JCDC SOW Network Equipment Replacement.doc

Job Corps Data Center

Statement of Requirements : Network Equipment Replacements

Table of Contents

31.0 Introduction

32.0 Background

33.0 Objective

44.0 Business Environment

45.0 Description and Scope of Work

46.0 Network Equipment

56.1 Load Balancing Appliance

56.2 Fibre Channel Switch

56.3 DNS Based Load Balancer

56.4 Virtual Distributed Switch Appliance

56.5 Virtual Distributed Switch

56.6 Core Switch

56.7 Firewall Module

56.8 10GB 16 Port Fiber Optic Ethernet Module

56.9 Voice Routers

56.10 Optics

57.0 Deliverables

58.0 Warranty and Product Registration

59.0 Shipping Schedule

510.0 Shipping and Logistics

511.0

HYPERLINK \l "_Toc315094517" Special Requirements

512.0 Compliance with Nondiscrimination and Equal Opportunity Laws

1.0 Introduction

The objective of this project is to replace “end-of-life” network equipment at the Job Corps Data Center locations. The network equipment to be replaced is no longer covered by the manufacturer warranty. Later sections of this document provide detailed specifications for the required equipment.

2.0 Background

Through a nationwide network of campuses, Job Corps offers a comprehensive array of career development services to at-risk young women and men, ages 16 to 24, to prepare them for successful careers. Job Corps employs a holistic career development training approach which integrates the teaching of academic, vocational, employability skills and social competencies through a combination of classroom, practical and work based learning experiences to prepare youth for stable, long-term, high-paying jobs.

There are 130 Job Corps centers and satellite centers located throughout the United States including Alaska, Hawaii and Puerto Rico. The Job Corps Local Area Networks (LANs) and Wide Area Network (WAN) supports approximately 65,000 users. The backup location is intended to provide rapid failover capability in the event that the primary Data Center in Austin, Texas becomes unavailable to Job Corps users for an extended period of time. The backup location also requires network infrastructure components to support production applications that are critical to the day to day operations of Job Corps centers.

The Job Corps Data Center (JCDC) is responsible for the design, development and deployment of Information Technology projects for Job Corps. The JCDC technical staff is responsible for defining the switch hardware/software specifications, developing standard switch configuration baselines and providing project oversight.

The Vendor shall be responsible for supplying the equipment meeting or exceeding the equipment specifications defined in Section 5. Section 6 of this document defines the required quantities for the equipment defined in Section 5.

3.0 Objective

The objective of this project is to replace “end-of-life” network equipment at the Job Corps Data Center locations.

Job Corps anticipates that the bid process will lead to the award of a contract to a single Vendor who shall be responsible for providing the equipment specified in section 6 and 7 of this document.

4.0 Business Environment

Job Corps Data Center (JCDC) business hours are from 8:00 A.M. to 5:00 P.M Monday Central time zone. The Job Corps Data Center is closed on Federal holidays. All deliveries of switches and components shall take place during normal business hours.

The Vendor is responsible for coordinating delivery locations and times with the designated point of contact listed below:

Clint Barton, Telecommunications Manager

Job Corps Data Center

1627 Woodland Avenue

Austin, TX 78741

888.886.1303x7217

512.787.5702 Federal Holidays for 2012

5.0 Description and Scope of Work

· The Vendor shall provide all equipment, licenses, optics, miscellaneous materials and hardware maintenance as specified in Section 6 and 7 of this document.

· The Vendor shall be responsible for shipping the equipment and materials to the Job Corps Data Center location in Texas.

6.0 Network Equipment

The sections below define the hardware and software requirements for the network equipment. The Vendor shall propose equipment that meets or exceeds the specifications in the tables below.

6.1 Load Balancing Appliance

The load balancing appliance shall be deployed in high availability pairs. These appliances will provide load balancing services as well SSL offload, TCP offload and virtual contexts for segmentation between production and development systems. The vendor proposed load balancing appliance must meet or exceed all of the specifications listed in the table below.

The Load Balancer appliance shall natively load-balance the following protocols in an IPv4 environment: HTTP/HTTPS, FTP, DNS, ICMP, SIP, RTSP, Extended RTSP, LDAP, RADIUS, SCCP and Microsoft RDP. In an IPv6 environment, it shall natively load-balance HTTP, HTTPS and SSL protocols.

The Load Balancer appliance shall support translation and load balancing between IPv4 and IPv6 networks

6.2 Fibre Channel Switch

The Fibre Channel switch shall be installed in a high availability pair. The proposed Fibre Channel Switches must meet or exceed the specifications listed in the table below. The proposed Fibre Channel Switches must include 8Gbps FC optics for all ports on the Fibre Channel switches.

Buffer credits: Up to 128 for a group of 4 ports, with a default of 32 buffer credits per port and a maximum of 125 buffer credits for a single port in the group

Ports per chassis: Up to 48 8-Gbps ports

PortChannel: Up to 16 ports in a PortChannel with automatic load balancing

Intelligent packet inspection @ port level

Hardware zoning by access control lists (ACLs)

Logical-unit-number (LUN) zoning and read-only zones

Extended broadcast zoning

FC-SP switch-to-switch authentication

FC-SP host-to-switch authentication

RBAC using RADIUS or TACACS+ authentication, authorization, and accounting (AAA) functions

Management access

Secure FTP (SFTP)

Secure Shell Version 2 (SSHv2)

Simple Network Management Protocol Version 3 (SNMPv3) implementing Advanced Encryption Standard (AES)

Control-plane security

Registered state change notification (RSCN)

Login services

Broadcast

In-order delivery

Name-server zoning

VSANs

PortChannels

NPV mode

F-port trunking and channeling

IVR Inter VSN Routing

Online diagnostics

Internal loopbacks

SPAN

Fibre Channel traceroute

Fibre Channel ping

Fibre Channel debug

Cisco Fabric Analyzer

Syslog

Port-level statistics

Out-of-band 10/100/1000 Ethernet port

EIA/TIA-232 serial console port

In-band management using IP over Fibre Channel

Access protocols

CLI

SNMP

SMI-S

Security

RBAC using RADIUS or TACACS+ authentication, authorization, and accounting (AAA) functions

VSAN-based roles

SSHv2

SNMPv3

rocess monitoring and stateful process restart

Per-VSAN fabric services

Redundant, hot-swappable power supplies and redundant, hot-swappable power supply and fan trays

Hot-swappable SFP and SFP+ optics

PortChannels aggregating up to 16 ports with redundant load balancing

F-port channeling and trunking

Online diagnostics

Call Home

Port beaconing

System LEDs

SNMP traps for alerts

6.3 DNS Based Load Balancer

The DNS based load balancer will be deployed in two locations to provide client redirection in the event that the systems in a location become unavailable. The proposed DNS Based Load Balancer must meet or exceed the specifications below.

20,000 to 23,000 sustained rate to 1,000 or more virtual IP addresses

12,000 to 13,000 sustained rate to more than 1,000 virtual IP addresses

CRA (DNS race)

Load-balancing methods

6.4 Virtual Distributed Switch Appliance

The Virtual Distributed Switch (vDS) appliance will support the Virtual Distributed Switch Management plane. The vDS appliance will be deployed in a high availability mode supporting stateful failover. All proposed vDS appliances must meet or exceed the specifications below.

• 2 x8 half-length slots x16 connector on full-height slot and x8 connector on low-profile slot

IPMI 2.0 compliant for management and control

One 10/100BASE-T out-of-band management interface

CLI and web GUI management tool for automated, lights-out management

Keyboard, video, and mouse (KVM)

Rail kit

6.5 Virtual Distributed Switch

The Virtual Distributed Switch (vDS) is required to support the VMware ESXI deployment and provide segmentation between virtual machine management and network management. All proposed vDS must meet or exceed the requirements specified below.

2048 virtual Ethernet ports per VMware vDS, with 216 virtual Ethernet ports per physical host

2048 active VLANs

2048 Port Profiles

32 physical NICs per physical host

256 PortChannels per VMware vDS, with 8 PortChannels per physical host

Layer 2 Features

Layer 2 switch ports and VLAN trunks

IEEE 802.1Q VLAN encapsulation

Link Aggregation Control Protocol (LACP): IEEE 802.3ad

Advanced PortChannel hashing based on Layer 2, 3, and 4 information

Source MAC address (default)

Virtual port ID

Destination IP address and Layer 4 port

Destination IP address, Layer 4 port, and VLAN

Destination IP address and VLAN

Destination MAC address

Destination Layer 4 port

Source and destination IP addresses and Layer 4 port

Source and destination IP addresses, Layer 4 port,and VLAN

Source and destination IP addresses and VLAN

Source and destination MAC addresses

Source and destination Layer 4 port

Source IP address and Layer 4 port

Source IP address, Layer 4 port, and VLAN

Source IP address and VLAN

Source MAC address

Source Layer 4 port

VLAN only

Virtual PortChannel Host Mode

Private VLANs with Promiscuous, Isolated, and Community ports

Private VLAN on trunks

Internet Group Management Protocol (IGMP) Snooping Versions 1, 2, and 3

Jumbo-frame support; up to 9216 bytes

Integrated loop prevention with Bridge Protocol Data Unit (BDPU) filter without running Spanning Tree Protocol

QoS ; Virtual Machine Granularity

Classification

Access group (ACL)

IEEE 802.1p CoS ◦

User Datagram Protocol (UDP) ports

Packet length

Marking

Two Rate Three Color Marker (RFC 2698)

IEEE 802.1p CoS marking

IP Type of Service: IP precedence or DSCP (RFC 2474)

Traffic policing (transmit- and receive-rate limiting)

Class-based Weighted Fair Queuing (only on VMware vSphere 4.1 or later versions)

Modular QoS CLI (MQC) compliance

Security

Ingress and egress ACLs on Ethernet and virtual Ethernet ports

Standard and extended Layer 2 ACLs:

MAC address and IPv4

Source MAC address

Destination MAC address

EtherType

VLAN

Class of service (CoS)

Standard and extended Layer 3 and 4 ACLs:

Source IP

Destination IP

DSCP

Precedence

Protocol(TCP,UDP ,Internet,Control,Message,Protocol,[ICMP],and,IGMP)

Source port

Destination port

TCP flags

ICMP and IGMP types

ICMP code

Port-based ACLs(PACLs)

Named ACLs

ACL statistics

Integrated Security Features

Port Security ip Source Guard

Dynamic ARP snooping

DHCP snooping

Virtual Service Domain for L4 - L7

6.6 Core Switch

The core switch will provide connectivity and firewall services for traffic between hosts located on the production and development networks. All proposed core switches should meet or exceed the specifications defined in the table below.

Core Switch Specifications

Chassis Configurations

Minimum 6-slot

Backplane Bandwidth

720-Gbps switch fabric

Layer 3 Forwarding Performance

Up to 400 Mpps for IPv4

Up to 200 Mpps for IPv6

Routes: 256,000 for IPv4 and 128,000 for IPv6

Operating System

Equivalent to Cisco IOS Software

Redundant Supervisor Engines

Stateful Failover of Redundant Supervisor Engines

Redundant Components

Power supplies (1+1) - Minimum 3000 Watt Dual Power Supplies

Switch fabric (1+1)

Replaceable clock

Replaceable fan tray

High-Availability Features

Gateway Load Balancing Protocol

Hot Standby Router Protocol (HSRP)

Multimodule EtherChannel technology

Rapid Spanning Tree Protocol (RSTP)

Multiple Spanning Tree Protocol (MSTP)

Per-VLAN Rapid Spanning Tree

Rapid convergence Layer 3 protocols

Advanced Services Modules supported

Network analysis module

Wireless LAN services module

Protocols Supported

Layer 3 Routing Protocols ; BGPv4, OSPF, IS-IS, EIGRP, RIP, CDP and ICMP

Other protocols: IPX, Appletalk, Decnet, VINES, CLNS

Mulitcast: PIM, sparse and dense mode

QOS Features

Layer 3 Classification and Marking Access Control Entries

Aggregate Rate Limiting on Ingress port or VLAN and egree VLAN and Layer 3 port

Rate Limiting Level - CIR/PIR

Aggregate Traffic Rate Limiting Policers – 1023

Flow Based Rate Limiting - per source address, per destination address, full flow

MAC ACLS per port and per VLAN

Security Features

Port Security

IEEE 802.1x Extensions

VLAN, Router and Port ACLs

CPU Rate Limiters

Private VLANS

Support for Unique ACLs on up to 4000 interfaces

TCP Intercept with Hardware Acceleration

Power Over Ethernet

All copper interfaces shall support 802.3af Power over Ethernet

Reliability and Availability

Fast Software Upgrade

Route Processor Redundancy

Stateful switchover and nonstop forwarding

Hot Swappable modules

6.7 Firewall Module

The firewall module shall be integrated with the core switch. All proposed firewall modules must meet or exceed the specifications defined below.

Up to 4 FWSMs (20 Gbps) per chassis with static VLAN or IOS Policy-based Routing

2.8 Mpps

1 million concurrent connections

100,000 connection setups and teardowns per second

256,000 concurrent NAT or PAT translations

Jumbo Ethernet packets (8500 bytes) supported

256 VLANs per security context in routed mode

8 VLAN pairs per security context in transparent mode

6.8 10GB 16 Port Fiber Optic Ethernet Module The 10GB Ethernet module shall be integrated with the core switch. All proposed 10GB Ethernet modules shall meet or exceed the specifications defined in the table below.

Receive: 1p7q2t per port

Transmit: 1p7q4t per port group

Performance mode:

Receive: 8q4t per port

Transmit: 1p7q4t per port

DSCP-based queue mapping

DWRR

WRED

Performance mode:

DWRR

WRED

SRR at egress

90 MB per port group

Performance mode:

200 MB per port

2 replication engines per module

2 replication engines per module

Oversubscription mode: No

6.9 Voice Routers

The voice routers will be used terminate long distance T1 trunks used for long distance calls by Job Corps centers. All proposed voice routers must meet or exceed the specifications listed in the table below.

Slot 1: None

Slot 1: 4 GB

Power Specifications

(133.35 x 438.15 x 476.25 mm)

1GB to 4GB DRAM Upgrade (2GB+2GB) for Voice Router

4-Port Trunk Voice/WAN Int. Card - T1/E1

(Three 4 Port Cards per Router to support a total of 12 digital T1 trunks)

PVDM3 64-channel to 256-channel factory upgrade

6.10 Optics

Optics are required for interconnection between the LAN components and servers. The table below defines the specifications for the required optics. All proposed optics must meet or exceed the specifications in the table below.

7.0 Deliverables

The Vendor shall provide all of the equipment and connectivity accessories specified in the table below. Used and/or refurbished equipment is not acceptable. The vendor must coordinate all shipments with the Job Corps designated Point of Contact (POC). The POC will be defined after award.

– Licensing for 120 Hosts

8.0 Warranty and Product Registration

The Vendor shall include a 1 year warranty and maintenance contract for components listed. The warranty/maintenance contract shall include;

· 24x7x4 Hour Hardware Replacement

· 24x7 access to Technical Assistance Center (phone, online and email)

· 24x7 registered access to Technical Support web site

· Access to Operating System updates and upgrades

· Remote Monitoring of Diagnostics and Alerts

Within the first 30 days of shipment of the equipment to Job Corps the Vendor shall be responsible for replacing defective equipment that may be a result of factory defects, integration facility defects or equipment damaged during shipment.

The Vendor shall be responsible for ensuring that all products are registered to the Job Corps Data Center in Austin, Texas for the warranty/ service contract prior to shipping the equipment to the Job Corps.

The Vendor shall provide evidence of equipment registration with the manufacturer in electronic format.

9.0 Shipping Schedule

· Job Corps in conjunction with the Vendor will establish a shipping schedule with dates post award.

10.0 Shipping and Logistics

· The Vendor shall use the lowest cost shipping method to deliver network equipment and connectivity accessories to the Job Corps.

· The Vendor shall ensure that all delivery vehicles have a lift gate capability. The Vendor shall ensure that the delivery vehicles have a pallet jack.

· The Vendor shall ensure that deliveries are made inside to the location specified by the Job Corps receiving official.

· The Vendor shall schedule all deliveries to Job Corps between 8:00 .A.M. and 5:00 P.M., adjusting for the local time zone, Monday through Friday, excluding Federal Holidays.

· The Vendor shall insure all equipment for the full value for shipment.

· The Vendor shall be responsible for replacing any equipment damaged during shipment or equipment that arrives Dead on Arrival (DOA).

· The Vendor shall notify the Job Corps Point of Contact by telephone and/or email of pending shipments at least 48 hours prior to the arrival of the shipment. A list of contacts will be provided after award.

· The Vendor shall ship only complete shipments to Job Corps.

11.0 Special Requirements

The provider of information technology shall certify applications are fully functional and operate correctly as intended on systems using the Federal Desktop Core Configuration (FDCC). This includes Internet Explorer 7 configured to operate on Windows http://csrc.nist.gov/itsec/guidance_WinXP.htmlWindows XP and Vista (in Protected Mode on Vista). For the Windows XP settings, see: html, and for the Windows Vista settings, see: http://csrc.nist.gov/itsec/guidance_vista.html. b) The standard installation, operation, maintenance, update, and/or patching of software shall not alter the configuration settings from the approved FDCC configuration. The information technology should also use the Windows Installer Service for installation to the default “program files” directory and should be able to silently install and uninstall. Applications designed for normal end users shall run in the standard user context without elevated system administration privileges."

All systems provided under this Statement of Work must be capable of supporting IPv4 and IPv6 protocols.

All desktops, laptops, and computer monitors provided under this contract are required to have achieved Bronze registration or higher under the Electronic Products Environmental Assessment Tool (EPEAT). EPEAT is a procurement tool designed to help large volume purchasers evaluate, compare, and select desktop computers, laptops, and monitors based upon their environmental attributes as specified in the consensus-based IEEE Standard for the Environmental Assessment of Personal Computer Products (1680). Additional consideration will be provided for products that have achieved EPEAT Silver or EPEAT Gold registration. The registration criteria and a list of all registered equipment are provided at http://www.epeat.net .

12.0 Compliance with Nondiscrimination and Equal Opportunity Laws

The assurance at 29 CFR 37.20(a)(1) is incorporated by reference into this contract. The assurance provides that the contractor will comply fully with the nondiscrimination and equal opportunity provisions of the following statutes:

Section 188 of the Workforce Investment Act of 1998 (WIA), which prohibits discrimination against all individuals in the United States on the basis of race, color, religion, sex, national origin, age, disability, or political affiliation or belief, and against beneficiaries on the basis of either citizenship/status as a lawfully admitted immigrant authorized to work in the United States or participation in any WIA Title I-financially assisted program or activity;

Title VI of the Civil Rights Act of 1964, as amended, which prohibits discrimination on the bases of race, color and national origin;

Section 504 of the Rehabilitation Act of 1964, as amended, which prohibits discrimination against qualified individuals with disabilities;

The Age Discrimination Act of 1975, as amended, which prohibits discrimination on the basis of age; and

Title IX of the Education Amendments of 1972, as amended, which prohibits discrimination on the basis of sex in educational programs.

The contractor also assures that it will comply with 29 CFR part 37 and all other regulations implementing the statutes listed above. This assurance applies to the contractor’s operation of, or provision of services to, a Job Corps Center, program or activity, and to all subcontracts entered into by the contractor to carry out the Job Corps program or activity, or its operation of the Center. The contractor understands that the United States has the right to seek judicial enforcement of this assurance.