DNTS SIR Sect J1 - FAA-P-2978e.pdf

ATTACHMENT J-1

FAA-P-2978e

Supersedes FAA-P-2978d

U.S. Department of Transportation Federal Aviation Administration

Product Description (PD)

Airport Cable Loop System Sustained Support

Dedicated Network Telecommunications System (DNTS) ii

(This page left blank intentionally) iii

RECORD OF CHANGES

Revision Date Action

0.0 04/14/2020 Initial Draft version

0.1 04/16/2020 IFCET Team Review

0.2 07/01/2020 Changed nomenclature to DNTS

0.3 08/24/2021 Shall 61: “maximum” output current changed to “minimum” output current

0.4 09/13/2021 Modified Pseudowire requirements:

Removed IETF 5087, Time Division Multiplexing over IP (TDMoIP) Added IETF RFC 4553, Structure-Agnostic Time Division Multiplexing (TDM) over Packet (SAToP) ADDED MEF 3 Circuit Emulation Service Definitions, Framework and Requirements in Metro Ethernet Networks Added MEF 8, Emulation of PDH Circuits over Metro Ethernet Networks

0.5 01/05/2022 Shalls Ethernet IPv6 q,r;

Shalls: timing synch g,h,I;

Shalls: Auditing and Security Shalls: RMS Accounts Shalls: RMS Protocols and Procedures Shalls: RMS Functional Requirements Shalls: RMS Account Security Shalls: RMS Account Monitoring Shalls: RMS Warning Banner Shalls: RMS Auditing Shalls: RMS Failover Shalls: RMS Integrity

0.6 03/05/2022 Should Numbering

0.7 07/18/2022 Remove RMS requirements

Edit Synchronization/Time of Day requirements Updated reference to FAA-G-2100j

0.8 09/06/2022 Updated Figures 3.1 and 3.2 Removed Should 1 R

0.9 11/10/2022 Corrected references to FAA-G-2100j and FAA-STD

1.0 01/31/2023 Modified Ethernet requirements (Shalls 26, 27, 29)

1.1 07/26/2023 Deleted (Shall 28)

Modified (Shalls 65, 84, 151) iv v

FOREWORD

This document is approved for use by all organizations of the Federal Aviation Administration (FAA). It establishes requirements for acquisitions of fiber optic telecommunication equipment for the National Airspace System (NAS), and references Government and non-Government standards, orders, handbooks, and other pertinent documents.

This product description revises information contained in FAA-P-2978d, Synchronous Optical Network (SONET) Multiservice Platform (MSP) for the Airport Cable Loop Systems Sustained Support Program. This product description supersedes and replaces FAA-P-2978d.

vi vii

TABLE OF CONTENTS

1. SCOPE AND CLASSIFICATION

1.1. Scope

1.2. System Overview

2. APPLICABLE DOCUMENTS

2.1. General

2.2. FAA Specifications and Standards

2.3. Food and Drug Administration

2.4. Alliance for Telecommunications Industry Solutions (ATIS), American

National Standards Institute (ANSI), Electronic Industries Association (EIA), and Telecommunications Industry Association (TIA)

2.5. Institute of Electrical and Electronics Engineers (IEEE)

2.6. International Telecommunication Union (ITU)

2.7. Metro Ethernet Forum

2.8. Military Specifications and Standards

2.9. Telcordia Technologies Standards

3. REQUIREMENTS

3.1. Telecommunications System Equipment

3.1.1. SONET Optical Interfaces

3.1.2. Ethernet

3.1.3. Tributary Interfaces

3.1.4. Low Speed Interfaces

3.1.5. Network Synchronization

3.1.6. Time of Day

3.1.7. Networking

3.1.8. Configuration, Installation and Additional Circuits

3.1.9. Configuration Data

3.1.10. Nominal Bit Error Ratio (BER)

3.1.11. Bit Error Ratio

3.1.12. Fault Diagnosis

3.1.13. Indicators and Alarms

3.1.14. Auditing

3.1.15. Security

3.1.16. Electrical Requirement

3.1.17. Cold Start

3.1.18. Physical Characteristics

3.1.19. Size

3.1.20. Operating Temperature and Humidity

3.1.21. Operating Altitude

viii

TABLE OF CONTENTS (Continued)

3.1.22. Storage, Transportation, and Handling Temperature and Humidity

3.1.23. Storage, Transportation, and Handling Shock

3.1.24. Earthquake Zone 4

3.1.25. ESD and EMI

3.1.26. Thermal Heat Dissipation

3.1.27. Acoustic Noise

3.2. Workmanship, Materials and Finishes

3.2.1. Cleaning

3.2.2. Threaded parts or devices

3.2.3. Wiring

3.2.4. Shielding

3.2.5. Materials and parts

3.2.6. Finishes

3.3. Reliability and Maintainability

3.3.1. DNTS Mean Time Between Failures (MTBF)

3.3.2. Mean Time To Repair (MTTR)

3.3.3. Preventive Maintenance

3.3.4. Special Equipment

3.4. Safety

3.5. Grounding Bonding, and Shielding

4. QUALITY ASSURANCE PROVISIONS

4.1. Testing Conditions

4.2. Verification Methods

4.3. Reliability Modeling and Prediction Data

5. PREPARATION FOR DELIVERY

6. APPLICABLE DEFINITIONS

6.1. Commonly Addressed Channels

6.2. Data Rate

6.3. Digital Signal 1 (DS1)

6.4. Ethernet

6.5. Failure

6.6. Lowest Replaceable Unit (LRU)

6.7. Mean Time Between Failures (MTBF)

6.8. Mean Time to Repair (MTTR)

6.9. Network Element

6.10. Outage

6.11. Synchronous Optical Network (SONET)

ix

TABLE OF CONTENTS (Continued)

6.12. Unidirectional Path Switched Ring (UPSR)

6.13. Event

6.14. Event Correlation

6.15. Acronyms

LIST OF ILLUSTRATIONS

Figure 3-1. Data Bridge Single Node Figure 3-2. Data Bridge Any Node x

Supersedes FAA-P-2978d

1. SCOPE AND CLASSIFICATION

1.1. Scope

This product description contains the technical requirements of the Federal Aviation Administration (FAA) for a Dedicated Network Telecommunications System (DNTS) The DNTS is intended for use as the principal element in a fiber optic based communications system for airports.

1.2. System Overview

The DNTS equipment will replace current telecommunications equipment providing communications between FAA facilities on airport. The DNTS equipment described in this PD will replace aging, unsupportable telecommunications equipment currently operating in the National Airspace System (NAS), and will provide telecommunications equipment for future expansion projects and new facility starts. While the new DNTS equipment will utilize recent technology components and include additional features, they will also support existing legacy interfaces and be physically compatible with existing equipment. This PD covers only the telecommunications equipment for the Airport Cable Loop System Sustained Support program to be procured by the FAA.

Supersedes

Supersedes FAA-P-2978d

2. APPLICABLE DOCUMENTS

2.1. General

The following documents, of the issue specified below, form part of this product description to the extent specified herein. In the event of a conflict between the requirements of this product description and any document listed or referenced below, this product description takes precedence.

2.2. FAA Specifications and Standards

FAA-G-2100j Electronic Equipment, General Requirements

FAA-STD-019f Lightning and Surge Protection, Grounding, Bonding and

Shielding Requirements for Facilities and Electronic Equipment

NAS-IC-5107000-2 Interface Control Document, NAS Infrastructure

Management System Manager/Managed Subsystem Agent using Simple Network Management Protocol Version 3 (SNMPv3)

FAA-E-2761c Cable, Fiber Optic, Multimode and Single-Mode, Multifiber

FAA Order 1000.36 FAA Writing Standards

FAA-2016-HF-STD-001b Human Factors Design Standard (HFDS)

A limited number of copies of this product description and other applicable FAA documents may be obtained from the Contracting Officer in the FAA office issuing the Invitation for Bid (IFB) or Request for Proposal (RFP). Requests should fully identify the material desired (document identification number, title, date of issue, etc.) and should identify the IFB or RFP or contract involved, or other use to be made of the material requested.

2.3. Food and Drug Administration

Title 21, Chapter I, Subchapter J, 21CFR1040.10, Performance Standards for Light-Emitting Products.

2.4. Alliance for Telecommunications Industry Solutions (ATIS), American National Standards Institute (ANSI), Electronic Industries Association (EIA), and Telecommunications Industry Association (TIA)

ANSI T1.105-2001 Synchronous Optical Network (SONET)

Supersedes FAA-P-2978d

ANSI T1.403-1999 DS1 Electrical specification

ATIS T1.523-2001 Telecom Glossary 2000

ANSI/EIA/TIA-232F Interface between Data Terminal Equipment and Data

Circuit Terminating Equipment Employing Serial Binary Data Interchange

ANSI/TIA/EIA-530-A-1992 High Speed Interface Using 25 Pin Connector

ANSI/TIA/EIA-422-B-1994 Electrical Characteristics of Balanced Voltage Digital

Interface Circuits

EIA-310d Cabinets, Racks, Panels, and Associated Equipment

ATIS 0900001 Synchronization of Packet Networks

ATIS 0900101.2013 Synchronization Interface Standard

ATIS 0900105.09.2013 Synchronous Optical Network (SONET) – Network Element Timing and Synchronization

2.5. Institute of Electrical and Electronics Engineers (IEEE)

IEEE 802.1p Quality of Service (QoS)

IEEE 802.1q-2011 Access Control (MAC) Bridges and Virtual Bridge Local

Area Networks

IEEE 802.3-2018 Standard for Ethernet

IEEE 802.3at-2009 Power over Ethernet

2.6. International Telecommunication Union (ITU)

G.8031/Y.1342 (2011) Ethernet Linear Protection Switching (ELPS) Amendment 1

G.8032/Y.1344 (02/12) Ethernet Ring Protection Switching (ERPS)

ITU-T G991.2 (2003) Digital Subscriber Line Amendment 2

Supersedes FAA-P-2978d

IETF RFC 4553 (06/06) Structure-Agnostic Time Division Multiplexing (TDM) over Packet (SAToP)

IETF RFC 5086 (12/07) Structure-Aware Time Division Multiplexed (TDM)

Circuit Emulation Service over Packet Switched Network (CESoPSN)

IETF RFC 5654 (02/09) Multi-Protocol Label Switching – Transport Profile

(MPLS-TP)

IETF RFC 7761 (02/06) Protocol Independent Multicast – Sparse Mode (PIM-SM)

IETF RFC 8200 (07/17) Internet Protocol, Version 6 (IPv6) Specification

IETF RFC 8504 (01/19) IPv6 Node Requirements

2.7. Metro Ethernet Forum

MEF 3 Circuit Emulation Service Definitions, Framework and Requirements in Metro Ethernet Networks

MEF 8 Implementation Agreement for the Emulation of PDH

Circuits over Metro Ethernet Networks

2.8. Military Specifications and Standards

MIL-HDBK-217F Reliability Prediction of Electronic Equipment

2.9. Telcordia Technologies Standards

GR-253 Issue 5 Synchronous Optical Network (SONET) Transport Systems

GR-63 Issue 4 Network Equipment Building System

GR-209 Issue 6 Generic Requirements for Product Change Notices

GR-1089 Issue 6 Electromagnetic Compatibility and Electrical Safety –

Generic Criteria for Network Telecommunications Equipment

GR-1244 Issue 4 Clocks for the Synchronized Network: Common Generic

Criteria

Supersedes FAA-P-2978d

GR-1400 Issue 3 SONET Unidirectional Path Switched Ring (UPSR) Equipment Generic Criteria

SR-3580 Issue 5 Network Equipment Building System (NEBS) Criteria

Levels

SR-2275 Issue 4 Telcordia Notes on the Network

PUB 43801Issue 1 Digital Channel Bank Requirements and Objectives

PUB 62310 1987 Digital Data Systems; Channel Interface Specifications

Supersedes FAA-P-2978d

3. REQUIREMENTS

This product description conforms to FAA Order 1000.36. The requirements section consists of the following five (5) subsections.

3.1 Requirements for the DNTS equipment.

3.2 Workmanship, Materials and Finishes.

3.3 Reliability and Maintainability.

3.4 Safety.

3.5 Grounding, Bonding, and Shielding.

3.1. Telecommunications System Equipment

The Dedicated Network Telecommunications System (DNTS) equipment shall (1) be scalable with options to configure any mix of interfaces from sections 3.1.2, 3.1.3 and/or Section 3.1.4 up to the aggregate capacity of the specified SONET Optical Interface.

The DNTS shall (2) provide an optional configuration providing a limited set of capabilities to include SONET OC-3, 100 BaseT, and any mix of Low Speed interfaces from 3.1.4.

The DNTS shall (3) be compliant with Telcordia GR-253 and ANSI T1.105 SONET specifications.

The DNTS shall (4) have optional configurations to function at the SONET OC-3 line rate.

The DNTS shall (5) have optional configurations to function at the SONET OC-12 line rate.

The DNTS shall (6) have optional configurations to function at the SONET OC-48 line rate.

The DNTS shall (7) support transmission over single-mode fiber as specified in FAA-E- 2761c.

The DNTS shall (8) support UPSR as specified in GR-1400.

The DNTS shall (9) operate with one or both optical transmitter/receivers enabled.

When both transmitter/receivers are enabled, the DNTS shall (10) provide for auto reconfiguration in accordance with UPSR.

In the event of loss of physical layer connectivity on one path between nodes with redundant fiber paths, the system shall (11) restore communications within 60 milliseconds.

The transmitter’s peak emission wavelength shall (12) be 1310 nm ± 50 nm.

Supersedes FAA-P-2978d

Transmitter/Receiver

(1) The dynamic range of the transmitter/receiver shall (13) not be less than 13 dB for short or intermediate reach transmitter/receivers.

(2) The dynamic range of the transmitter/receiver shall (14) not be less than 25 dB for long reach transmitter/receivers.

(3) The maximum transmitter optical power output shall (15) not exceed the maximum allowable input power level of the receiver for short and intermediate reach transmitters.

The DNTS shall (16) provide Structure-Agnostic Time Division Multiplexing (TDM) over

Packet (SAToP) in accordance with IETF RFC 4553.

The DNTS shall (17) provide Circuit Emulation Service over Ethernet (CESoETH) in accordance with MEF 3

The DNTS shall (18) provide Circuit Emulation Service over Ethernet (CESoETH) in accordance with MEF 8.

The DNTS shall (19) provide Circuit Emulation Service over Packet Switched Network (CESoPSN) in accordance with IETF RFC 5086.

The DNTS shall (20) provide Multi-Protocol Label Switching – Transport Profile (MPLS-TP) in accordance with IETF RFC 5654.

The DNTS shall (21) provide Ethernet Linear Protection Switching (ELPS) in accordance with

ITU-T G.8031.

The DNTS shall (22) provide Ethernet Ring Protection Switching (ERPS) in accordance with

ITU-T G.8032.

The DNTS shall (23) provide Operation, Administration and Maintenance (OAM) in accordance with IEEE 802.3-2018.

The DNTS shall (24) have the option to terminate a minimum of ten IEEE 802.3 10/100/1000BaseT circuits, each circuit independently configurable as Layer 1 or Layer 2 .

The DNTS shall (25) have optional configurations to provide a minimum of four Optical Gigabit Ethernet (GbE) circuits.

The DNTS shall (26) provide MSTP in accordance with IEEE 802.1q Clause 13.

Supersedes FAA-P-2978d

The DNTS shall (27) provide VLAN-aware bridging capability in accordance with IEEE 802.1q Clause 5.

shall (28) Reserved

The DNTS shall (29) provide Virtual Bridged Local Area Networks in accordance with IEEE 802.1q Clause 7.

The DNTS shall (30) provide Hierarchical Quality of Service (QoS) in accordance with IEEE 802.1p.

The DNTS shall (31) provide Unicast to Multicast conversion using Protocol Independent Multicast – Sparse Mode (PIM-SM) in accordance with IETF RFC 7761.

The DNTS shall (32) support IPv6 for management functions and interfaces in accordance with IETF RFC 8200 and 8504.

The DNTS shall (33) support IPv6 for packet transport in accordance with IETF RFC 8200 and 8504.

3.1.3.1. Symmetrical High speed Digital Subscriber Line SHDSL

The DNTS shall (34) terminate a minimum of two ITU-T G.991.2 compliant SHDSL circuits.

3.1.3.2. DS1

The DNTS shall (35) terminate a minimum of four ANSI T1.403 compliant DS1 circuits.

The T1/DS1 interfaces shall (36) provide Extended Super Frame (ESF) format as defined by

ANSI T1.403.

The T1/DS1 interfaces shall (37) provide Bipolar with 8-zero substitution (B8ZS) line code as defined by ANSI T1.403.

3.1.4.1. ANSI/EIA/TIA-232F

The DNTS shall (38) provide ANSI/EIA/TIA-232F Type D compliant interfaces supporting Synchronous and Asynchronous communications.

The DNTS ANSI/EIA/TIA-232F Interface Type D shall (39) be configurable to allow for any combination of control signals to be forced on, enabled or disabled.

Supersedes

The DNTS ANSI/EIA/TIA-232F interface shall (40) use the 25-pin connector where Transmit

Signal Element Timing (DTE – pin 24) is passed through the DNTS independent of the DNTS Timing.

3.1.4.2. ANSI/EIA/TIA-422/530

The DNTS shall (41) provide ANSI/EIA/TIA-422/530 compliant interfaces supporting Synchronous and Asynchronous communications.

The DNTS shall (42) provide ANSI/EIA/TIA-422 compliant interfaces using the 25 pin connector (EIA-530) where Transmit Signal Element Timing (DTE Source – pins 11 and 24) is passed through the DNTS independent of the DNTS Timing.

3.1.4.3. DDS

The DNTS shall (43) provide Digital Data Service (DDS) interfaces as defined by Telcordia

PUB 62310.

3.1.4.4. Data Bridge

The DNTS shall (44) bridge one simplex ANSI/EIA/TIA-232F synchronous input to a minimum of five simplex ANSI/EIA/TIA-232F synchronous output circuits on the same DNTS (Figure 3-1).

Single Node

Dedicated Network Telecommunications

System (DNTS)

EIA/TIA-232

Digital Bridge Circuit Input

EIA/TIA-232

Digital Bridge Circuit Output 5

EIA/TIA-232

Digital Bridge Circuit Output 4

EIA/TIA-232

Digital Bridge Circuit Output 3

EIA/TIA-232

Digital Bridge Circuit Output 2

EIA/TIA-232

Digital Bridge Circuit Output 1

Figure 3-1. Data Bridge Single Node

The DNTS shall (45) bridge one simplex ANSI/EIA/TIA-232F synchronous input over the network to output a minimum of 5 simplex ANSI/EIA/TIA-232F synchronous output circuits on any node in the same ring (Figure 3-2).

Supersedes FAA-P-2978d

EIA/TIA-232

Digital Bridge

Output Circuit 4

EIA/TIA-232

Digital Bridge

Output Circuit 5

EIA/TIA-232

Digital Bridge

Output Circuit 2

EIA/TIA-232

Digital Bridge

Output Circuit 1

EIA/TIA-232

Digital Bridge

Output Circuit 3

DNTS

DNTS

DNTS

DNTS

DNTS

DNTS

EIA/TIA-232

Digital Bridge

Input

Figure 3-2. Data Bridge Any Node

3.1.4.5. Voice Interfaces

The DNTS shall (46) provide Ear and Mouth (E&M) Voice Frequency interfaces as defined by Telcordia PUB 43801.

The DNTS shall (47) provide Foreign Exchange Service (FXS) Voice Frequency interfaces as defined by Telcordia PUB 43801.

The DNTS shall (48) provide Foreign Exchange Office (FXO) Voice Frequency interfaces as defined by Telcordia PUB 43801.

The DNTS shall (49) provide Private Line Automatic Ringdown (PLAR) Voice Frequency interfaces as defined by Telcordia PUB 43801.

The Voice Frequency audio interfaces nominal impedances are as follows:

(1) FXO and FXS interfaces shall (50) be configurable to 600 or 900 ohm impedance.

(2) E&M interface shall (51) provide 600 ohm impedance.

The audio transmission level for the E&M interfaces listed below shall (52) be adjustable over a range of –16.0 dBm to +7 dBm for 2-Wire circuits.

The audio transmission level for the E&M interfaces listed below shall (53) be adjustable over a range of –16.0 dBm to +7 dBm for 4-Wire circuits.

The Voice Frequency E&M interface types required are as follows:

Supersedes FAA-P-2978d

(1) The E&M interface shall (54) provide Type I signaling as defined by SR-2275.

(2) The E&M interface shall (55) provide Type II signaling as defined by SR-2275.

(3) The E&M interface shall (56) provide Type III signaling as defined by SR-2275.

(4) The E&M interface shall (57) provide Type IV signaling as defined by SR-2275.

(5) The E&M interface shall (58) provide Type V signaling as defined by SR-2275.

Attenuation Distortion

(1) The Voice Frequency Interfaces attenuation distortion shall (59) have a tolerance of -0.5 to

1.5 dB in the frequency range of 404 – 2804 Hz.

(2) The Voice Frequency Interfaces attenuation distortion shall (60) have a tolerance of -0.5 to

4.5 dB in the frequency ranges of 304 – 403 and 2805 – 3004 Hz.

Frequency Shift The frequency shift for the Voice Frequency Interfaces shall (61) be less than or equal to 1.0 Hz.

Envelope Delay Distortion The envelope delay distortion for the Voice Frequency Interfaces shall (62) be less than or equal to 650 μsec.

Phase Jitter

(1) The phase jitter for the Voice Frequency Interfaces shall (63) be less than or equal to 8° in the frequency range of 4 – 300 Hz.

(2) The phase jitter for the Voice Frequency Interfaces shall (64) be less than or equal to 3° in the frequency range of 20 – 300 Hz.

3.1.4.6. Dry Contact Closure

The DNTS shall (65) provide dry contact closure with output current rating of > 1A.

The DNTS system shall (66) provide an optional Primary Reference Source (Stratum 1) timing and synchronization compatible with the DNTS equipment and in accordance with:

(1) ATIS-0900001

Supersedes FAA-P-2978d

(2) ATIS-0900101.2013

(3) ATIS-0900105.09.2013

The DNTS shall (67) include a Stratum 3 or better internal clock.

The DNTS shall (68) accept timing from a Building Integrated Timing System (BITS) interface per GR-1244.

The DNTS shall (69) accept timing from an OC-N interface per GR-1244.

The DNTS shall (70) accept timing from an incoming DS1 interface per GR-1244.

The DNTS DS1 interfaces shall (71) be synchronized with the selected timing source.

The DNTS shall (72) synchronize internal clocks every 24 hours with a common time source.

The DNTS shall (73) synchronize internal clocks to the common time source when the time difference is greater than 6 seconds.

The DNTS shall (74) support NTP.

It shall (75) be possible to network, in a ring configuration via optical fiber, as few as two and as many as sixteen DNTSs.

(a) The DNTS shall (76) be configurable, using an IEEE 802.3 10/100/1000BaseT interface, by the FAA without manufacturer intervention.

(b) The DNTS shall (77) provide for additional circuits to be added by the FAA without manufacturer intervention.

(a) If the DNTS is software configurable, the configuration data shall (78) be preserved within the DNTS such that no single module failure will require the reentry of configuration files.

(b) The DNTS shall (79) internally preserve configuration data where in the event of a power failure the DNTS will fully restore services when power is restored.

(c) The DNTS shall (80) allow for the storage of configuration data to an external device that is

Supersedes FAA-P-2978d not part of the DNTS, such as a hard drive on a laptop, for backup and restoral purposes.

(d) The DNTS shall (81) be capable of restoring configuration data from an external device.

The nominal BER attributable to the DNTS shall (82) be 1 x 10-9 or better.

The DNTS shall (83) be fully functional, with all interfaces working within normal operating ranges, when the BER of the transport layer is no worse than 1 x 10-6.

(a) The DNTS shall (84) include built in self-test (BIST) functionality and provide results via SNMP, trap and queries

(b) BIST data shall (85) be identified by the network address of the unit to which it applies.

(c) The DNTS shall (86) have ability to discover node adjacencies.

(d) The DNTS shall (87) failover to alternate processing equipment for any failure that affects system operations preserving normal or degraded operations.

(a) The DNTS shall (88) provide status via SNMP V3, both traps and SNMP Queries.

(b) The DNTS shall (89) indicate a minor alarm when a failure in any power supply module, in which the failure does not cause an outage.

(c) The DNTS BIST shall (90) provide status when optical received power is insufficient to sustain a BER of 1x10-6 or better.

(d) The DNTS BIST shall (91) indicate an I/O module failure status.

(e) The DNTS BIST shall (92) indicate a Node failure status.

(f) The DNTS BIST shall (93) indicate a Loss of Signal (LOS) status.

(g) The DNTS BIST shall (94) indicate a Loss of Frame (LOF) status.

Supersedes FAA-P-2978d

(h) The DNTS BIST shall (95) indicate an Alarm Indication Signal (AIS) status.

(i) As a minimum, the DNTS shall (96) accept, via contact closures, major and minor alarm inputs from external equipment connected to it.

The DNTS shall (97) generate audit logs for both Operating System and Application level events for local, non-local, and remote sessions. The following minimum events must be captured and recorded:

(1) Resource degradation alerts (e.g., 100% utilization, disk space full, volume full),

(2) Login and logout, successful and unsuccessful,

(3) Account creation/modification and permissions or configuration changes,

(4) Administrator level activities,

(5) Startup/Shutdown of System/Services/processes,

(6) Access to privileged functions (e.g., setting auditable event and intrusion detection devices) including maintenance,

(7) Results from malicious code protection (as capable),

(8) Access control list denials (as capable), and

(9) IDS signature based attacks (as capable).

The DNTS shall (98) generate audit records that contain the type of event, date, time, system source (asset name and IP address) where the event occurred, user/subject identification, outcome of the event (success/failure), and session ID if applicable; but do not contain sensitive information, such as passwords, actual system data, or privacy information.

The DNTS shall (99) allocate sufficient storage capacity to store 14 days of security-relevant audit records in online storage, and configure the system auditing capacity to reduce the likelihood of audit record storage capacity being exceeded (e.g., provide 25% capacity above estimated need).

The DNTS shall (100) provide audit record warning notifications in accordance with defined thresholds. Systems must implement at least three levels of warning notifications (e.g., 50%, 75%, 90%).

The DNTS shall (101) not alter the original content or time ordering of audit records.

The DNTS shall (102) provide accurate time stamps (including date, time, and UTC offset) in audit records.

The DNTS shall (103) time stamp audit records to within one second.

The DNTS shall (104) protect audit information and audit tools from unauthorized access, modification, and deletion by restricting access privileges to individuals who are responsible for

Supersedes FAA-P-2978d performing auditing functions.

The DNTS shall (105) be able to back up its audit records at least once per 24-hour period onto a syslog server.

The DNTS shall (106) use cryptographic mechanisms to protect the integrity of audit record information and auditing tools.

3.1.15.1. General

The DNTS shall (107) be able to integrate with automated mechanisms (e.g., Active Directory, TACACS, LDAP, RADIUS) to support the management (e.g., establishing, activating, modifying, deactivating, reviewing, and monitoring accounts; expiring unused accounts) of system accounts.

The DNTS shall (108) automatically disable or remove temporary and emergency user accounts within 24 hours after the need for the account is no longer valid, as determined by a system administrator.

The DNTS shall (109) automatically disable inactive user accounts (Operating System and Application) after 90 days of inactivity.

The DNTS shall (110) restrict account privileges to system administration, security administration, generic user, or super user.

The DNTS shall (111) prevent non-privileged users from executing privileged functions including disabling, circumventing, or altering implemented security safeguards/countermeasures

The DNTS shall (112) enforce a limit of 5 consecutive invalid login attempts within a 15-minute period.

The DNTS shall (113) be configured to either automatically:

(1) Lock the account for 15 minutes, or

(2) Lock the account until released by an administrator, when the maximum number of unsuccessful attempts is exceeded, regardless of whether the login occurs via a local or a network connection.

The DNTS shall (114) be configured to restrict logical access to the specific users that are responsible for implementing configuration changes through roles and/or access privileges.

Audit functions must be configured to log all configuration changes and privileged user access.

Supersedes FAA-P-2978d

The DNTS shall (115) perform the following verification and notification functions:

(1) Verifies the correct operation of access controls and auditing functions;

(2) Performs this verification upon system start-up, restart, and upon command by an authorized privileged user at least every 90 days;

(3) Notifies system and/or security personnel of failed security verification tests; and

(4) Implement the actions performed upon notification of failed security verification, including one of the following: system shut down, system restart, or notify system maintenance/security personnel.

The DNTS shall (116) support Network Access Controls (NAC) (e.g., NIC address, host name), Active Directory, and/or group policy for connecting devices on the network.

The DNTS shall (117) generate error messages without revealing, in error logs or administrative messages, sensitive information (e.g., passwords, PII) or information that could be exploited by adversaries.

The DNTS shall (118) restrict access to error messages and error logs only to authorized personnel via either physical or logical access controls.

3.1.15.2. Authenticators

The DNTS shall (119) use multifactor authentication for remote and local access to privileged and non-privileged user accounts.

The DNTS shall (120) implement replay-resistant authentication mechanisms for network access to privileged and non-privileged accounts.

The DNTS shall (121) require passwords with the following characteristics: a minimum of 8 characters with no complexity requirements when MFA is also employed, and a minimum of 12 characters requiring at least one non-alphabetic character otherwise. This follows CIS guidelines.

The DNTS shall (122) support annual password expiration following CIS guidelines.

The DNTS shall (123) protect authenticator content (passwords, PIN, community strings) from unauthorized disclosure and modification in storage and in transmission. Authenticator content must use encryption for protection while in storage. Protection of authenticators in transmission may use either encryption or through isolation using a dedicated connection.

The DNTS shall (124) enforce password lifetime restrictions to be a minimum of 2 days between password changes.

The DNTS shall (125) enforce a 24-password change cycle reuse restriction.

The DNTS shall (126) enforce an immediate (at first login) password change when a

Supersedes FAA-P-2978d temporary password is issued for account creation and for lost/compromised password replacement.

The DNTS shall (127) obscure feedback of authentication information (e.g., masking passwords, prohibit passwords from being displayed) during the authentication process to protect the information from possible unauthorized exploitation/use.

The DNTS shall (128) only implement cryptographic modules that are FIPS 140-2 level 1 compliant for authentication.

3.1.15.3. Warning Banner and Session Locks

The DNTS shall (129) display a warning banner in accordance with FAA Order 1370.121, FAA Information Security and Privacy Program and Policy, as part of every system login.

The DNTS shall (130) display the notification message or banner on the screen until users take explicit actions to acknowledge the notification.

The DNTS shall (131) prevent further access to the system by initiating a session lock (e.g., password protected screen saver), which conceals information, for local access sessions after 15 minutes of inactivity.

The DNTS shall (132) retain the session lock until the user re-authenticates.

The DNTS shall (133) automatically terminate a user initiated logical session after 30 minutes of user inactivity.

3.1.16.1. Input Power

(a) The DNTS is required to meet the following input power requirements:

NOTE: External rectifier/converter is an acceptable solution.

(1) The DNTS shall (134) satisfy all requirements herein, in accordance with the input power conditions as specified in FAA-G-2100j, Section 3.1.1.6a, c, and d Input Power Conditions for AC 120 Volts 1 Phase.

(2) The DNTS shall (135) operate within the range of -38.4 Volts DC to -57.6 Volts DC with < 5% AC Ripple.

(3) The DNTS shall (136) operate within the range of 19.2 Volts DC to 28.8 Volts DC with < 5% AC Ripple.

(b) In the instance that the primary input power parameters are out of the specified nominal voltage range, due to a power event or a loss of power, the DNTS shall (137) satisfy one of the

Supersedes FAA-P-2978d following criteria:

(1) Restore operation within six seconds (once input power returns to defined parameters), OR

(2) Maintain operations for a minimum of fifteen seconds, after the power event or loss of power.

(c) The DNTS shall (138) have built in redundant power inputs.

(d) The DNTS equipment shall (139) incorporate reverse polarity protection to prevent damage to the DNTS equipment if the polarity of the DC input voltage is reversed.

(e) The DNTS solution shall (140) provide a lead acid battery backup power option capable of providing power to the DNTS for a minimum of 8 hours.

3.1.16.2. Inrush and Harmonics

For the purpose of conducting the following power tests, the DNTS equipment will consist of the DNTS, backup power units and any ancillary equipment that would be connected during normal operation.

(a) The DNTS equipment shall (141) meet the inrush current requirements listed in section

3.1.1.2.3 of FAA-G-2100j.

(b) The DNTS equipment shall (142) meet the harmonic content requirements listed in section

3.1.1.2.1 of FAA-G-2100j.

(c) The DNTS equipment shall (143) meet the power factor requirements listed in section 3.1.1.2.2 of FAA-G-2100j.

3.1.16.3. Current Overload Protection

(a) Current overload protection for the DNTS equipment shall (144) be provided by fuses, circuit breakers, or other protective devices for primary input AC and DC circuits.

(b) Overcurrent devices shall (145) be protected from damage due to a loss of power (AC or DC).

(c) Overcurrent protective devices shall (146) detect fault currents and provide fault isolation.

(d) Series combination system overcurrent protection shall (147) not be permitted.

3.1.16.4. Electrostatic Discharge Control

All DNTS equipment shall (148) withstand static discharges as specified in FAA-G-2100j, paragraph 3.2.6, without resultant unit, assembly, or component failures.

Supersedes

3.1.16.5. Loss of Input Voltage

(a) The loss or variance of input voltage, including loss of voltage caused by activation of circuit protector devices, shall (149) not cause or induce any damage to any component in the DNTS or other interfacing equipment.

(b) The loss or variance of input voltage, including loss of voltage caused by activation of circuit protector devices, shall (150) not result in loss of settings or data.

Upon application of power to a node in a loop, end-to-end connectivity shall (151) be restored in less than 5 minutes.

(a) The DNTS shall (152) be mountable in a 19 inch (482.6 mm) wide rack or cabinet compliant with EIA-310d section 1.

(b) The DNTS shall (153) be mountable on a wall.

The DNTS solution including all required external equipment and required ventilation shall (154) not exceed 18 inches in depth and 14.0 inches (eight 1.75-inch rack units) in height .

The DNTS shall (155) meet or exceed NEBS level 3 requirements for operating temperature and humidity as specified in Telcordia SR-3580.

The DNTS equipment shall (156) meet or exceed the NEBS level 3 requirements for altitude including criterion [76] in GR-63c.

The DNTS equipment shall (157) meet or exceed the NEBS level 3 requirements for storage, transportation and handling temperature and humidity specified in Telcordia GR-63c criterion [69-71].

Supersedes FAA-P-2978d

The DNTS equipment shall (158) meet or exceed the NEBS level 3 requirements for storage, transportation and handling shock and vibration specified in Telcordia GR-63c criterion [107- 109, 124].

The DNTS equipment shall (159) meet or exceed the criteria for Earthquake zone 4 as specified in in Telcordia SR-3580.

The DNTS equipment shall (160) meet the NEBS level 3 criteria for ESD and EMI specified in

The DNTS equipment shall (161) meet the NEBS level 3 criteria for Thermal Heat Dissipation specified in Telcordia SR-3580.

The DNTS equipment shall (162) meet the NEBS level 3 criteria for Acoustic Noise specified in

3.2. Workmanship, Materials and Finishes

After fabrication, parts and assembled equipment shall (163), be cleaned of smudges; loose, spattered, or excess solder; weld metal, metal chips and mold release agents; or any other foreign material that might detract from the intended operation, function, or appearance of the equipment.

Screws, nuts, and bolts shall (164) show no evidence of cross threading, mutilation, or detrimental or hazardous burrs, and be firmly secured.

Wires and cables shall (165) be positioned or protected to avoid contact with rough or irregular surfaces or sharp edges, to avoid damage to conductors or adjacent parts.

Supersedes

(a) Shielding on wires and cables shall (166) be secured in a manner that will prevent it from contacting or shorting exposed current-carrying parts.

(b) The ends of the shielding or braid shall (167) be secured to prevent fraying.

(a) The specifications of all materials and parts shall (168) have been derated to ensure that the equipment will operate as intended over the full range of environmental and power conditions.

(b) The DNTS shall (169) be either fabricated from fungus-inert materials or conformably coated to provide an effective fungus resistant barrier.

All metal surfaces on cabinetry, panels, and structural parts shall (170) be painted, plated, or anodized to provide protection from the environment.

3.3. Reliability and Maintainability

The MTBF for an LRU within the DNTS, including built-in test equipment, shall (171) not be less than 50,000 hours.

The MTTR shall (172) not exceed 0.5 hours.

Preventive maintenance shall (173) not be required.

The equipment shall (174) be maintainable using standard commercially available equipment.

3.4. Safety

(a) An equipment malfunction shall (175) in no way contribute to the destruction of the equipment or any part of its environment.

(b) Safety shall (176) conform to the requirements of FAA-G-2100j, section 3.3.5, and associated

Supersedes FAA-P-2978d subsections.

(c) Any exposed or accessible area of the DNTS equipment that could pose a thermal contact hazard, as defined in 2016 FAA HF-STD-001b, section 5.10.10.1, shall (177) be clearly labeled on the top of the LRU as a Thermal Contact Hazard.

(d) Laser equipment and system design, installation, and written operational and maintenance procedures shall (178) conform to 21CFR1040, Food and Drug Administration, Department of Health and Human Services, Part 1040 Performance Standards for Light-Emitting Products.

(e) The exact weight of the LRU shall (179) be clearly labeled on the top of the LRU.

3.5. Grounding Bonding, and Shielding

(a) The DNTS grounding requirements shall (180) be as specified in FAA-STD-019F, sections 4.8, 5.6.5, 5.6.6, and their associated subsections.

(b) The DNTS bonding requirements shall (181) be as specified in FAA-STD-019F, section 4.2, and its associated Subsections.

(c) The DNTS shielding protection requirements shall (182) be as specified in FAA-STD-019F, section 4.8, 5.6.7, and their associated subsections.

Supersedes

Supersedes FAA-P-2978d

4. QUALITY ASSURANCE PROVISIONS

4.1. Testing Conditions

Unless otherwise specified in the Contractor-developed and Government-approved test plan and procedures, all testing will be performed under the following conditions:

Temperature: Room Ambient, +25oC ±10oC (+77oF ±18oF) Atmospheric Pressure: Site pressure Relative Humidity: 20% to 80%

4.2. Verification Methods

Verification methods will be utilized in measuring equipment performance and compliance of individual requirements contained in this product description. The four verification methods, Test, Demonstration, Analysis, and Inspection, are described as follows:

(a) Test (T).

Test is defined as a method of verification wherein performance is measured during or after the controlled application of functional and/or environmental stimuli. Quantitative measurements are analyzed to determine the degree of compliance. The testing may be either automated or manual.

(b) Demonstration (D).

Demonstration is defined as a method of verification where qualitative determination of properties is made for an end-item, including software and/or the use of technical data and documentation. The items being verified are observed in a dynamic state.

(c) Analysis (A).

Analysis is defined as a method of verification consisting of a comparison of hardware or software design(s) with known scientific and technical principles, procedures, properties, and practices to evaluate the capability of a proposed design to meet the mission and/or system requirements. Analysis will be performed by means of an FAA review of technical data that are collected by the Offeror and (a) compiled into a data analysis report or (b) included as a white paper prepared by the Offeror against specific requirements.

(d) Inspection (I).

Inspection is defined as a method of verification to determine compliance without the use of special laboratory appliances, procedures, or services, and consists of a non-destructive static state examination of hardware or software.

4.3. Reliability Modeling and Prediction Data

The Government will accept reliability modeling and prediction data developed in accordance with MIL-HDBK-217F for verification of MTBF requirements.

Supersedes

Supersedes FAA-P-2978d

5. PREPARATION FOR DELIVERY

The DNTS equipment will be delivered in accordance with section D of the contract.

Supersedes

Supersedes FAA-P-2978d

6. APPLICABLE DEFINITIONS

6.1. Commonly Addressed Channels

As used herein, in a ring configuration, a feature which allows more than two channel modules to have the same assignment (i.e., a common address) within the aggregate bit stream with the provision that the equipment at all nodes of the ring retransmit the signals of all commonly addressed channels, if necessary.

6.2. Data Rate

As used herein, the digital transmission capacity expressed in bits per second (b/s).

6.3. Digital Signal 1 (DS1)

A digital signaling rate of 1.544 Mb/s, corresponding to the North American and Japanese T1 designator that complies with ANSI T1.403.

6.4. Ethernet

A standard protocol for a baseband Local Area Network (LAN) bus, using carrier sense multiple access with collision detection (CSMA/CD) as the access method, as defined by ATIS T1.523- 2001 and implemented at the Physical Layer in the Open Systems Interconnection (OSI).

6.5. Failure

As used herein, any condition that results in the system not meeting the operating requirements specified herein.

6.6. Lowest Replaceable Unit (LRU)

As used herein, the lowest level subassembly to be replaced during site level maintenance activities. Note: An LRU is a separate, replaceable physical package that performs usually a single function or a group of closely related functions.

6.7. Mean Time Between Failures (MTBF)

An indicator of expected system reliability, usually expressed in hours, and which is calculated on a statistical basis from the known failure rates of various components of the system as defined by ATIS T1.523-2001.

6.8. Mean Time to Repair (MTTR)

As used herein, the statistical mean interval, expressed in hours and minutes, required to restore the system to full functional capability (travel time is not included). Note: The interval measured is the total time required to diagnose to the module level, replace the defective module(s), test, and validate the operational status of the system.

6.9. Network Element

A facility or equipment that provides or supports telecommunications services.

6.10. Outage

As used herein, any fault that (a) results in a loss of communication affecting one or more

Supersedes FAA-P-2978d channels, or (b) results in a bit error ratio worse than 1x10-6 in any data stream at any point in the DNTS, and (c) is not successfully bypassed by automatic switching to a spare facility.

6.11. Synchronous Optical Network (SONET)

An interface standard for synchronous optical network transmission applicable to the Physical Layer of the OSI Reference Model. Note: Signals are transmitted at Optical Carrier (OC) rates in defined multiples of 51.840 Mb/s (OC-1). A data rate of 51.840 Mb/s corresponds to the optical carrier rate level 1 (OC-1); a data rate of 155.52 Mb/s corresponds to the optical carrier rate level 3 (OC-3), etc.

6.12. Unidirectional Path Switched Ring (UPSR)

A survivable, closed loop, transport architecture that protects against transmission medium and node failures by means of diverse paths consisting of counter-rotating rings. Note: The transmission media form two counter-rotating rings, carrying traffic in both directions. The destination node monitors both directions and immediately switches to the alternate path upon loss or degradation of the received signal.

6.13. Event

An event is an unsolicited notification, such as an SNMP trap generated by an agent process in a managed object (network element) or by a user action. Event messages received from network elements are referred to as Alarms. The terms Alarm and Event can be used interchangeably.

6.14. Event Correlation

(a) Event correlation consists of event filtering, event aggregation, event translation, event masking, and action triggering.

(b) Event filtering – Event filtering consists of discarding events that are deemed to be irrelevant and filtering of informational or debugging events that are only interested in availability and faults.

(c) Event aggregation – Event aggregation (also known as event de-duplication) consists in merging duplicates of the same event. Such duplicates may be caused by network instability (e.g., the same event is sent twice by the event source because the first instance was not acknowledged sufficiently, but both instances eventually reach the event destination). Another example is the same event is sent repeatedly by the event source until the problem is solved.

(d) Event Translation – Event translation is the Network Management System’s ability to translate an incoming event by suppressing the original event and transmitting a modified version of the original.

(e) Event masking – Event masking consists in ignoring events pertaining to systems that are downstream of a failed system. For example, servers that are downstream of a crashed router will fail availability polling.

Supersedes FAA-P-2978d

6.15. Acronyms

Acronyms

AC Alternating Current

ACL Airport Cable Loop

ADM Add-Drop Multiplexer

AIC Ampere Interrupting Capacity

AIS Alarm Indication Signal

ANSI American National Standards Institute

ATIS Alliance for Telecommunications Industry Solutions

B8ZS Bipolar with 8 Zero Substitution

BER Bit Error Ratio

BIST Built In Self-Test

BITS Building Integrated Timing System

C Celsius

CESoPSN Circuit Emulation Service over Packet Switched Network

CFR Code of Federal Regulations dB Decibel

DC Direct Current

DCE Data Communications Equipment

DDS Digital Data Service

DS1 Digital Signal 1

DTE Data Terminal Equipment

E&M Ear & Mouth

EIA Electronic Industries Association

ELPS Ethernet Linear Protection Switching

ERPS Ethernet Ring Protection Switching

ESF Extended SuperFrame

F Fahrenheit

FAA Federal Aviation Administration

FCC Federal Communications Commission

FOTS Fiber Optic Transmission Systems

FXO Foreign Exchange Office

FXS Foreign Exchange Service

GR Generic Requirement

GUI Graphical User Interface

Hz Hertz

Supersedes FAA-P-2978d

Acronyms

I/O Input/Output

IFB Invitation for Bid

ISO International Organization for Standardization

LAN Local Area Network

LOF Loss of Frame

LOS Loss of Signal

LRU Lowest Replaceable Unit

MPLS-TP Multi-Protocol Label Switching – Transport Profile

MTBF Mean Time Between Failures

MTTR Mean Time To Repair

NAS National Airspace System

NE Network Element

OAM Operations, Administration, and Maintenance

OC Optical Carrier

OSH Act Occupational Safety and Health Act

OSHA Occupational Safety and Health Administration

PD Purchase Description

PLAR Private Line Automatic Ringdown

QoS Quality of Service

RFC Request for Comment

RFP Request for Proposal

RMS Remote Maintenance System

SHDSL Symmetrical High Speed Digital Subscriber Line

SNMP Simple Network Management Protocol

SONET Synchronous Optical Network

SR Special Report

TDM Time Division Multiplexing

TDMoIP Time Division Multiplexing over Internet Protocol

TIA Telecommunications Industry Association

UPSR Unidirectional Path Switched Ring

VLAN Virtual Local Area Network