Just a word of warning - some devices are listed as having PoE 802.3af/at PoE-in but are not fully compliant with the standard.
I've just checked that Cube(SA)-60Pro-ac can be powered from 802.3af switch, but the heatsink is not isolated from the negative power supply. The 802.3af/at standards require 1500V isolation, the powered device needs to have an isolated DC/DC converter or be enclosed in plastic with no accessible conducting parts connected to the PoE circuits. Simply passing 802.3af PD detection/classification is not good enough.
Passive PoE has no isolation requirement and there are usually no problems when powered from MT switches (as they can supply +24V passive or +48V 802.3af/at with negative ground), but 802.3af switch powered from -48V DC (positive ground) telecom power will put that -48V DC on the Cube heatsink.