Surge protection for network equipment fails most often because someone protected the power cord and stopped there. A surge does not care which conductor it travels on. Any copper path entering the building, including outdoor network runs, coaxial service drops, and antenna feeds, is an unguarded route straight to the equipment on the other end.
How a surge reaches equipment through a data line
Lightning rarely needs a direct strike to cause damage. A strike nearby induces voltage in every conductor in the area, and a long outdoor cable run is an efficient collector. The induced energy travels to whatever is at the end. Equipment with both a power connection and a data connection offers a particularly effective path: energy enters on the data line, passes through the device, and exits through the grounded power connection, destroying whatever sits between. This is why an outdoor camera, an access point on a pole, or a link between buildings so often takes out the switch port at the other end. Coaxial services and outdoor antenna feeds deserve the same attention as network cable, since both are long metallic runs that terminate in equipment sharing a grounded chassis with everything else on the rack.
Why bonding is the foundation
Protection devices work by diverting energy to ground, which means they only work as well as the ground they are connected to. If the protector at the cable entry is bonded to a different reference than the equipment’s power ground, the protector diverts energy to a point that is not at the same potential as the equipment, and a difference appears across the device anyway. Effective installations bond all protectors and all entering services to the same bonding point, which is itself bonded to the building’s grounding electrode system. Getting this right matters more than the specification of any individual protector. The energy involved does not need to be dramatic to be destructive. Interface chips operate at a few volts, so an induced transient of tens of volts is already far outside what the silicon was designed to survive.
Where fiber removes the problem entirely
An all-dielectric optical cable carries no metallic path, so it conducts no surge and transfers no potential difference. For any link between separate structures, or from a building to an outdoor location, fiber is the most reliable protection available and it eliminates the failure mode rather than mitigating it. The remaining consideration is powering the equipment at the far end, which then needs a local supply with its own protection on that circuit. For many outdoor applications the combination of local power and a fiber data link is both safer and cheaper than protecting a long copper run properly. Bonding conductors should be short and direct, because a long conductor presents significant impedance to the fast rise times of a surge even when its resistance at power frequency is negligible.
Choosing protection for copper that must stay copper
Where copper is unavoidable, use protectors designed for the specific service and data rate, because a device that clamps aggressively enough to protect may also attenuate the signal enough to break the link. Protectors have a service life and degrade with each event, and many give no outward indication that they have failed, so they need periodic inspection or replacement on a schedule. Install them at the point where the cable enters the building rather than at the equipment, so the energy is diverted before it travels through the structure. Coaxial entries have their own code requirements for bonding and grounding blocks. Powering an outdoor device locally and linking it by fiber also removes the need to run a long copper cable outdoors at all, which eliminates the collector as well as the conduction path.
What protection cannot do
No protection scheme makes equipment immune. A direct strike delivers energy far beyond what any building-entry device is designed to divert, and the honest position is that protection reduces the probability and severity of damage rather than eliminating it. The complementary measures are unglamorous: back up configurations so a destroyed switch is a hardware replacement rather than a rebuild, keep spares for critical outdoor-connected equipment, and disconnect vulnerable equipment during severe storms where that is practical. Installation and bonding of protection devices is work for qualified personnel following the applicable code requirements. Keep spare configurations and firmware images for edge equipment, and keep a record of which ports connect to outdoor runs so that a post-storm inspection has somewhere specific to start rather than checking everything.
What to check before you act
- Identify every copper path entering the building, not just the power feed.
- Bond all entry protectors to the same bonding point.
- Use optical fiber for any link between separate structures.
- Inspect or replace protectors on a schedule, since failure is often silent.
Common questions
Does a power strip with surge protection cover my network gear?
Only the power path. Anything connected by a copper data line to the outside remains an unprotected route into the equipment.
Is protection needed for an indoor-only network?
The risk is far lower with no outdoor runs, but the building’s power service still brings surges in. Protect the power path and use fiber for anything leaving the structure.
The practical takeaway
Map every copper path into the building and protect or eliminate each one, with fiber as the preferred answer for anything crossing between structures. Then bond all the protection to one point, because a protector bonded to the wrong reference protects nothing.
References and further reading
- NFPA: National Electrical Code bonding and surge protection requirements
- OSHA 1910.304: grounding and bonding requirements
- CPSC: home electrical safety and surge guidance
Numerical scenarios are illustrative unless identified otherwise. Follow the exact product instructions; component ratings and local installation requirements can differ.
