Attachment_J3_-_Fiber_Requirements_Specification_05_Mar_15.pdf

FUNCTIONAL REQUIREMENTS SPECIFICATION

Fiber Infrastructure for Next Generation Optical Transmission

FINAL VERSION

05 March 2015

Table of Contents

LIST OF TABLES

1 FIBER INFRASTRUCTURE

1.1 Fiber Service Delivery Point (FSDP) and fiber Span

1.1.1 Definition of Fiber Service Delivery Point (FSDP)

1.1.2 Definition of Span

1.1.3 Definition of Segment

1.2 Fiber Optic Cable

1.2.1 General Requirements

1.2.2 Fiber Count

1.2.3 Fiber Performance

1.2.4 Outside Plant

1.2.5 Physical Path

1.2.6 Splicing and Miscellaneous Handling Requirements

1.2.7 Underground Installations

1.2.8 Aerial Installations

1.2.9 Underwater Installation

1.3 Facilities

1.3.1 General Requirements

1.3.2 Floor space

1.3.3 Power and HVAC

1.3.4 Geographic Location/ Environment

1.4 Network Management

1.4.1 Contractor Facility to Contractor NOC Data Feeds ................. Error! Bookmark not defined.

1.4.2 Operations and Maintenance

1.5 Information Assurance and Physical Security

1.5.1 IA Implementation and Compliance

1.5.2 IA Goals and Guidance

1.5.3 Personnel Security

1.5.4 Facility Security

2 REFERENCES

3 ACRONYMS LIST

List of Figures

Figure 1.1 Depiction of FSDPs and spans (Notional) ________________________________________________ 8

Figure 1.2 Performance Criteria for a Representative Span _________________________________________ 10

Figure 1.3 Diversity Requirements for the Notional Optical Mesh Network ____________________________ 13

List of Tables

Table 1-1 Response and Repair Time for Fiber Cut ________________________________________________ 18

1 FIBER INFRASTRUCTURE

The DISN transport backbone is a physically diverse, secure high-speed transport network. It is described more specifically as follows:

1. A meshed switched optical network across North America, Europe, and Pacific Theaters.

2. A network consisting of Dense Wave Division Multiplexing (DWDM) Reconfigurable Optical Add/Drop Multiplexers (ROADMs) and Optical Line Amplifiers (OLAs).

3. A meshed switched optical network, which provides for multiple service options at the optical layer including wavelength services.

This section describes the functional specifications required for the optical fiber cable and other transmission that may be used in the DISN. Specifically, this section states the requirements for:

• Fiber Service Delivery Point (FSDP)

• Fiber Optic Cable

• Outside Plant

• Facilities

• Network Management

• Information Assurance and Physical Security

1.1 Fiber Service Delivery Point (FSDP) and Fiber Span

1.1.1 Definition of Fiber Service Delivery Point (FSDP)

A Fiber Service Delivery Point (FSDP) is defined as a point where dark fiber terminates at a fiber patch panel which is collocated (i.e. within the same building) with an active DoDIN network element (e.g. OLA or ROADM). Thus, FSDPs can be physically located at both Government buildings and intermediate commercial facilities or “huts” [e.g. Controlled Environmental Vaults (CEVs) or Central Offices (COs)]. The FSDP for the fiber shall be a fiber optic patch panel with all fibers terminated (see Figure 1.1).

1.1.2 Definition of Span

A span is defined as a length of outside fiber optic cable (including connectors and/or splices) from one FSDP to an adjacent FSDP (see Figure 1.1) which does not contain any active network elements (e.g. OLAs or ROADMs) along the span.

1.1.3 Definition of Segment

A segment is defined as a length of outside fiber optic cable which originates at one Government Service Delivery Node (SDN) and terminates at another Government SDN. A segment is made up of one or more fiber spans (and thus contains two or more FSDPs).

Figure 1.1 Notional Fiber Segment and Span Depiction

SDN SDN

SPAN SPAN SPAN SPAN

HUT* HUT* HUT*

Government

Base / Site Government Base / Site

HUT

HUT

OLA

O

Fiber Optic P

Fiber Optic

P

FSD

FS

FSDP

1.2 Fiber Optic Cable

1.2.1 General Requirements

Fiber optic cable will be a mission critical, physical component of the DISN. The fiber shall be of high quality; robust and able to support a myriad of functions in order to meet the overall stringent performance requirements for the DISN. Hereafter, for the described fiber criteria, [R] denotes required and [D] denotes desired.

1.2.1.1 [R] The fiber shall meet the standards put forth in the following International Telecommunication Union Telecommunication Standardization Sector (ITU-T) G.652 (11/2009), G.654 (10/2012), G.655 (11/2009), and G.656 (07/2010) except where superseded by the following more specific requirements here within. These detailed requirements will be outlined in the following sections.

1.2.1.2 [D] For new installations, it is desired that the fiber comply with ITU-T G.654.C (10/2012) specifications.

1.2.2 Fiber Count

1.2.2.1 [R] Fiber Optic Cable strands (one pair) shall be provided between designated Government SDNs.

1.2.2.2 [R] If a new access fiber cable installation is to be fusion spliced to a commercial vendor backbone fiber, then the new fiber cable shall consist of 12 or 24 fiber strands (depending on the requirements for the specific installation) in a single duct.

1.2.2.3 [R] If an entire fiber span (SDP to SDP) is to be a new installation, then that fiber cable shall consist of 24, 48, 96, or 192 fiber strands (depending on the requirements for the specific installation).

1.2.2.4 [D] All new fiber installations shall also have an empty duct alongside the single duct to facilitate future growth.

1.2.2.5 [R] These new ducts shall be a minimum 50 mm in diameter.

1.2.3 Fiber Performance

The fiber shall meet the following criteria listed below. These criteria are based on a single span of fiber (from FSDP to adjacent FSDP). See Figure 1.2 for performance criteria for a representative span.

1.2.3.1 [R] The fiber span attenuation per kilometer due to all impairments (i.e., splices, connectors, etc.) shall be less than 0.23 dB/Km at 1550nm and 0.25 dB/Km at 1625nm at fiber End of Life (EOL).

1.2.3.2 [R] Regardless of fiber span length, the EOL total span attenuation shall be less than 1 dB from the initial/ Beginning of Life (BOL) value.

Figure 1.2 Performance Criteria for a Representative Span

1.2.3.3 [R] For all currently installed fibers, the polarization mode dispersion (PMD) due to all impairments shall be less than or equal to 0.1 ps/km1/2 for any single fiber on the span when measured at 1550 nm.

1.2.3.4 [R] For all new installations, the polarization mode dispersion (PMD) due to all impairments shall be less than or equal to 0.05 ps/km1/2 for any single fiber on the span when measured at 1550 nm.

SEGMENT

80 km I/O Connectors (max insertion loss <= .5 dB) splice splice

EOL example span calculations: (.23 dB/km x 80 km) + loss + EOL margin = dB max loss (due to all impairments regardless of span length)

1.2.3.5 [R] The chromatic dispersion measured at 1550 nm shall be >= 2.0 ps/km nm.

1.2.3.6 [D] The chromatic dispersion measured at 1550 nm shall be >= 4.0 ps/km nm.

1.2.3.7 [R] Installation of all fiber shall comply with ITU-T G.655 (11/2009), ITU-T K.25 (02/2000), ITU-T L.35 (10/1998), and Telcordia GR-20-CORE.

1.2.3.8 [R] Any single reflectance event shall be less than -40 dB.

1.2.3.9 [R] The connector reflectance at the FSDP shall be less than -50 dB.

1.2.3.10 [R] The connector/ splice insertion loss shall be less than 0.3 dB.

1.2.3.11 [R] For all new installations, the splice insertion loss shall be less than 0.2 dB.

1.2.3.12 [R] The connector shall tolerate a minimum of +33 dBm incident power.

1.2.3.13 [R] The fiber Optical Return Loss (ORL) shall be greater than 30 dB.

1.2.3.14 [R] For all currently installed fibers, the fiber age (i.e., from manufacture date) shall be less than 20 years old.

1.2.3.15 [R] The accumulated insertion losses within 20 km of an SDN shall be less than 1.0 dB.

1.2.4 Outside Plant

1.2.4.1 [R] All optical fiber, optical fiber cable bundles, and optical fiber ribbons shall adhere to the requirements as specified in Telcordia GR-20-CORE.

1.2.4.2 [R] All fiber cables shall also meet the requirements of ANSI/ICEA S-87-640-1992, “Standard for Fiber Optic Outside Plant Communications Cable”.

1.2.4.3 [R] The Contractor shall be responsible for all permits, easements, and rights of way, to include Host Nation agreements/approvals. All work shall be done in accordance with the requirements listed in the following sections unless superseded by the local Government regulations.

1.2.4.4 [R] The Contractor shall provide optical fiber infrastructure using underground installation procedures per Section 1.2.7.

1.2.4.5 [CR] If an underground installation is deemed cost prohibitive due to environmental constraints (e.g., rock, etc.), the Contractor shall provide optical fiber infrastructure using aerial installation procedures per Section 1.2.8 or underwater installation procedures per Section 1.2.9.

1.2.4.6 [R] The fiber optic cable between any two SDNs shall be installed such that it produces less than 200 rad/sec of polarization drift [(dynamic change in State of Polarization (SOP)].

1.2.4.7 [R] The fiber optic cable between any two SDNs shall be installed such that it produces less than 1 dB of power fluctuation.

1.2.4.8 [R] The fiber optic cable between any two SDNs shall be installed such that barring a cable cut, its performance shall not vary enough to degrade transmission. This implies that changes of environment (e.g., temperature, physical external forces, wind, etc.) shall not degrade the performance of the fiber.

1.2.5 Physical Path

This physical fiber path can consist of a path that is (1) currently part of a carrier’s own fiber optic backbone network, (2) an access path, which extends from a carrier’s fiber backbone to an SDN, or

(3) an access path, which extends between two SDNs without the need to use a carrier’s fiber backbone. Fiber optic cable shall be suitable for the environment in which it is installed and shall adhere to the requirements in the following sections unless superseded by the local Government regulations.

1.2.5.1 [R] The fiber path between any two points shall be the most direct path feasible.

1.2.5.2 [R] As an option, the Contractor shall, at the Government’s request, provide fiber between the two SDNs at a particular site(s).

1.2.5.3 [R] No DISN fiber pair shall travel in the same physical path or through the same physical facilities as any other DISN fiber pair.

1.2.5.4 [R] All SDNs shall have at least two access paths.

1.2.5.5 [R] For all SDNs with greater than 2 fiber pairs coming to/ from it, the fiber pairs beyond the first and second may use the same access paths as the first two pairs, respectively (see Figure 1.3).

1.2.5.6 [R]If a node is a CONUS Central Data Center (CDC), then the SDN must have a third fiber pair that traverses another diverse access path.

1.2.5.7 [R] Where dark fiber is proposed for routes spanning a body of water, the Contractor shall utilize 2 separate tubes (within/on the structure) in order to satisfy physical diversity requirements.

1.2.5.8 [R] DISN fiber paths shall retain a minimum separation of 50 meters from other DISN fiber paths, except where two access paths are within 50 meters of the base boundary, but it is desired they be as far apart as possible.

1.2.5.9 [R] For any and all DISN fiber paths which cross over one another the Contractor shall provide a specific mitigation strategy on a case by case basis, if the Contractor cannot meet the diversity requirement in FRS paragraph 1.2.5.4 (e.g. will maintain a vertical separation of a minimum of 5 meters; will reinforce one path with concrete encasement, etc.)

1.2.5.10 [R- Defense Threat Reduction Agency Balanced Survivability Assessment, Critical Infrastructure Protection Plan] Fiber paths shall maintain a minimum of 6 ft. separation within the facilities.

1.2.5.11 [D] The fiber optic cable between the Government FSDPs shall be of the same type.

Figure 1.3 Diversity Requirements for the Notional Optical Mesh Network

1.2.6 Splicing and Miscellaneous Handling Requirements

1.2.6.1 [R] The maximum total splice loss shall be less than or equal to 0.3 dB per splice.

1.2.6.2 [R] All splicing shall be performed using a fusion-splicing technique.

1.2.6.3 [R] Connectors shall only be present at equipment interface points at FSDPs.

1.2.7 Underground Installations

1.2.7.1 [R] Direct-buried fiber is not acceptable; a conduit/duct shall protect the fiber.

Outside fiber plant span: [R] Single point Reflectances: < -40 dB [R] ORL > 30 dB

P

[D] <= .05

/½ [Reflectance < -50 dB

[dBm All measurements made at 1550nm

E

C B

Two fiber access paths leaving with one pair each

S

S Three fiber access paths leaving a location with each pair in its own respective access path

C

A

A

1.2.7.2 [R] A fiber shall be buried at a minimum depth of 42 inches or below the frost line whichever is deeper. For areas where the fiber is not buried at a minimum of 42 inches the Contractor shall provide an explanation as to the reason for this deviation and any risk mitigation approaches used (e.g. fiber is encased in steel conduit).

1.2.7.3 [R] During plowing or trenching of a facility, a warning tape shall be placed no less than 24 inches above the conduit and no less than 12 inches below grade.

1.2.7.4 [R] A buried fiber cable shall have a locating wire or conductive shield.

1.2.7.5 [R] For open trench and plowed construction, a warning tape shall be installed above the fiber pathway and permanently marked with a warning message advising that a fiber optic cable is below the tape.

1.2.7.6 [R] Surface warning markers shall be installed every 1300 ft., as well as at road crossings and culverts.

1.2.7.7 [R] For all fiber cable within a conduit, the cable may be without armor wrap, but shall be installed in conduit appropriate for the local conditions and necessary protection from electrical discharge and rodents.

1.2.8 Aerial Installations

Aerial fiber includes fiber along a bridge span. If aerial fiber is used, it shall adhere to the following requirements:

1.2.8.1 [R] Aerial fiber shall only be considered where buried conduit is neither available nor possible to construct.

1.2.8.2 [R] Aerial fiber shall be encased in conduit on a physically secure structure.

1.2.8.3 [R] Pole line fiber is acceptable only where no other means is available. This fiber cable shall be enclosed in a protective structure (i.e. one that minimizes impact of weather/environmental effects such as wind, rain, snow, ice, excessive sunlight, etc.) for every aerial installation.

1.2.8.4 [R] Pole line fiber shall be, as a minimum, a dual armored cable.

1.2.8.5 [R]Pole line fiber shall be attached to a support wire or stranded messenger cable, double-lashed at minimum.

1.2.8.6 [R] The cable and all associated hardware shall meet local Government requirements for clearances over roads, driveways, freeways, rail lines, structures, waterways, or other areas. All installation practices shall include calculation of strand sag, down-guys, over-head guying, anchors, and related items.

1.2.9 Underwater Installation

1.2.9.1 [R] Underwater and Marine cabling shall conform to International, National, State and Local laws, regulations and standards.

1.2.9.2 [R] Underwater and marine cabling shall be armored and installed in such a manner and location (e.g. not a high threat area) to protect it against external aggression (e.g. anchors, fishing equipment, hooks, grapnels, coral, rocks, sharks, etc.)

1.2.9.3 [R] In the event of an underwater/marine cable cut, the cable shall be repaired within 3 days.

1.3 Facilities

The following requirements pertain to all Contractor facilities (e.g., CEVs, COs, etc.), which include categories such as floor space, power, HVAC, environmental, and location concerns.

1.3.1 General Requirements

1.3.1.1 [R] The Contractor shall provide secure shelters, spaces, or enclosures to house OLA and ROADM equipment along the fiber pathways between the sites.

1.3.1.2 [R] The Contractor shall ensure their facilities (e.g. huts), provide adequate power, grounding, HVAC, back-up power, etc. to support new OLA and ROADM equipment.

1.3.2 Floor space

1.3.2.1 [R] The Contractor shall ensure the reserved floor space can accommodate the following maximum dimensions for each rack: 27 in (w) x 84 in (h) x 32 in (d).

1.3.2.2 [R] The Contractor shall reserve floor space to accommodate a minimum of 2 racks for OLAs.

1.3.2.3 [R] The Contractor shall reserve floor space to accommodate a minimum of 6 racks for ROADM/ OTN Switch.

1.3.3 Power and HVAC

1.3.3.1 [R] The Contractor shall ensure a minimum of two (2) 50 Amp breakers with 8 gauge cable from Bus A and B sources (in accordance with the NEC) are ready and available for each OLA rack.

1.3.3.2 [R] The Contractor shall ensure a minimum of six (6) 50 Amp breakers with 8 gauge cable from Bus A and B sources (in accordance with the NEC) are ready and available for each ROADM/OTN Switch equipment rack.

1.3.3.3 [R] The Contractor shall provide Uninteruptible Power Supply (UPS) for all equipment.

1.3.3.4 [R] The Contractor shall ensure that their facilities shall supply DISN equipment with a power availability of .99999 per site.

1.3.3.5 [D] The Contractor shall ensure that their facilities shall supply DISN equipment with a power availability of .999999 per site.

1.3.3.6 [R] The Contractor shall provide sufficient HVAC capacity within their facilities (e.g. huts) to accommodate equipment, which may dissipate up to 2.5 kilowatts of power per rack.

1.3.4 Geographic Location/ Environment

1.3.4.1 [R] The Contractor shall provide the GPS coordinates and street address location of all intermediate equipment facilities (e.g. huts).

1.3.4.2 [R] The Contractor shall provide the as-built path and GPS coordinates for every 50 m of fiber path.

1.3.4.3 [R] The spaces or enclosures furnished may be existing or new, and may be used jointly by the Government, the Contractor, and others. See Section 1.5.4 Facility Security for further requirements.

1.3.4.4 [R] If installed in an outdoor enclosure, the enclosure shall be hardened to protect against access and vandalism. If installed in an area adjacent to right-of-way for vehicular traffic (such as roadways, freeways, waterways, or rail lines), the enclosure shall meet the safety standards of the authority having jurisdiction over the right-of-way.

1.3.4.5 [R] If an outdoor enclosure is used, the equipment installed shall be designed and certified for use in this application, with ratings for temperature and humidity changes for the area in question, plus a safety margin of not less than +/- 10% of maximums or minimums historically encountered.

1.4 Network Management

1.4.1 Contractor Facility to Contractor NOC Data Feeds

1.4.1.1 [R] The Contractor shall provide an electronic data feed that provides forwarding of near real time facility and environmental alarms to include, but not limited to, power/temperature (if available) conditions, and intrusion detection information.

1.4.1.2 [R] The information provided by the data feed shall be derived from inputs obtained from Contractor’s facilities, e.g. huts and other common carrier facilities.

1.4.1.3 [R] Data feeds shall be consolidated at the fiber Contractor’s NOC.

1.4.1.4 [R] The fiber Contractor shall notify within 10 minutes, by telephone, the Government Network Support Center when a facility alarm occurs within an OLA housing government equipment.

1.4.2 Operations and Maintenance

1.4.2.1 [R] When a terrestrial fiber optic cable cut occurs, the following response and repair times in Table 1-1 shall be met.

Theaters Response Time (on site) Repair Time*

CONUS 2 hours 8 hours

Pacific 2 hours 8 hours

Europe 2 hours 8 hours

Table 1-1 Response and Repair Time for Fiber Cut

* Indicates maximum repair time. Repair time starts once personnel arrive on-site.

1.5 Information Assurance and Physical Security

This section presents the functional requirements for Information Assurance (IA) within the fiber plant and for the commercial facilities that house Government equipment and/or fiber. Information Assurance requirements are required to be identified and included in the design, acquisition, installation, operation, upgrade, or replacement of all information technology (IT) dependent systems in accordance with Office of Management and Budget (OMB) Circular A-130 Appendix III, Department of Defense Directive 8500.1, and Department of Defense Instruction 8500.2.

1.5.1 IA Implementation and Compliance

The goal of Information Assurance is not finite; it is a continual process to mitigate the risks associated with all devices and subsystems of the DISN, with minimal to no impact on the functionality and performance of the system and services provided. DISA recognizes that Government IA requirements are more stringent than those observed in the commercial sector.

1.5.1.1 [R] In cases where an IA feature is not currently available, Contractors shall present their plan to meet the particular requirement.

1.5.1.2 [R]The plan shall be presented and approved prior to the formal security test and evaluation phase of the system certification and accreditation. When, a requirement is unable to be fulfilled, alternate measures to mitigate risk to the component shall be provided.

1.5.2 IA Goals and Guidance

In accordance with procedures outlined in DoDI 8500.2, the DISN is a Mission Assurance Category I (MAC I) system. The information it handles is determined to be vital to the operational readiness or mission effectiveness of deployed and contingency forces in terms of both content and timeliness. The consequences of loss of integrity or availability of the DISN are unacceptable and could include the immediate and sustained loss of mission effectiveness. The DISN systems will require the most stringent protection measures. DoDI

8500.2 provides three IA control robustness levels that characterize Mission Category I systems. The robustness levels are Basic, Medium, and High.

1.5.2.1 [R] Accordingly, the DISN is characterized as a MAC I system and therefore shall meet robustness levels characterized as “High” for integrity and availability.

1.5.2.2 [R] The IA controls for confidentiality are likewise characterized through the use of Basic, Medium and High robustness levels. The controls for confidentiality utilize the medium level of robustness as this is commensurate with the handling of Sensitive or Unclassified Not Cleared for Public Release traffic.

1.5.2.3 [R] In addition to DoDD 8500.1, DoDI 8500.2, the general functional requirements for IA are derived from sources that include DoD Guidance, DoD policy, commercial standards and best practices, and the National Security Telecommunications and Information Systems Security Instruction 7003. Where a commercial best practice is in conflict with a requirement defined in this specification or other DoD guidance, the DoD requirement shall prevail.

1.5.3 Personnel Security

1.5.3.1 [R] The Contractor shall support explicit security roles and responsibilities. These responsibilities are partially listed in this document and shall be further explained later documents including, but not limited to, the Security Systems Authorization Agreement (SSAA) and the Service Level Agreement (SLA).

1.5.3.2 [R- DODI 8500.2 – Attachment 1 to Enclosure 4, control number PRRB-1] The Contractor shall provide and follow a set of rules that describe their security operations and clearly delineate security responsibilities and expected behavior of all personnel who have access.

The rules shall include the consequences of inconsistent behavior or non-compliance.

Signed acknowledgement of the rules is a condition of access.

1.5.3.3 [R- DISAI 630-230-19, B.4.h; DOD 5200.1-R, 6-303.a] Contractor shall have protective and corrective countermeasures in place to deal with a security problem.

1.5.3.4 [R- DODI 8500.2 - Attachment 4 to Enclosure 5, control number PEVC-1] A current sign-in procedure shall be in place to control visitor access to Government equipment. A detailed log of all visitors shall be maintained on site and shall be available to Government at all time.

1.5.3.5 [R- DODI 8500.2 – Attachment 4 to Enclosure 4, control number PRTN-1] A program shall be implemented to ensure that upon arrival and periodically thereafter, all personnel receive training and familiarization to perform their assigned responsibilities, to include familiarization in their assigned roles in Incident Response, Configuration Management, Disaster Recovery, and Continuity of Operations Plan (COOP).

1.5.3.6 [R- DODI 8500.2 – Attachment 4 to Enclosure 4, control number PRMP-2] Only authorized personnel shall perform maintenance on Government equipment. The process for determining authorization and the list of authorized maintenance personnel shall be documented.

1.5.4 Facility Security

The requirements listed below shall apply to all types of Contractor facilities that house Government equipment or fiber. If the following requirements violate local government ordinance, local ordinance prevails.

1.5.4.1 Shared Facilities

If the DISN fiber or equipment is in a Contractor area and is concealed within similar commercial equipment, then the following requirements apply:

1.5.4.1.1 [R- DODI 8500.2 - Attachment 4 to Enclosure 4, control number PEPF-2] Every physical access point (hut, etc.) shall be guarded or alarmed 24 X 7 X 365. Two (2) forms of identification shall be required to gain access to the facility (e.g. photo ID and key card, or a cipher lock and key card for unmanned sites.) All access points shall have the capability to be observed 24 X 7 X 365 (e.g., intrusion alarm). Physical intrusion alarms shall be centrally monitored with an automatic law enforcement response capability to alarms.

1.5.4.1.2 [R- DODI 8500.2 – Attachment 1 to Enclosure 4, control number DCDS-1] All dedicated security devices provided by the Contractor (e.g. physical intrusion detection systems) shall be documented by the Contractor and approved by the Government.

1.5.4.1.3 [R- Security Classification Guide] Equipment or facilities shall not be marked with any reference to the United States Government, United States Government Agencies (including the Department of Defense, United States Army, etc.), the DISN, or similar references.

1.5.4.1.4 [R- DODI 8500.2 – Attachment 4 to Enclosure 4, control number ECAT-2] An automated, continuous on-line monitoring and audit trail creation capability shall be operating with the capability to immediately alert personnel of any unusual or inappropriate activity.

The audit trail records shall be available for regular Government review for indications of inappropriate or unusual activity. Suspected violations of security policies shall be available for Government investigation, analysis, and reporting.

1.5.4.1.5 [R- DODI 8500.2 – Attachment 4 to Enclosure 4, control number ECAR-3] Events that will be audited include activities that might modify, bypass, or negate safeguards controlled by the system as well as actions that indicate the possible use of covert channel mechanisms. The audit trail records described above shall include:

• User ID

• Successful and unsuccessful attempts to access

• Date and time of the event

• Type of event

• Success or failure of event

• Denial of access resulting from excessive number of unsuccessful access attempts

• Blocking or black-listing of a user ID and reason for that action

• Starting and ending time for access to the system

1.5.4.1.6 [R- DODI 8500.2 Attachment 4 to Enclosure 4, control number ECRR-1] Audit records shall be retained for 5 years in a secure location. (See DISN Security Classification Guide for further information on aggregate data.)

1.5.4.1.7 [R- DODI 8500.2 – Attachment 4 to Enclosure 4, control number ECCD-2] Access control mechanisms shall exist to ensure that audit-data is accessed only by authorized personnel. Access to the data shall be recorded in transaction logs that shall be available for Government review periodically or immediately upon system security events. Users are notified of time and date of the last change in data content.

1.5.4.1.8 [R- DODI 8500.2 – Attachment 1 to Enclosure 4, control number COPS-3] Electrical systems shall be configured to allow continuous or uninterrupted power to perform mission or business-essential functions. This may include an uninterrupted power supply coupled with emergency generators or other alternate power source.

1.5.4.1.9 [R- DODI 8500.2 – Attachment 1 to Enclosure 4, control number PEEL-2] An automatic emergency lighting system shall be installed that covers all areas necessary to maintain mission or business essential functions, to include emergency exits and evacuation routes.

1.5.4.1.10 [R- DODI 8500.2 – Attachment 1 to Enclosure 4, control number PEFD-2] The local Fire Department shall receive an automatic notification of any activation of the smoke detection or fire suppression systems in the facility.

1.5.4.1.11 [R- DODI 8500.2 – Attachment 1 to Enclosure 4, control number PEFS-2] A fully automatic fire suppression system shall be installed that automatically activates when it detects smoke, heat, or particles.

1.5.4.1.12 [R- DODI 8500.2 – Attachment 3 to Enclosure 4 PEFS-1] Hand-held fire extinguishers shall be available and clearly marked.

1.5.4.1.13 [R- DODI 8500.2 – Attachment 1 to Enclosure 4, control number PEHC-2] Automatic humidity controls shall be installed to prevent humidity fluctuations potentially harmful to personnel or equipment operation.

1.5.4.1.14 [R- DODI 8500.2 – Attachment 1 to Enclosure 4, control number PETC-2] Automatic temperature controls shall be installed to prevent temperature fluctuations potentially harmful to personnel or equipment operation.

1.5.4.1.15 [R- DODI 8500.2 – Attachment 1 to Enclosure 4, control number PEVR-1] Automatic voltage control shall be implemented to prevent voltage fluctuations potentially harmful to equipment operations.

1.5.4.1.16 [R] All supporting equipment (e.g. HVAC) shall be tamper resistant.

1.5.4.1.17 [R] All Contractors shall provide documentation of facility ballistics protection in terms of commercial best practice (e.g., Underwriters Laboratories (UL) 752 Standard for Bullet Resisting Equipment or UFGS-08 34 02, Bullet-Resistant Components).

1.5.4.1.18 [R] The level of protection with respect to UL752 or UFGS-08-34-02 must be designated. (Note: There are eight levels of protection in UL 752. There are four levels of protection in UFGS-08-34-02 - UL Medium Power Small Arms (UL MPSA), High Power Small Arms (UL HPSA), Super Power Small Arms (UL SPSA) and High Power Rifle (UL

HPR).

1.5.4.2 Dedicated Facilities

1.5.4.2.1 In some cases, the DISN fiber or equipment is separated from similar commercial equipment. In this case any of the following apply:

• There are uncleared or unescorted personnel in a common area with the DISN equipment.

• The site already has secure areas (e.g. cages) within it.

• The facility cannot be secured to the requirements described in the previous section.

• The Government states that shared facilities is not an option at a particular facility.

In the dedicated facilities situation, then the following additional requirements apply:

1.5.4.2.2 [R- DOD 5200.1-R, Appendix G, Section B, Paragraph 5.e; DOD 5200.1-R, Appendix G, Section A, Paragraph 2.d] In secure facilities or rooms with windows in the space that are less than 18 feet above the ground, the windows shall be covered with materials that shall provide protection from forced entry which includes an Intrusion Detection System.

1.5.4.2.3 [R- DOD 5200.1-R, Appendix G, Section A, Paragraph 2.c] For secure facilities or rooms, all the hinge pins on all of the access doors shall be peened, brazed or spot-welded to prevent removal.

1.5.4.2.4 [R- NSTISSI 7003 ANNEX B Paragraph 4,a, 1,d] A General Services Approved changeable combination padlock or some other similar access control device with Intrusion Detection System shall secure all access to all DISN equipment.

1.5.4.2.5 [R] At the option of the vendor, all of the facility requirements specified in 1.5.4 can be applied to a dedicated portion of the facility. The dedicated portion of the facility shall house all of Government equipment and interfaces including the Intrusion Detection systems.

1.5.4.3 Fiber Protection

1.5.4.3.1 If any of the following requirements violate local government ordinance then local ordinance prevails.

1.5.4.3.2 [R- NSTISSI 7003, Section IV, Paragraph 5 and Paragraph 4, a,1,b] Transmission lines shall be protected adequately when they leave the facility and traverse an uncontrolled area.

If Government fibers or cables are unmixed with commercial fibers, then they shall be installed in carriers constructed of electrical metallic tubing (EMT), ferrous conduit or pipe, rigid-sheet steel ducting, or some higher level of protective tube or pipe. An uncontrolled area is any area not within the secure facility, portion of the facility, or where the fiber is not protected by obscurity. Under no circumstances will this requirement lower any other requirements within this FRS.

1.5.4.3.3 [R- NSTISSI 7003 ANNEX B Paragraph 4,a, 1,d] All access to the fiber (e.g., pull boxes, access manholes, etc.) shall be secured by a General Services Administration (GSA) approved changeable combination padlock. If GSA locks cannot be used, then a standard locking manhole cover shall be used.

1.5.4.3.4 [R- DISN Security Classification Guide] Contractor provided fiber shall not be marked with any reference to the United States Government, United States Government Agencies (including the Department of Defense, United States Army, etc.), the DISN, or similar references.

2 REFERENCES

1. ANSI T1.104-1991 (R1997), Exchange-Interexchange Carrier Interfaces-Individual Channel Signaling Protocols, 1997.

2. ANSI/ICEA S-87-640-1992, Standard for Fiber Optic Outside Plant Communications Cable, 1992.

3. CJCSI 6510.01C, Chairman of the Joint Chiefs of Staff Instruction, Information Assurance and Computer Network Defense, (May 2001)

4. DCID 6/3, Director of Central Intelligence Directive 6/3, Protecting Sensitive Compartmented Information within Information Systems, (1999)

5. Defense Intelligence Agency, Defense Intelligence Agency Manual (DIAM)-50-3, Physical Security Standards for Construction of Sensitive Compartmented Information Facilities

6. Department of Defense Directive 8530.2, Computer Networking Defense (CND)

7. Department of Defense Directive (DoDD) 8500.1E, Information Assurance (IA), 23 April 2007.

8. Department of Defense PKI Guidance and Policy Memorandum (August 2000)

9. Department of Defense Security Technical Implementation Guides (STIG)

10. DISAI 630-230-19, Automated Data Processing Information Systems Security Program, 9 July 1996

11. DoD 5200.1-R, "DoD Information Security Program Regulation," January 14, 1997.

12. DoD Directive C- 3222.5, "Electromagnetic Compatibility (EMC) Management Program for SIGINT Sites (U)," April 22, 1987

13. DoD Public Key Infrastructure (PKI) Guidance and Policy Memorandum (12 August 2000)

14. DoD Directive 8500.1, Department of Defense Directive, Subject: Information Assurance, (October 2002)

15. DoD Instruction 8500.2, Department of Defense Instruction and Attachments 1-6 to Enclosure 4, Subject: Information Assurance Implementation, (6 February 2003)

16. DoD Directive O- 8530.1, Department of Defense Directive, Subject: Computer Networking Defense (CND), (8 January 2001)

17. DoDI 5200.40, “DoD Information Technology Security Certification and Accreditation Process (DITSCAP),” 7 October 1999

18. EIA/RS-310D, Cabinets, Racks, Panels, and Associated Equipment, Revision E, 1996

19. ISO/IEC 13239:2002, High-level data link control (HDLC) procedures

20. ITU-T G.652 (11/2009) Recommendation: Characteristics of a single mode optical fiber cable, November 2009.

21. ITU-T G.654 (10/2012) Recommendation: Characteristics of a cut-off shifted single-mode fibre and cable, October, 2012.

22. ITU-T G.655 (11/2009) Recommendation: Characteristics of a non-zero dispersion-shifted single mode optical fiber cable, November 2009.

23. ITU-T G.656 (07/2010) Recommendation: Characteristics of a fibre and cable with non-zero dispersion for wideband optical transport, July 2010.

24. ITU-T M 3010 – Principles for a Telecommunication Management Network, February 2000.

25. ITU-T M.24otn Error Performance Objectives and Procedures for Bringing-into-Service and Maintenance of Optical Transport Networks, December 2003.

26. ITU-T M.3100 – Generic Network Model, April 2005

27. ITU-T M.3400 TMN – Management Functions, February 2000.

28. ITU-T X.722 – Open Systems Interconnection – Structure of Management Information:

Definition of Management Information, 17 January 1992

29. ITU-T X.733 – Open Systems Interconnect – System Management: Alarm Reporting

30. JROCM 134-01, Capstone Requirements Document (CRD), Global Information Grid (GIG), (August 2001)

31. MIL-STD-188-125-1, High-Altitude EMP Protection for Fixed Ground-Based Facilities, 2005.

32. National Security Telecommunications and Information Systems Security Policy (NSTISSP) No. 11, “National Policy Governing the Acquisition of Information Assurance (IA) and IA-enabled Information Technology Products,” January 2000

33. Non-Classified (But Sensitive) Internet Protocol Router Network (NIPRNet) Security Technical Implementation Guide, Version 1, Release 1 (February 2002)

34. NSTISSI 7003, Section IV, Paragraph 5 and Paragraph 4, a,1,b

35. NSTISSI No. 4009, National Security Telecommunications and Information Systems Security Instruction, “National Information Systems Security Glossary”, (September 2000)

36. Office of Management and Budget (OMB) Circular A-130, Transmittal Memorandum #4, Management of Federal Information Resources, dated 11/28/2000.

37. Telcordia GR-815-CORE, Generic Requirements for Network Element/ Network System (NE/NS) Security, Issue 2, March 2002

38. Telcordia GR-199 – Operations Application Messages – TL1 Memory Administration Messages, Issue 6, December 2005

39. Telcordia GR-20-CORE, (Bellcore) Qualification: Generic Requirements for Optical Fiber and Optical Fiber Cable, Issue 3, May 2008.

40. Telcordia GR-2998, Generic Requirements for Wave Division Multiplexing (WDM) Element Management Systems (EMSs), Issue 2, Jan 2000.

41. Telcordia GR-499, Transport Systems Generic Requirements (TSGR): Common Requirements, Issue 4, November 2009.

42. Telcordia GR-820, Generic Digital Transmission Surveillance, Issue 2, December 2010

43. Telcordia GR-833 – TL1 Surveillance and Maintenance Messages, Issue 7, Dec 2010

44. Telcordia GR-63 NEBS Requirements: Physical Protection, Issue 4, April 2012

45. The DISN Mission Need Statement (MNS), JROCM 047-95, (March 1995)

46. TMF 513 – Multi-Technology Network Management Business Agreement , Release 3.5

47. TMF 814 – Multi-Technology Network Management IDL Solution Set , Release 3.5

48. TMF-608 – Multi-Technology Network Management Information Agreement , Release 3.5

49. 10 U.S.C. 2224 – Defense Information Assurance Program, 2010

3 ACRONYMS LIST

ANSI American National Standards Institute

CDC Central Data Center

CEV Controlled Environmental Vault

CIAO Critical Infrastructure Assurance Office

CIO Chief Information Officer

CIP Critical Infrastructure Program

CMS Configuration Management System

CO Central Office

CONUS Continental United States

COOP Contingency Of Operations Plan

CoS Class of Service

COTS Commercial Off-The-Shelf

D Desired

DEW Directed Energy Weapons

DIAM Defense Intelligence Agency Manual

Diffserv Differentiated Services; also Diff-Serv

DISA Defense Information Systems Agency

DISN Defense Information Systems Network

DM Degraded minutes

DoD Department of Defense

DWDM Dense Wave Division Multiplexing

EAI Electronic Alarm Interface

EBGP External Border Gateway Protocol

EDI Electronic Data Interchange

EGP Exterior Gateway Protocol

E-LSP EXP-inferred-Per Scheduling Class LSP

EM Electromagnetic

EMI Electromagnetic Interference

EMP Electromagnetic Pulse

EMS Element Management Systems

EOL End Of Life

ESCON Enterprise System Connection

ESF Extended Superframe

F Future

FRS Functional Requirements Specification

FSDP Fiber Service Delivery Point

G Gigabit per Second

Gb/s Gigabit per Second

GbE Gigabit Ethernet

Gbps Gigabits Per Second

GFE Government-Furnished Equipment

Ghz Gigahertz (thousands of Mhz)

GNCMS DISN TMN/OSS Network Configuration Management System

HEMP High-Altitude Electromagnetic Pulse

HVAC Heating, Ventilation, & Air Conditioning

IA Information Assurance

IAW In Accordance With

IBGP Internal Border Gateway Protocol

IC Intelligence Community

ID Identification

IGP Interior Gateway Protocol

INMS Integrated Network Management System

Intserv Integrated Services; also Int-Serv

IP Internet Protocol

IPSec Internet Protocol Security

ISO International Organization for Standardization

IT Information Technology

ITU-T International Telecommunication Union-Telecommunication

IW/IO Information Warfare, Information Operations

JDCS Joint DISN Control System

JDIICS Joint Defense Information Infrastructure Control System

MIB Management Information Base

MTTR Maintenance time to Repair

NE Network Element

NEC National Electrical Code

Nm Nanometer

NMCN Network Management and Control Network

NMI Network Management Interface

NNI Network to Network Interface

NOC Network Operations Center

NSAP Network Service Access Point

O&M Operations & Maintenance

OCONUS Outside the Continental United States

OEO Optical-Electrical-Optical

OIF Optical Internetworking Forum

OLA Optical Line Amplifier

OMB Office of Management and Budget

ORL Optical Return Loss

OSS Operational Support System

OTDR Optical Time Domain Reflector

PM Performance Management

PMD Polarization Mode Dispersion

PMS Performance Management System

POP Point of Presence

PRM Performance Report Message

Ps Picosecond

QoS Quality of Service

R Required

RF Radio Frequency

RMS Report Management System

RNOSC Regional Network Operations and Security Center

ROADM Reconfigurable Optical Add/Drop Multiplexer

SCIF Sensitive Compartmented Information Facility

SDN Service Delivery Node

SDP Service Delivery Point

SNMP Simple Network Management Protocol

SOP State of Polarization

SOW Statement Of Work

TBD To Be Determined

TCP Transmission Control Protocol

TL1 Transaction Language 1

TLV Type, Length, Value tuple

TMI Trouble Management Interface

TMN Telecommunications Management Network

TMS Trouble Management System

UDP User Datagram Protocol

UNI User Network Interface

UPS Uninterruptible Power Supply

VPN Virtual Private Network