast IPTV from a provider. Ubiquiti's IPTV setup for its gateways has you turn on "IGMP Snooping - On and enabled for the VLAN on which the IPTV box is connected". Over IPv4 it shouldn't stop AirPlay or Chromecast from finding a speaker: their discovery uses multicast DNS on 224.0.0.251 (RFC 6762), and RFC 4541 says non-IGMP traffic to 224.0.0.x "must be forwarded on all ports". Ubiquiti likewise says traffic in 224.0.0.0/24 "is always flooded". IPv6 is different: multicast DNS also uses FF02::FB, and RFC 4541 exempts only the all-hosts address FF02::1 from MLD snooping (IGMP snooping's IPv6 counterpart), so a switch snooping IPv6 can filter discovery for devices that don't announce their groups. That's why our Matter and HomeKit troubleshooting order has you check IGMP and MLD snooping on managed switches. Discovery problems are covered in our AirPlay troubleshooting guide.

One setting to know about: UniFi's option for multicast that matches no group (Forward Unknown Multicast Traffic) defaults to Drop, and Ubiquiti notes that some devices, "especially in AV and IoT environments", may expect such traffic to be flooded.

QoS: priority inside the switch

Switch QoS chooses which frames leave a port first when more traffic is headed for that port than it can send. Some unmanaged switches do some of this already: NETGEAR's 300-series unmanaged datasheet lists 802.1p priority and "Honors DSCP (DiffServ) Tags". A smart switch lets you choose the rules: TP-Link's TL-SG108E offers "Port-based/802.1p/DSCP priority" with four queues, and NETGEAR's Plus switches add rate limiting.

In most homes the congested link isn't inside the house; it's the internet connection, where queues build in the router or modem. Switch QoS can't touch that queue. Smart queue management on the router can, which is covered in our bufferbloat guide. QoS on a switch earns its keep when a busy link inside the house, such as a backup to a NAS sharing a 1 Gbps uplink, competes with calls or game traffic.

Link aggregation: more lanes, not a faster lane

Link aggregation, standardized as IEEE 802.1AX, "allows parallel point-to-point links to be used as if they were a single link". What it doesn't do is speed up one transfer. Ubiquiti's aggregation FAQ is blunt: the gains "will only occur when multiple clients are passing traffic simultaneously through the aggregated ports", and "most home-users do not need this".

A worked example (RouterHaus's calculation). A NAS with two 1 Gbps ports aggregated to a switch, and two computers copying files from it, each over its own 1 Gbps link. If the two copies travel over different links of the aggregate, each computer gets about 940 Mbps, the usable rate of gigabit Ethernet (why 1 Gbps Ethernet gives about 940 Mbps), and the NAS serves up to about 1.9 Gbps in total. They may not: each conversation is assigned to one link, often by a hash of addresses (Zyxel's XMG1915 datasheet lists a "source/destination IP" algorithm), so two copies can land on the same link and share its 940 Mbps. A single computer copying alone gets the same 940 Mbps it would without the aggregate. If one fast client is the goal, a 2.5 Gbps port at both ends does what aggregation can't; our NAS and workstation guide covers why, and the SMB Multichannel exception.

Aggregation comes in two forms, and both ends must use the same one. Static LAGs are set by hand on both ends; LACP (Link Aggregation Control Protocol, whose statistics are part of IEEE's 802.1AX management definitions) negotiates the group. Ubiquiti, which labels it 802.3ad, says LACP "dynamically manages link aggregation, provides automatic failover, and helps prevent misconfigurations". The entry-level smart lines list only the static kind: NETGEAR's Plus PoE datasheet gives "Static Manual LAGs" (two groups of up to four ports on the 5- and 8-port models), and TP-Link's TL-SG108E lists "Static Link Aggregation". Zyxel's XMG1915, which Zyxel calls "Smart Managed", lists LACP. UniFi supports only LACP, and not on the Flex, Flex Mini or Ultra. Check what your NAS supports before buying for this.

Loops, spanning tree and loop protection

A loop happens when two cables connect the same pair of switches, or a cable runs from one wall jack back to another. Ubiquiti lists what follows: "performance degradation, unexpected port blockages, complete network outages, and device crashes." Spanning Tree Protocol (STP) and what Ubiquiti calls "its advanced version, Rapid Spanning Tree Protocol (RSTP)" block redundant paths so only one stays active. RFC 4541 cites IEEE 802.1D-2004, the MAC bridges standard, for the spanning tree algorithm; IEEE now lists that edition as superseded by 802.1Q. UniFi switches run RSTP by default, though Ubiquiti notes that its "gateway switch ports do not support STP".

Lighter switches use loop detection instead: NETGEAR's 5- and 8-port Plus PoE models list loop detection, TP-Link's TL-SG108E lists loop prevention, and UniFi adds, alongside RSTP, a Loop Protection setting that "disables the port automatically if a switching loop is detected". NETGEAR's 300-series unmanaged datasheet lists no loop feature. In a small home, the main loop risk is a stray patch cable in a closet or between two wall jacks, so a switch that detects loops is worth having where you or a family member re-plug cables.

PoE control: restart an access point without a ladder

An unmanaged PoE switch powers devices up to its budget, but you can't touch that power without pulling the cable. Smart and managed PoE switches add control. NETGEAR's Plus PoE datasheet lists "per port PoE controls" and "Uninterrupted PoE" that "keeps PoE power on even when the switch is updating firmware or performing software reboot" (scheduling is on its 16-port models only). TP-Link's TL-SG108PE has PoE Auto Recovery, which "automatically detects and reboots the PD devices, such as cameras and APs, when they fall offline or go unresponsive". In UniFi, a port's PoE setting "controls whether a port provides PoE power to a connected client". For a ceiling access point or a camera under the eaves, turning its port's power off and on from a web page or app saves a ladder trip.

Management doesn't change how much power a switch has. Size the budget by PoE class first: our PoE sizing worked example counts it the way switches allocate it, and the closet design guide covers the heat a PoE switch adds.

Port mirroring: see what a device is sending

Port mirroring copies everything on one port to another, where a laptop running a packet capture tool such as Wireshark can record it. It's how you'd check what a camera or smart plug talks to. NETGEAR's Plus switches, TP-Link's TL-SG108E and UniFi switches all list it. The Wireshark project's capture guide adds a caution: "the monitoring port must be at least as fast as the monitored port, or you will certainly lose packets."

Not reasons to buy a managed switch

Energy-Efficient Ethernet (IEEE 802.3az, which defines a Low Power Idle mode for idle links) and jumbo frames appear on NETGEAR's unmanaged 300-series datasheet as well as on its Plus switches. Multi-gig ports and PoE come in all three kinds too (see the catalog). A managed switch may let you switch these off; it isn't needed to have them.

Cloud- and controller-managed switches

UniFi, Omada, NETGEAR Insight and Zyxel Nebula switches carry the same features as other smart or managed switches; NETGEAR's MS108TUP and Zyxel's XMG1915 are sold as smart. The difference is that you set them for the whole network in one app, so a new VLAN reaches the gateway, the access points and every switch port together. Mix brands and you set each VLAN ID twice: once in the access points' app and once on each switch.

Ubiquiti's own guidance shows why staying in one ecosystem helps: it recommends "leaving AP uplink ports 'trunked' to allow all traffic from all relevant VLANs", which its switches do by default. The trade is dependence on the controller and its update cycle, plus a learning curve for settings you may never use.

What the catalog's switches offer at each level

The RouterHaus component catalog has 52 current switches, last verified against the makers' pages on October 20, 2026: 20 unmanaged, 13 smart and 19 managed. Twelve of the managed ones are UniFi models, and all twelve need the UniFi controller.

Prices for comparable switches, from the same records:

Three things stand out:

• There's no fixed management premium. UniFi's managed five-port Flex Mini lists at about the price of NETGEAR's unmanaged eight-port GS308, and its 2.5 Gbps version well below NETGEAR's unmanaged five-port MS305. Elsewhere the step can be large: our catalog's cheapest priced smart gigabit switches ($114.99 with PoE, $119 without) cost about four times the GS308, and Zyxel's smart eight-port 2.5 Gbps model lists at $110 more than its unmanaged one (and adds a second SFP+ slot).
• The cheap managed options assume an ecosystem. The Flex Mini and Flex Mini 2.5G need the UniFi controller; on a non-UniFi network the realistic low-cost choices are smart switches.
• Management doesn't buy PoE budget. The smart SG2008P and the unmanaged GS305P have nearly the same budget; the managed UniFi Lite 8 PoE has less. Our PoE worked example shows that 52 W powers one PoE+ access point and one camera when counted by class.

For which port speeds you need behind a multi-gig plan, see LAN ports, switches and cables: a switch is only as fast as its slowest port on the path.

What goes wrong with managed switches

The features above are also the ways a managed switch breaks a working network. From the makers' own documentation:

• The access point port's native VLAN. Ubiquiti: "When connecting an AP to a switch port, the Native VLAN should never be the same as the network being broadcast by that AP (except when VLAN 1 is used). This will break connectivity and clients will not be able to join."
• Locking yourself out. Ubiquiti says setting a switch's management VLAN wrongly "may require a physical reset". Change the port you're connected through last.
• Loop protection that stays tripped. UniFi's Loop Protection "permanently blocks ports upon loop detection" until you re-enable the port in the app.
• Mesh backhaul. eero recommends an unmanaged switch and, if a managed one is used, "disabling features such as Spanning Tree Protocol (STP/RSTP), Internet Group Management Protocol (IGMP), and removing any Virtual Local Area Networks (VLANs) or Quality of Service (QoS) features". NETGEAR says its managed switches' "L2 Loop Protection conflicts with your Orbi's backhaul detection system", and that they "drop incorrectly configured VLAN tagged traffic", which Orbi's guest network uses between router and satellites over Ethernet backhaul. Each mesh maker's rules are collected in our wired-backhaul guide.
• Upkeep. A managed switch has firmware, a password and settings to keep track of. A controller-managed switch also depends on a controller that has to be kept running and updated.