IA02 Revised Salient Characteristics W9124D-23-Q-0206 OOBM 21 Aug 2023.docx

Salient Characteristics Out of Band Management (OOBM) Cellular Solution Procurement

Item #0001 1-Port AES LTE The solution required is an Out of Band Management (OOBM) solution that uses cellular service data plan in order to communicate back to a Human Resources Command (HRC) Recruiting Services Network (RSN) Data Center single management console that uses a secure modem and terminal server headend appliance that is a Federal Information Processing Standards (FIPS 140-2) certified Out of Band Management (OOBM) management unit. The headend appliance must be able to allow secure cellular access to routers, firewalls, Voice and Video over Internet Protocol (VVoIP) switches, and other network appliances when remote site carrier circuit-provider Wide Area Network (WAN) physical connections experience and outage and/or severe degradations in communications services.

The aforementioned appliance must act as a “true” secure Out of Band Management appliance that can connect to any Public Switched Telephone Network (PSTN) configurations that allow for end-to-end encrypted Long-Term Evolution (LTE) or legacy dial-up telecommunications. The singular headend appliance must be able to act as a secure terminal server that is capable of being connected the Wide Area Network (WAN) / Local Area Network (LAN) using network-based protocols for security and management requirements. As stated initially, it is imperative that the appliance be capable of using FIPS 140-2 Level 2 Advanced Encryption Standard (AES) encryption. Notwithstanding, such an appliance should have the ability to be used as a client encryptor that could also be used at a Network Operations Center (NOC) for the PSTN or for other network hardware end-to-end AES encryption needs or requirements.

Physically the single headend appliance must have at least 1 remote console port and at least 1 secure power control port for remote power reboot capability. The network interface will provide an in band Secure Shell (SSH) access feature for engineers as well as real-time reporting and access to the Out of Band (OBM) manager. The following protocols are to be supported, Multiple Encrypted Access Sessions, Multiple Remote Encrypted Long-Term Evolution (LTE) Access Sessions, Secure Shell (SSH), Radius, Syslog, SNMP, Real Time Events, Real Time Telco Status and HeartBeat. Due to space constraints, the appliance should not be longer than 12 inches, wider than 24 inches, and taller than 2 inches; lack of available space is being considered. Electrically the aforementioned appliance must be capable of connecting with the following electrical specifications: 110VAC 1.5 AMP, 220VAC .75 AMP.

· Must be FIPS 140-2 certified for Out of Band Management (OOBM)

· Must be able to act as a terminal server

· Must have an Internal Modem

· Must allow for connection to a connect to any Public Switched Telephone Network (PSTN) configuration

· Should have a Long-Term Evolution (LTE) cellular module

· Must have a TCP/IP network interface that allows in-band multisession Secure Shell (SSH access)

· Must provide common network protocols such as Multiple Encrypted Access Sessions, Multiple Remote Encrypted Long-Term Evolution (LTE) Access Sessions, Secure Shell (SSH), Radius, Syslog, SNMP, Real Time Events, Real Time Telco Status and HeartBeat.

· Must be able to use Advanced Encryption Standard (AES) 256 Cipher Feedback encryption between appliances over multiple sessions

· Capable of acting as the headend encryptor and central management console for remotely connected appliances

· Must have at least 1 remote console serial port

· Must have at least 1 secure power control port for remote power reboot capability

· Size should be no bigger than 12 inches long, no wider than 24 inches wide, and not taller than 2 inches in height due to space constraints

· Must be capable of connecting with the following electrical specifications: 110VAC 1.5 AMP, 220VAC .75 AMP

ITEM #0002 5-Port AES LTE

The singular headend appliance previously described will connect to at least 190 remote site appliances to be included in that design solution that possess characteristics and capabilities that mirror those of the headend appliance. For example, the 190 remote site appliances must provide all of the same features, such as each appliances being a secure modem and terminal server headend appliance that is a Federal Information Processing Standards (FIPS 140-2) certified Out of Band Management (OOBM) management unit. As with the singular headend appliance, 190 remote site appliances must be able to allow access to routers, firewalls, Voice and Video over Internet Protocol (VVoIP) switches, and other network appliances when carrier provided site-to-site circuit connections experience an outage and/or severe degradations in communications services. As with the headend appliance, the appliance must act as a “true” secure Out of Band Management appliance that can connect to a Public Switched Telephone Network (PSTN) that allows for end-to-end encrypted Long-Term Evolution (LTE) or legacy dial-up telecommunications. Each of the 190 remote site appliances must be able to act as a secure terminal server that is capable of being connected the Wide Area Network (WAN) / Local Area Network (LAN) using network-based protocols for security and management requirements. As stated initially, it is imperative that each remote site appliance be capable of using FIPS 140-2 Level 2 Advanced Encryption Standard (AES) encryption. Notwithstanding, any such remote site appliances should have the ability to be used as a client encryptor that could also be used at a Network Operations Center (NOC) for the PSTN or for other network hardware end-to-end AES encryption needs.

The physical specifications for the 190 remote site appliances that will connect into the solution will differ with regard to the required remote console port count and their amount of secure power control ports that are required within the design solution . Physically the 190 remote site appliances must have at least 5 remote console ports each and at least 5 secure power control ports each for remote reboot capabilities for any attached components. Electrically specifications are similar to the single headend appliance and are listed at the end of this paragraph. The network interface capabilities do not differ from those required for the headend. The network interface capabilities will provide in-band Secure Shell (SSH) access feature similar to those required for the singular headend appliance. The protocols to be supported, Multiple Encrypted Access Sessions, Multiple Remote Encrypted LTE Access Sessions, Secure Shell (SSH), Radius, Syslog, SNMP, Real Time Events, Real Time Telco Status and HeartBeat, are the same. The space constraints remain relevant and each of the 190 remote appliances should not be longer than 12 inches, wider than 24 inches, and taller than 2 inches; lack of available space is still being considered as with the aforementioned singular headend appliance. As stated, electrically the 190 remote site appliances each must be capable of connecting with the following electrical specifications: 110VAC 1.5 AMP, 220VAC .75 AMP.

· Must be FIPS 140-2 certified for Out of Band Management (OOBM)

· Must be able to act as a terminal server

· Must have an Internal Modem

· Must allow for connection to a connect to any Public Switched Telephone Network (PSTN) configuration

· Should have a Long-Term Evolution (LTE) cellular module

· Must have a TCP/IP network interface that allows in-band multisession Secure Shell (SSH access)

· Must provide common network protocols such as Multiple Encrypted Access Sessions, Multiple Remote Encrypted Long-Term Evolution (LTE) Access Sessions, Secure Shell (SSH), Radius, Syslog, SNMP, Real Time Events, Real Time Telco Status and HeartBeat.

· Must be able to use Advanced Encryption Standard (AES) 256 Cipher Feedback encryption between appliances over multiple sessions

· Capable of reporting to a headend encryptor central management console appliance

· Must have at least 5 remote console serial ports

· Must have at least 5 secure power control ports for remote power reboot capability

· Size should be no bigger than 12 inches long, no wider than 24 inches wide, and not taller than 2 inches in height due to space constraints

· Must be capable of connecting with the following electrical specifications: 110VAC 1.5 AMP, 220VAC .75 AMP

ITEM #0004 Magnetic Mount Antenna Given that the equipment will be part of a “cellular solution”, each appliance, to include the singular headend appliance and all 190 remote site appliances, will require an antenna element with a magnetic antenna mount capability to allow them to function properly within the cellular solution design, otherwise they will not be able to use a cellular network plan to communicate back to the intended single management console. For this reason, no less than 191 antennas with magnetic antenna mounts will be required. So, the 1 headend appliance located in the HRC Data Center and the 190 remote site appliances total add up to a required antenna count of 191.

· Appliance Antenna cable of transmitting and receiving 4G LTE traffic exchanges; 4G LTE is short for “fourth generation long-term evolution”; should be compatible with the supported appliance.

· Must be 6 inches in height

· Must have a magnetic antennal base (w/ any required cable)