DOT-FMCSA LAN Room Requirements 2018 (7).pdf

Last Updated: 8/2018 1

US Department of Transportation Federal Motor Carrier Safety Administration

LAN Room Requirements

General Information:

There should be signs at the door(s) marking the room as restricted access and prohibiting food and drink. There should be an automatic authentication method at the entrance. LAN Room should have high ceilings to allow for heat dispersal. If computer equipment is in a shared space, then it must at a minimum be in a locked cabinet.

Location and Site Selection:

The LAN Rooms should always be located within DOT space. There should be accessibility for delivery of large equipment to the LAN room/ LAN Room. The LAN Room should not have windows or other features that could be compromised by severe weather or invite theft. If an office must move to a temporary location (swing space) for renovations and construction, it is recommended - if feasible - that the LAN Room is relocated also. In instances, such that the LAN Room should remain in the existing space during construction/renovations, the equipment must remain secured from theft, debris, and damage that could potentially be caused by construction.

Size and Partition Walls:

Room should be a minimum of 90 sf with SFO standard partition types and a sound transmission capacity (STC) rating of 45.

Furniture is not required. There should be a minimum clearance of 8 ft. throughout the room. All perimeter walls shall be slab to slab (no gaps between walls and floor/roof structure). Install one 8’W x 4’H x ¾” thick fire rated plywood (which will serve as the telephone backboard) horizontally on one wall for terminating telephone/data lines and equipment.

Power:

Power requirements must meet manufacturer specifications. There should be a minimum of 1 - 125V/30 amp dedicated circuit. The recommended outlet for this should be a NEMA L5-30R to fit the NEMA L5-30P power plug of the UPS. Install eight (8) dedicated 20 amp NEMA 5-20R electrical outlets near of the LAN rack. The electrical utility powering the site should have a 99.9% or better reliability of service. Electricity should be received from two separate substations (or more) preferably attached to two separate power plants. Building power quality should be considered to determine the need for isolation transformers and other power conditioning equipment. To the extent possible, such heat generating support equipment should not be in the LAN room.

There must be battery backup power onsite, preferably one that prevents possible data corruption by performing graceful, unattended operating system shutdown in the event of an extended power outage with sufficient duration to execute a graceful shut down of all systems. Where feasible this shall be provided by GSA, however FMCSA may optionally provide a UPS unit for the location.

• A rack mounted Uninterruptable Power Supply (UPS) shall be provided by the contractor at a minimum of 2000VA, to be utilized only by the IT equipment present in the room (separate from the security equipment).

• Electrical system should be designed to provide an isolated ground, dedicated neutral, and a grounding grid.

Emergency planning

• LAN Room electrical distribution system should have easily accessible shunt trip capabilities for emergency shutdown.

There should be appropriate emergency lighting in the event of power failure. Lighting fixtures and telecommunications equipment should not be on the same electrical circuit breaker. Additional wall mounted utility outlets shall be provided by code. (SEE EQUIPMENT OPERATIONAL REQUIREMENTS)

Last Updated: 8/2018 2

Heating, Venting and Air Conditioning:

Environmental sensors should monitor the temperature and humidity of the room and report to a NOC or the Line of Business/OA CIO and/or System Owner when out of tolerance. The HVAC shall be available on a 24 hours-per-day, 365 days-per-year basis. If the building HVAC system cannot assure continuous operation, then a dedicated cooling system such as a mini split single zone system should be provided. The room temperature must not exceed a maximum of 75 degrees and a minimum of 60 degrees for efficient equipment operation. Utility openings such as ducts and vents should be kept at less than man-passable (96 square inches) opening. Humidification and de-humidification equipment may be required depending on locations. Of note, room shall be free of water or drain pipes not directly in support of the equipment within the room. A floor drain shall be within the room if risk of water ingress exists and be protected against contaminants.

Data and Telecommunications:

The successful implementation of data and telecommunications networks involves coordination and cooperation of multiple parties, including Data Circuit providers, Local Exchange Carriers (Local Phone companies), general contractors and others. At minimum, the following activities must be performed at each site:

1. Contractor shall provide and install one standard 2 or 4-post rack, bolted to the floor, near the rear of the room, with adequate clearance per manufacturer’s specifications; at least 42 inches around equipment.

2. All network and communication equipment (Routers, Switches, Voice over IP Gateways, Handsets) shall be provided by FMCSA unless otherwise indicated.

3. Racks shall have seismic bracing where required and proper grounding.

4. Maximum electrical intensity of computing equipment of 300 watts per square foot

5. Data and Telephone Circuits shall be extended from the Demark to the LAN Room, and all connections properly terminated.

6. There shall be a minimum of 4 CAT 6 cables terminated near the data rack for connection to auxiliary and monitoring equipment.

7. 3 analog phone lines dedicated for the security system.

8. Break Room – 1 CAT 6 cable

9. At FMCSA locations where FMCSA and the Federal Highway Administration are co-located, there shall be 3 CAT 6 cables run and terminated at the patch panels between LAN Rooms for interconnectivity.

10. Run 2 CAT 6 cables connecting each employee desk location, terminating at the LAN Room Patch panel, with the following exceptions:

a. Division Administrators offices shall have 4 cables allowing for a network printer

b. Transportation/Program Assistants have 4 cables allowing for a network printer and/or separate workstation for specialized services.

11. Mail/copy rooms shall have a minimum 6 cables to support the following:

a. Minimum of 2 Network/Multi-function Printers

b. Fax

c. Postage Machine

12. Conference Rooms:

a. Pair of cables for Conference Room computer

b. Ceiling mounted cable for network connected projector

c. Minimum 2 additional pairs for each wall (total 12)

13. Ceiling Mounted cable(s) for Wireless Access Point(s) – 1-2 for small and medium sized offices, 2-3 for large offices in locations to allow for coverage of the entire office. Placement to be determined during design drawing phase.

Cables to be run into contractor-mounted ceiling tile replacement Wireless Access Point enclosure. Enclosure is to be lockable and compatible with the brand of Wireless Access Point. If ceiling tiles are 2’x2’, the Oberon 1047- CCOAP3800 is recommended. A different brand/model may be substituted if it is ceiling mounted, lockable and compatible with the Cisco 3802i Wireless Access Point.

14. Install a Cisco AIR-AP3802I-B-K9 Wireless Access Point in the ceiling mounted enclosure(s), connecting the above CAT 6 cable(s) into the Access Point that are to be terminated back at the LAN room patch panel.

15. Cables shall be properly labeled indicating location and termination point at patch panel. Labeling shall follow the following naming convention: Space#, cable #, termination location #; for example, WS02-01 (Workstation 2, cable

1) Terminates at A-03 (Patch panel A Port 03)

Last Updated: 8/2018 3

Security:

Line of Business/OA CIO’s and System Owners shall comply with the physical control requirements of directive DOT 1630 and the supplemental guidance provided in DOT order 1351.16 Physical and Environmental (PE) Protection Controls. Door should be solid wood core and metal framed, fire rated, 36” wide, or better, with heavy duty door closer and hinged to swing outward with hinges on the inside (unless code says otherwise). Door shall be keyed lockset and free-operated from the inside, with an automatic door closer with a floor mounted door stop. There must be a FIPS 201 compliant physical access control solution which shall log access into the room; lock must have the following specifications:

• Battery Powered (independent from the commercial power)

• Capable of auditing a minimum of 1000 events

• Stand alone memory

• Capable of retro fitting a standard mortise lockset with a cylindrical application

• SPECIFIC AND DETAILED SECURITY REQUIREMENTS SHALL BE PROVIDED BY THE CHIEF OF SECURITY’S OFFICE.

Fire Prevention:

There must be one (1) fire extinguisher located inside the LAN Room. A clean agent fire suppression agent should be used where applicable.

Lighting System:

(SFO Standard); Provide separate switch with a 540 lux (50 foot candles) mounted at a minimum of 8’-6” AFF.

Life Safety:

A. Either concrete or vinyl tile can be used. If vinyl tile, please see POR requirements below.

VCT: Vinyl Composition Tile complying with ASTM F1066, Composition 1, colors as selected by DOT; all tiles shall bear a minimum static coefficient of friction of 0.6 for accessible routes and 0.8 for ramps when tested under a dry condition. All tiles will be selected to have a fire performance complying with the requirements of building code and local authorities.

B. Paint should be fire-retardant paint. Paint can either be purchased with it already mixed in, or an additive such as “Flame Guard” can be added to regular paint at less cost.

Supporting Documentation:

FIPS 200 Publication:

Minimum Security Requirements for Federal Information and Information Systems

FIPS 201-11 Publication:

Personal Identification Verification of Federal Employees and Contractors

DOT Order 1351.16:

Physical and Environmental Protection Controls

Facilities Standards for the Public Buildings Service:

US General Services Administration Office of the Chief Architect

Public Buildings Service GSA Pricing Desk Guide

Equipment Operational Specifications