Keystone Jacks and Wall Plates: How to Build Clean In-Wall Network Drops

Keystone Jack Wall Plate Guide RJ45

If you've ever looked at a professionally installed network in an office building or modern home and wondered how those clean network jacks in the wall actually work, the answer is keystone jacks and wall plates. They're the universal system for terminating Ethernet, phone, coaxial, and even fiber optic cables at the wall, providing a clean professional appearance and easy serviceability.

Here's everything you need to know to design and install structured wiring drops in your home or office.

What is a keystone jack?

A keystone jack is a small modular connector that snaps into a standardized wall plate opening. The "keystone" name refers to the specific shape and dimensions of the jack housing — about 14.5mm × 16.5mm × 32mm with locking tabs on either side.

Because the keystone form factor is standardized across the industry, any keystone-compatible wall plate accepts any keystone jack from any manufacturer. This means you can mix:

  • Cat5e, Cat6, or Cat6a Ethernet jacks for network drops

  • Coaxial F-type jacks for cable TV

  • RCA jacks for AV equipment

  • HDMI keystone jacks for AV runs

  • Fiber optic LC/SC keystone jacks for fiber drops

  • Phone (RJ11) jacks for legacy telephone wiring

  • USB pass-through jacks for accessory cables

All in the same wall plate. A 6-port wall plate could have 2 Cat6 jacks + 1 coax + 1 HDMI + 1 USB + 1 fiber — all in one location.

Wall plate sizes

Wall plates come in standard sizes matching the keystone openings:

  • 1-port wall plate — single jack

  • 2-port — two jacks

  • 3-port — three jacks

  • 4-port — four jacks (most common for office workstations)

  • 6-port — six jacks (advanced AV/network workstations)

  • 8-port and larger — used in entertainment centers, conference rooms

Standard wall plates fit single-gang electrical boxes (the same opening as a light switch). Larger plates require double-gang boxes (the size of two switches side by side).

T568A vs T568B wiring

When terminating a Cat6/Cat6a Ethernet keystone jack, you'll choose between two wiring patterns:

T568B (more common in North America):

  • Pin 1: White/Orange

  • Pin 2: Orange

  • Pin 3: White/Green

  • Pin 4: Blue

  • Pin 5: White/Blue

  • Pin 6: Green

  • Pin 7: White/Brown

  • Pin 8: Brown

T568A (more common in residential, government):

  • Pin 1: White/Green

  • Pin 2: Green

  • Pin 3: White/Orange

  • Pin 4: Blue

  • Pin 5: White/Blue

  • Pin 6: Orange

  • Pin 7: White/Brown

  • Pin 8: Brown

Critical rules:

  1. Both ends of the cable must use the same pattern. A "straight-through" cable uses T568B on both ends or T568A on both ends. Using different patterns on each end creates a "crossover cable" which causes most modern Ethernet not to work.

  2. Within a building, stick to one pattern. Mixing T568A drops with T568B patch cables in the same building creates confusion and troubleshooting headaches.

  3. T568B is the de facto US commercial standard — choose this for new installations unless you have a specific reason.

Tools for installation

You'll need:

Punch-down tool — Pushes wires into the keystone jack's contacts, simultaneously stripping insulation and trimming the wire end. Essential. Quality matters — a $5 tool will frustrate you; a $25-40 tool from Klein, Fluke, or Klein lasts forever.

Cable stripper — Strips the outer jacket without nicking the inner conductors. Important for Cat6a where damaged conductors can cause performance issues.

Cable tester — Verifies the jack is wired correctly. Plug in a tester at one end, the other end at the patch panel or switch. Shows you if any pins are crossed or open. Quality testers cost $30-100.

Wire cutters — Cleanly trim cable jackets and wires.

Optional but helpful:

  • Fish tape for running cable through walls

  • Cable lubricant for long pulls

  • Drill with hole saw for making the wall plate opening

Installation steps

Step 1: Plan the run

Before pulling cable, plan:

  • Where are the drops? (mark the wall location)

  • Where will cables terminate? (closet, basement, attic — typically near the router)

  • What's the path? (avoid running parallel to electrical wiring for long distances)

  • Total length? (must be under 100m / 328ft)

Step 2: Pull the cable

Run Cat6 or Cat6a cable from the central location (where your network switch lives) to each drop location. Leave 2-3 feet of slack at each end for termination.

For in-wall installation, use CMR-rated (riser) cable. For runs through HVAC return air spaces, use CMP-rated (plenum) cable.

Step 3: Mount the wall box

Install a single-gang (or larger) low-voltage mounting bracket in the wall opening. Low-voltage brackets are designed for data cables (no metal box needed since you're not running line voltage).

Step 4: Strip and prepare the cable

Strip about 2 inches of the outer jacket. Carefully separate the four twisted pairs but don't fully untwist them — keep the twists as close to the jack as possible. This minimizes crosstalk.

For Cat6a, the conductors are thicker — make sure your stripper is set correctly to avoid nicking the conductors.

Step 5: Punch down to the jack

Each keystone jack has color-coded label strips showing where each wire goes (for both T568A and T568B). Match each wire to its position, then use the punch-down tool to seat the wire into the contact.

Pro tips:

  • Punch each wire fully — the tool's blade should cut the excess wire flush with the jack

  • Don't untwist pairs more than 1/2 inch before termination

  • After punching all 8 wires, verify all are seated properly

  • Keep some twist in each pair right up to the contact

Step 6: Snap jack into wall plate

The keystone jack snaps into the wall plate opening from the back. Some plates have a separate "snap-in" piece that holds jacks in place; others have integrated tabs.

Step 7: Test the connection

Plug one end of your cable tester into the new keystone jack. Plug the other end into the corresponding port on your patch panel or switch. The tester will indicate any wiring errors.

Common test results:

  • All green / all good: Perfect installation

  • Open on one pin: Wire not fully punched down

  • Short: Two wires touching where they shouldn't be

  • Crossed pair: Wires in wrong positions

  • Split pair: Pairs mixed up (Cat6/Cat6a will work but won't perform at full speed)

If tests fail, the most common fix is re-punching the connections.

Common installation mistakes

Mistake 1: Untwisting pairs too much. Cat6/Cat6a performance depends on maintaining the precise twist rate. Untwisting more than 1/2 inch before the connection causes crosstalk and degrades performance.

Mistake 2: Mixing T568A and T568B on the same cable. Creates a crossover cable. Some equipment auto-detects this (auto-MDIX) but many cheaper switches do not.

Mistake 3: Using wrong jack category. Don't terminate Cat6a cable on Cat5e jacks — the jack becomes the bottleneck. Match the jack category to the cable category.

Mistake 4: Skipping the cable tester. A wrongly-wired jack might work for some uses but fail in unpredictable ways. Always test.

Mistake 5: Running data cable parallel to power. Maintain at least 12 inches of separation from electrical wiring for long parallel runs. Crossing at 90 degrees is fine.

Mistake 6: Cheap connectors. Quality jacks from reputable brands cost a few dollars more but install better and last longer.

At Kentek, we carry Cat6 and Cat6a keystone jacks, blank wall plates (1, 2, 3, 4, and 6-port), and the tools needed for installation.

Shop Network Accessories