1-4.0 SOW.pdf

4.0 SCOPE OF WORK

RFP 26-011

DISPATCH NETWORK REDESIGN

ITB 26-011 SOW Page 1 of 9

4.1 PROJECT OVERVIEW

This Scope of Work (SOW) defines the tasks, responsibilities, and deliverables for the redesign, documentation, configuration, and testing of the enterprise network spanning six

(6) data centers and forty-nine (49) wayside locations. The contractor will review the existing PTC network topology, dispatch network topology, and AT&T switch Ethernet fiber services and produce a fully updated, integrated network design. The Agency is currently migrating its existing data center infrastructure located in Indianapolis, IN, and Chicago, IL, to two new data center locations in Ashburn, VA, and Seattle, WA. If this migration has not been fully completed prior to the Notice to Proceed (NTP) for this project, the Contractor shall be responsible for developing, validating, and documenting the required network configurations for all six (6) data center locations. The Contractor shall ensure that the proposed configuration supports both the existing and new data center environments during the transition period and maintains required connectivity, routing, redundancy, and operational functionality. The configuration shall also support the orderly migration from the Indianapolis and Chicago data centers to the Ashburn and Seattle data centers without disruption to critical Agency operations.

4.2 PROJECT LOCATIONS

• Pompano Beach, FL

• West Palm Beach, FL (Data Center)

• Indianapolis, IN (Hosted Back Office Components Data Center)

• Seattle, WA - (New Back Office Data Center)

• Chicago, IL (Hosted Back Office Components Data Center)

• Ashburn VA (New Back Office Data Center)

• Forty-nine (49) Wayside Locations

4.3 OBJECTIVES

The objectives of this project are to:

• Perform a comprehensive discovery and assessment of all data center network equipment, configurations, and existing Positive Train Control (PTC) and Dispatch Network design documentation.

• Perform a comprehensive discovery and assessment of all network equipment and connectivity at all 49 wayside locations.

• Review all AT&T Ethernet switch and fiber services and validate circuit connectivity, bandwidth utilization, service configurations, routing requirements, and carrier handoff details.

ITB 26-011 SOW Page 2 of 9

• Develop a fully redesigned and consolidated network architecture that integrates Dispatch Network Equipment and PTC Network Equipment into a unified network design while maintaining logical separation, security requirements, system reliability, and minimizing impacts to train operations.

• Develop updated physical and logical network topologies, routing designs, VLAN structures, and resiliency/failover strategies to support the consolidated architecture.

• Build, configure, test, and validate the redesigned network architecture and configurations within a laboratory environment prior to production deployment.

• Produce complete and accurate network documentation, including topology diagrams, IP address management plans, equipment inventories, configuration files, AT&T circuit mappings, and operational support documentation.

• Develop detailed implementation, migration, rollback, and cutover procedures that support a phased deployment approach, minimize operational risk, and limit impacts to train operations during SFRTA approved maintenance windows.

• Vendor shall provide qualified on-site technical resources during initial production cutovers to support project management, implementation activities, validation testing, issue resolution, and troubleshooting of network configuration changes.

• Deliver a final validated network design package that supports future operational growth, simplifies network management, improves maintainability, and enhances overall network resiliency.

4.4 DISCOVERY AND ASSESSMENT

The Contractor shall perform a comprehensive discovery and assessment of the existing Positive Train Control (PTC) and Dispatch network environments to establish a baseline for the network consolidation and redesign effort.

Scope of Discovery and Assessment

• Review existing PTC network topology documentation, configurations, and operational requirements.

• Review existing Dispatch network topology documentation, configurations, and operational requirements.

• Review AT&T Ethernet switching services, fiber connectivity layouts, service demarcation points, handoff specifications, bandwidth allocations, and routing requirements.

• Review and inventory all network infrastructure components, including routers, switches, firewalls, optical transport equipment, power systems, and supporting network services.

ITB 26-011 SOW Page 3 of 9

• Review and identify and document existing hardware models, software/firmware versions, interface assignments, routing protocols, VLAN structures, IP addressing schemes, Quality of Service (QoS) configurations, and security policies.

• Collect and analyze current network configurations, routing tables, access control lists (ACLs), tunnel configurations, and management access methods.

• Validate physical network connectivity, fiber paths, circuit terminations, patch panel assignments, and equipment interconnections.

• Validate logical network architecture, including Layer 2 and Layer 3 connectivity, redundancy mechanisms, failover designs, and traffic flows.

• Identify dependencies between PTC and Dispatch systems, including critical operational services, applications, and communication paths.

• Assess current network performance, resiliency, security posture, and operational limitations that may impact the consolidation effort.

• Document any network deficiencies, unsupported hardware, end-of-life equipment, configuration inconsistencies, or operational risks identified during the assessment.

• Conduct stakeholder interviews via virtual meetings with Operations, Dispatch, Signal/PTC, and Information Technology personnel to validate operational requirements and network dependencies.

• Produce a Discovery and Assessment Report summarizing findings, existing network conditions, identified risks, assumptions, constraints, and recommendations for the redesign phase. Document can be provided via Word or Pdf.

Deliverables

• Existing Network Assessment Report.

• Current-State Physical Network Topology Diagrams.

• Current-State Logical Network Topology Diagrams.

• Network Hardware and Software Inventory.

• Circuit and Fiber Connectivity Inventory.

• IP Addressing and VLAN Assessment.

• Routing and Security Configuration Assessment.

• Risk Register identifying issues, constraints, and recommendations for remediation prior to implementation.

4.5 NETWORK REDESIGN

The Contractor shall develop a comprehensive network redesign that consolidates and modernizes the existing Dispatch and Positive Train Control (PTC) communications infrastructure while maintaining operational continuity throughout implementation.

• Develop an updated end-to-end network topology in PDF and editable Visio format incorporating:

o Dispatch Network equipment and connectivity.

o PTC Network equipment and connectivity.

o AT&T ASE (AVPN/Switched Ethernet) fiber Ethernet services.

ITB 26-011 SOW Page 4 of 9 o Existing and proposed network interconnections.

o Redundant communication paths and failover mechanisms.

• Produce detailed network design documentation including:

o Physical topology diagrams.

o Logical topology diagrams.

o Layer 2 and Layer 3 connectivity diagrams.

o VPN and tunnel architecture diagrams.

o Routing and traffic flow diagrams.

o WAN and fiber circuit mapping diagrams.

• Evaluate the existing network architecture and recommend configuration changes required to support consolidation of Dispatch and PTC network services onto the new infrastructure.

• Develop interim network configurations and migration strategies necessary to support phased implementation while maintaining uninterrupted operations.

• Utilize existing IP addressing schemes whenever practical to minimize operational impacts, reduce reconfiguration requirements, and simplify migration activities.

• Develop a phased implementation and cutover strategy that allows individual sites, wayside locations, and communication hubs to transition to the new hardware and AT&T ASE circuits while remaining sites continue operating on the legacy infrastructure.

• Review existing routing and communication protocols and provide recommendations to improve:

o Network resiliency.

o Convergence times.

o Bandwidth utilization.

o Traffic prioritization.

o Overall network performance.

• Design and configure network segmentation utilizing Virtual Local Area Networks (VLANs), including:

o Operations VLANs for Dispatch and PTC communications.

o Management VLANs for network administration and device management.

o Monitoring VLANs dedicated to SNMP, telemetry, and network management traffic to ensure secure separation from production traffic.

o Security VLANs dedicated to access control systems, surveillance systems, and other security-related devices to isolate sensitive systems from operational and user traffic.

• Recommend and configure Simple Network Management Protocol (SNMP) monitoring architecture, including device health monitoring, performance monitoring, interface utilization monitoring, and alerting capabilities.

• Recommend and configure centralized logging and monitoring solutions capable of generating alerts for:

o Configuration changes.

o Interface status changes.

o Device reboots.

o Authentication failures.

o Hardware failures.

ITB 26-011 SOW Page 5 of 9 o Environmental alarms where supported.

• Develop network security recommendations that align with industry best practices and transportation operational technology (OT) requirements, including secure management access, network segmentation, and monitoring controls.

• Provide a final Network Design Package via Word or PDF documenting all proposed configurations, routing designs, VLAN assignments, monitoring architecture, implementation phases, and migration procedures for review and approval prior to configuration development.

4.6 DESIGN DRAFT, REVIEW APPROVAL

• The Contractor shall develop a comprehensive draft network design based on the findings, requirements, and recommendations identified during the discovery, assessment, and design phases of the project.

• The draft written design shall include, at a minimum, proposed network topology diagrams, equipment placement, routing architecture, IP addressing schemes, fiber connectivity requirements, redundancy and failover design, security considerations, and integration requirements for PTC and Dispatch systems.

• Upon completion of the draft design, the Contractor shall submit the design package to the IT Manager for formal review, evaluation and approval by SFRTA.

• The IT Manager and will review the draft design to verify alignment with project objectives, operational requirements, safety considerations, technical standards, maintainability requirements, and long-term operational goals.

• The Contractor shall participate in virtual design review meetings and provide technical clarification, supporting documentation, and responses to review comments as requested.

• Any required revisions, corrections, or modifications identified during the review process shall be incorporated by the Contractor and resubmitted for approval to the IT Manager.

• The design review process shall continue until all comments have been addressed and the final design package receives written approval from the IT Manager.

• Written approval of the final design package shall constitute authorization for the Contractor to proceed with configuration development, lab validation testing, and subsequent implementation activities.

4.7 LAB BUILD AND TESTING

• Develop and configure a laboratory environment that accurately replicates the production Positive Train Control (PTC) and Dispatch network architectures, including routers, switches, firewalls, fiber connectivity, and associated network services.

ITB 26-011 SOW Page 6 of 9

• Utilize the lab environment for network design validation, configuration development, integration testing, and troubleshooting activities prior to deployment.

• Load and validate all newly developed configurations on representative test equipment, including Cisco routers, switches, firewalls, and associated network devices.

• Conduct comprehensive functional testing to verify network performance, routing protocols, redundancy mechanisms, failover operations, fiber service handoffs, PTC communications, dispatch system traffic flows, remote management access, and cybersecurity controls.

• Perform end-to-end connectivity testing between wayside locations, dispatch facilities, data centers, and external service provider connections to validate operational requirements.

• Document all testing procedures, test results, identified issues, corrective actions, and required design revisions.

• Update network configurations and design documentation based on testing outcomes and validation findings.

• Produce a formal Lab Validation Test Report documenting successful completion of all required test cases and approval for production deployment.

• Finalize and baseline stable production-ready configuration sets for all network devices prior to field implementation.

4.8 CONFIGURATION DEVELOPMENT

• Develop standardized and unified configuration templates for all new routers that will integrate Positive Train Control (PTC), Dispatch, and Wayside network equipment while maintaining consistency, scalability, and security across all locations.

• Implement the approved IP addressing schema, VLAN assignments, routing architecture, network segmentation, Quality of Service (QoS), and security policies in accordance with the final network design.

• Configure and validate all router, switch, firewall, and supporting network device configurations to ensure interoperability with existing and new network infrastructure components.

• Produce complete, tested, and deployment-ready configuration files in a standardized format for all network devices, including startup configurations, configuration backups, and associated documentation.

ITB 26-011 SOW Page 7 of 9

• Conduct configuration validation and peer review to verify compliance with operational requirements, cybersecurity standards, and design specifications prior to deployment.

• Develop a detailed project cutover schedule for each site location, identifying implementation activities, dependencies, resource requirements, validation testing procedures, rollback procedures, and outage windows. Cutover schedules shall be provided in Microsoft Project format and coordinated with SFRTA Operations and Project Management staff.

Maintain version control for all configuration files and document all configuration changes throughout the project lifecycle to support future maintenance and operational support.

4.9 DOCUMENTATION DELIVERABLES

The Contractor shall provide the following documentation and deliverables as part of the project:

• Updated complete network topology diagrams for all locations, including logical and physical network layouts, provided in both PDF and editable Microsoft Visio formats.

• Updated IP addressing schema and master network inventory list, including device names, locations, management IP addresses, VLAN assignments, circuit information, and equipment details. Documentation shall be provided through a secure shared platform approved by the Agency.

• Unified network equipment configurations and backup configuration files for all deployed equipment, including routers, switches, firewalls, wireless infrastructure, and supporting network devices. Configuration files shall be provided in standard text format.

• AT&T fiber service mapping and connection guide, including circuit identifiers, demarcation locations, service handoff details, bandwidth allocations, routing information, and connectivity diagrams.

• Lab validation testing documentation as outlined in Section 4.7, including test plans, test results, configuration validation records, performance testing results, and issue resolution documentation.

• Final Design Package containing all approved network diagrams, design documents, inventory records, configuration files, implementation plans, test results, and supporting project documentation.

• Phasing and interim configuration plans detailing the migration strategy required to support phased implementation of new network hardware and AT&T Switched Ethernet (ASE) circuits while maintaining operational continuity.

• Detailed cutover plans and procedures for each wayside location, including site-specific implementation steps, rollback procedures, validation testing requirements, communication plans, outage windows, and post-cutover verification processes for transitioning existing sites to the new hardware and AT&T ASE circuits.

ITB 26-011 SOW Page 8 of 9

• Network operations and maintenance documentation, including equipment management procedures, backup and recovery procedures, configuration management guidelines, and support contact information.

• All documentation shall reflect the final as-built network environment and be updated to incorporate any modifications made during implementation, testing, and project completion.

4.10 ACCEPTANCE CRITERIA

The Network Design Deliverables shall be considered complete and accepted when the following criteria have been met:

• All network documentation, diagrams, configuration templates, and design specifications are accurate, complete, and reflect the final validated network architecture and operational requirements.

• All proposed network configurations, policies, and system settings successfully load and operate in the designated test or laboratory environment without errors, failures, or unresolved critical issues.

• The final network design has successfully passed all functional, performance, resiliency, security, and validation testing requirements identified within the project scope.

• All identified deficiencies, discrepancies, and corrective actions discovered during testing have been resolved and documented.

• Final design documentation, test results, and validation reports have been reviewed and approved by the IT Manager.

• All required project deliverables have been submitted, reviewed, and accepted in accordance with the contract requirements and project standards.

• A formal acceptance sign-off has been received from the IT Manager authorizing completion of the Network Design phase.

4.11 NETWORK CUTOVER & PROJECT CLOSEOUT

The Contractor shall provide qualified on-site technical resources at the commencement of the network cutover to support project implementation, coordination, and transition activities. These resources shall be available to assist with project management, troubleshooting, and resolution of issues related to network configuration updates, system integration, and operational changes during the cutover period.

The Contractor shall:

• Provide on-site technical personnel during the scheduled cutover window.

• Coordinate cutover activities with SFRTA staff, vendors, and other stakeholders.

• Monitor network performance and validate successful implementation of all configuration changes.

• Troubleshoot and resolve network-related issues that may arise during the cutover process.

ITB 26-011 SOW Page 9 of 9

• Maintain communication with project stakeholders and provide status updates throughout the cutover.

• Document all configuration changes, issues encountered, corrective actions taken, and final system status.

• Provide post-cutover support to ensure network stability and operational readiness.

• Participate in project closeout activities, including final testing, acceptance validation, documentation delivery, and knowledge transfer to SFRTA personnel.

All cutover activities shall be performed in a manner that minimizes service disruptions and ensures continuity of critical business and operational systems.

4.12 SERVICE WARRANTY

One-Year Service Warranty – Cisco Network Configuration Services

The Contractor warrants all Cisco network configuration services performed under this Scope of Work for a period of one (1) year from the date of final acceptance by the Agency.

During the warranty period, the Contractor shall, at no additional cost to the Agency, provide corrective services which include labor, equipment and materials to resolve configuration-related issues resulting from errors, omissions, or deficiencies in the Contractor's work. Covered services include, but are not limited to:

• Cisco router, switch, firewall, and wireless controller configuration.

• VLAN configuration and segmentation.

• Routing protocol configuration (OSPF, EIGRP, BGP, static routing, etc.).

• Network security policies, access control lists (ACLs), and firewall rule implementation.

• High-availability configurations, including HSRP, VRRP, and failover settings.

• Quality of Service (QoS) configurations.

• VPN and secure remote access configurations.

• SNMP, Syslog, NetFlow, and network monitoring configurations.

• Network management and device administration settings.

• Documentation updates required to reflect warranty-related corrections.

The Contractor shall respond to warranty-related service requests within one (1) business day and shall begin remediation efforts within two (2) business days of notification by the Agency. Critical issues resulting in network outages or significant service degradation shall receive priority response and remediation.

The warranty shall include in addition to the above requirements remote troubleshooting, configuration review, correction of configuration errors, and validation testing to ensure proper operation of the affected network components.