+ All Categories
Home > Documents > FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE -...

FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE -...

Date post: 04-Nov-2019
Category:
Upload: others
View: 2 times
Download: 0 times
Share this document with a friend
24
1 1. Introduction The National Social Security and Insurance Trust (NASSIT) is in the process of upgrading its existing ICT network infrastructure. This upgrade will encompass all its operations across the country. It would involve all forms of ICT connectivity, that is Internet, LAN and WAN. Furthermore, it will involve the upgrade and/or installation of servers, switches, routers, Primary Data Centre and Disaster Recovery Site, more. NASSIT will very soon commence the procurement and implementation of a new Web- based Biometric Pension Administration System (BPAS) which will run on both the intranet (internal operations by staff) and the internet (public portal for use by the public). Therefore, the success of this system significantly depends on the correct status of the ICT network infrastructure. 1.1. Current Status NASSIT existing network infrastructure is a functional network providing the following services: Network connectivity to the various NASSIT application servers. Network services such as DNS, File Printing and Microsoft Active Directory Services. Internet access for Internet browsing, emailing and other online applications. Basic Security Mechanisms such as Centralised Antivirus and a Firewall protecting the Internet. There is Virtual Private Network (VPN) supported by AFCOM SL Limited linking all the NASSIT Head Office to all other NASSIT locations across the country. The VPN also supports the use of the NASSIT Core Pension System (NAPOS), a client-server based system, across the WAN. 1.2. Current Challenges The current NASSIT network infrastructure was designed and implemented about ten (10) years ago. Over the years, more advanced network threats and technologies have emerged in the market, making our current network solution below optimization. Therefore, the next stage of the NASSIT network infrastructure life cycle is its full optimization to meet new NASSIT business, operational and technical needs. NASSIT is planning to introduce basic e-transaction services and it is imperative to provide servers, network equipment and network software to protect NASSIT against threats and provide 24/7 operations to NASSIT e-transactions systems. 1.3. Proposed Plan To achieve these objectives, NASSIT is looking for a professional firm with all the requisite experience and qualifications to comprehensively upgrade its current ICT Infrastructure to support the both the current and future applications and services running on the networks.
Transcript
Page 1: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

1

1. Introduction The National Social Security and Insurance Trust (NASSIT) is in the process of upgrading its existing ICT network infrastructure. This upgrade will encompass all its operations across the country. It would involve all forms of ICT connectivity, that is Internet, LAN and WAN. Furthermore, it will involve the upgrade and/or installation of servers, switches, routers, Primary Data Centre and Disaster Recovery Site, more. NASSIT will very soon commence the procurement and implementation of a new Web-based Biometric Pension Administration System (BPAS) which will run on both the intranet (internal operations by staff) and the internet (public portal for use by the public). Therefore, the success of this system significantly depends on the correct status of the ICT network infrastructure. 1.1. Current Status NASSIT existing network infrastructure is a functional network providing the following services:

• Network connectivity to the various NASSIT application servers. • Network services such as DNS, File Printing and Microsoft Active Directory

Services. • Internet access for Internet browsing, emailing and other online applications.

• Basic Security Mechanisms such as Centralised Antivirus and a Firewall protecting the Internet.

• There is Virtual Private Network (VPN) supported by AFCOM SL Limited linking all the NASSIT Head Office to all other NASSIT locations across the country.

• The VPN also supports the use of the NASSIT Core Pension System (NAPOS), a client-server based system, across the WAN.

1.2. Current Challenges The current NASSIT network infrastructure was designed and implemented about ten (10) years ago. Over the years, more advanced network threats and technologies have emerged in the market, making our current network solution below optimization. Therefore, the next stage of the NASSIT network infrastructure life cycle is its full optimization to meet new NASSIT business, operational and technical needs. NASSIT is planning to introduce basic e-transaction services and it is imperative to provide servers, network equipment and network software to protect NASSIT against threats and provide 24/7 operations to NASSIT e-transactions systems. 1.3. Proposed Plan To achieve these objectives, NASSIT is looking for a professional firm with all the requisite experience and qualifications to comprehensively upgrade its current ICT Infrastructure to support the both the current and future applications and services running on the networks.

Page 2: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

2

2. Current NASSIT Organisation Equipment and ICT Infrastructure

This section describes the current NASSIT Organisation, the location of each site, the applications deployed, the equipment installed and the network topology actually in place at the NASSIT Office. This information is provided to allow the firm to understand the scope and the scale of the current NASSIT Network Infrastructure that requires the upgrade and general overhaul.

2.1. NASSIT ICT Equipment

The current NASSIT Information Technology infrastructure includes the following equipment:

Type Count

Physical Servers 20 Routers 10 ASA Firewall 1 Fortinet Firewall 1 Sonic Firewall 8 Switches (24/48 Ports) 35 Network Printers 20 Wireless Routers 20 Laptops and Desktops at Head Office 160 Laptops and Desktops at Clinic Building 16 Laptops and Desktops at Region Office West 90 Laptops and Desktops at West-West Office 20 Laptops and Desktops at West-East Office 11 Laptops and Desktops at Newton Office 6 Laptops and Desktops at Regional Office East 17 Laptops and Desktops at Regional Office North 22 Laptops and Desktops at Regional Office South 18 Laptops and Desktops at Kono Sub-Office 22 Active IP Addresses at Peak Time 350

Page 3: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

3

2.2. NASSIT Sites

The table lists all NASSIT sites, which are part of NASSIT network infrastructure. The network WAN communication services comprise of wireless Radio links provided by local service provider, AFCOM SL Limited.

Item Office Location 1 Head Office 32 Walpole Street, Freetown 2 Clinic Building 23 Walpole Street, Freetown 3 Regional Office West Old Parcel Post Building, Wallace Johnson

Street, Freetown 4 West-West Sub Office 139 Wilkinson Road, Freetown 5 West-East Sub Office 77 Bai Bureh Road, Kissy, Freetown 6 Records & Archives Centre Newton, Western Rural 7 Regional Office East 53 Maxwell Khobe Street, Kenema 8 Regional Office North 8 Makama Road, Makeni 9 Regional Office Northwest 3 Kolleh Street, Port Loko 10 Regional Office South 2 Lyon Street, Bo Town 11 Kono Sub Office 97 Kainkordu Road, Koidu Town

2.3. NASSIT Applications NASSIT is operating a series of mission critical client-server applications running on Microsoft Windows Server platforms. NASSIT server infrastructure is not fully centralised. Application and/or print servers are located both at the Head Office and in all of its office locations across the country. NASSIT has dedicated wireless VPN links between the Head Office in Freetown and all of its other locations across the country. NASSIT is operating multiple servers providing services such as DNS, Active Directory, Eset anti-virus, Email, Files server and print servers. Over the years, NASSIT has implemented many applications and services which run on both the LAN and WAN. The tables below show the list all current NASSIT applications in use:

Page 4: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

4

2.3.1. Business Applications

Business Applications Users Head Office NAPOS II 240 Government Operations NAPOS II 181 West Region NAPOS II 268 East Region NAPOS II 10 North Region NAPOS II 24 South Region NAPOS II 13 Sun System 50 NASPER 3.0 26 Pigeon Hole System 124 Electronic Documents & Records Management System 78 NASSIT Intranet System 250

2.3.2. Server Services

Service Applications DHCP Microsoft Main and Backup DNS Microsoft Main and Backup Active Directory Microsoft Main and Backup Proxy Server Files Server Print Server Antivirus Server (Eset version 10.1.249.en) Email NASSIT Intranet System

3. Objectives of Exercise

The proposed robust infrastructure equipment includes LAN and WAN Interconnectivity with redundancy, Servers, Switches, Routers, OS, CCTV, VoIP Telephony, Video Conferencing for net meetings, and network software to operate the current systems and the expected robust Core Pension System currently in the acquisition stage.

In order to fulfil the above objective, the NASSIT is now requesting for proposal from firms capable of providing the equipment and Technical Expertise to perform the following specialised services:

Page 5: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

5

I. Review the existing network infrastructure and its ancillaries and proffer a solution that would optimise the use of the existing infrastructure without compromising output.

II. Supply and configure all required network equipment, switches, routers and servers for high availability network.

III. Configure network equipment and software to implement 24/7 network services.

IV. Test the equipment and all network services implemented with evidence reporting.

V. Provide comprehensive Change Management plan to ensure limited downtime.

VI. Document all the procedures to monitor, manage and maintain the equipment and network services. This will include detailed system/server/device configuration documents as well as guidance for Configuration Management.

VII. Provide detail transfer of knowledge to NASSIT IT officers on the management of equipment and network services implemented.

VIII. Supply, install, configure, implement and test both comprehensive Primary Data Centre and Disaster Recovery Solution (including Backups), including hardware and software as well as full documentation and training of NASSIT IT officials on the defined solutions. This should also include the current deployed systems.

IX. Provide 90 days post implementation onsite technical assistance when project goes-live.

X. Provide twelve (12) months technical support after go-live.

XI. All software licenses will have to be registered in the name of NASSIT and proof of such licenses will have to be provided to NASSIT.

The successful firm will be responsible to supply, install and configure the computers, virtualization and server consolidation software and implement a secure, reliable and efficient network, capable to operate 24 hours per day, 365 days per year with an availability of 99.99%. The firm will also be responsible to provide knowledge transfer and hands-on training to insure that at the end of the project, NASSIT has the technical capacity to operate and maintain the solution implemented.

4. Justification of Exercise

The proposed Web-Based Biometric Pension Administration System will require high availability to ensure 24/7 reliable services to both the backend staff and the NASSIT membership in general without interruption. The ICT infrastructure for these systems should be capable to manage, store, send and process data 24 hours a day, 7 days a week, 356 days a year.

Page 6: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

6

For this reason, utilizing the current wireless network architecture to link it operations is a challenge. In order to accomplish high availability and robust server processing services, it is vital to acquire proper well-built server equipment, preferably a modular solution with the ability to be expanded or upgraded. To ease the much needed swift communication between staff across all offices nationwide, the installation of the VoIP on both the LAN and WAN will ensure that every staff in the Trust could be reached from every office location at all times.

With regards to fire suppression in the server rooms, the current manual fire suppression system needs to be upgraded to an automated data centre system.

5. Scope

The scope of the assignment is limited to the supply, installation and configuration of network infrastructure equipment, devices and related software. The supply and installation of the core pension system, namely the Web-Based Biometric Pension Administration System is not part of this tender.

6. Methodology/Implementation Arrangements

NASSIT will manage the project through its ICT Division together with NASSIT Management. The Head of Technology Department in the ICT Division is the designated Project Manager. The designated Project Manager and Management will appoint the rest of the Project Team for this project execution. The ICT Division will implement the project in collaboration with the core operational divisions such as Operations and Benefits.

7. Summary List of Technical Requirements Item Description 1

Supply and installation of High Availability Network that supports various services within NASSIT as required below:

A. Upgrade the Current LAN Infrastructure at NASSIT HQ and all Other NASSIT Locations Nationwide,

B. Provision the Network Backplane for Gigabit Optical Uplink with Port Aggregation,

C. Replace Access Switches with L3 Managed Switches (10GB Uplink plus all ports changed to Gigabyte Ports),

D. Replace Routers with ones capable of forwarding up to 1GB of data,

Page 7: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

7

E. Replace Firewalls with Device that has Stateful Firewall Capability, Intrusion Detection and Intrusion Protection System, and Unified Threat Management with Antivirus,

F. Supply and Install Servers, and Virtualize the infrastructure where applicable,

G. Supply and Upgrade IP-Enabled CCTV Cameras in all NASSIT Locations,

H. Supply and Install IP-Telephony System to Enhance Communication to all NASSIT Offices Nationwide,

I. Supply and Install Video Conferencing Facility across NASSIT Locations Nationwide. Minimum of 100 inch TV for Video Conferencing and Ancillaries.

J. Supply and Install a Disaster Recovery (DR) Site, and Provision Real-Time Replication between the Primary and the DR Sites.

K. Both the Primary Data Centre and DR Sites should be configured with all the required safeguards such as but not limited to the following: full access control system, raised floors, fire suppressors, cooling systems, fire alarm systems, smoke detectors, humidity and temperature monitor, water level monitor, etc. etc.

o Access Control System for Data Centre with ingress capability o SMS and Email Alert System at Data Centres and DR Site for

Environment Control

2

Supply and Install End-to-End Optical Fibre Backbone to all NASSIT Offices Nationwide.

A. Install and Configure 3 STM1 (450MB) Internet Bandwidth in Total for all

NASSIT Offices Nationwide.

B. Configure a Multi-Protocol VPN Interconnecting all NASSIT Offices Nationwide.

C. Implement End-to-End Fibre Optic Termination with VPLS.

Freetown Offices I. NASSIT HQ: 32 Walpole Street, Freetown.

II. Clinic Building: 23 Walpole Street, Freetown. III. Former Parcel Post: Wallace Johnson Street, Freetown. IV. 139C Wilkinson Road, Freetown.

Page 8: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

8

V. 77 Bai Bureh Road, Kissy, Freetown. VI. Records and Archives Centre, Newton, Western Rural Provincial Offices VII. 2 Lyon Street, Bo Town.

VIII. 53 Maxwell Khobe Street, Kenema. IX. 97 Kainkordu Road, Koidu Town. X. 8 Makama Road, Makeni.

XI. 3 Kolleh Street, Port Loko

3

Supply and Install an Integrated Power and Control System with Sufficient Capacity to Sustain Services up to Forty-Eight (48) Hours for the following:

A. Primary Data Centre B. Disaster Recovery Site

4 Supply and Install a Secondary Backup Radio Link Interconnecting All NASSIT

Offices Nationwide.

8. Detailed List of the Deliverables/Output (Expected Outcome)

I. Review the existing network infrastructure and its ancillaries and proffer a solution that would optimise the use of the existing infrastructure.

II. Supply and installation of High Availability Network that supports various services within NASSIT as required below:

a. Upgrade the Current LAN Infrastructure at NASSIT HQ and all Other NASSIT Locations Nationwide,

b. Provision the Network Backplane for Gigabit Optical Uplink with Port Aggregation,

c. Replace Access Switches with L3 Managed Switches (10GB Uplink plus all ports changed to Gigabyte Ports),

d. Replace Routers with ones capable of forwarding up to 1GB of data,

e. Replace Firewalls with Device that has Stateful Firewall Capability, Intrusion Detection and Intrusion Protection System, and Unified Threat Management with Antivirus,

f. Supply and Install Servers, and Virtualize the infrastructure where applicable,

g. Supply and Upgrade IP-Enabled CCTV Cameras in all NASSIT Locations with backup recording capacity of thirty (30) days,

Page 9: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

9

h. Supply and Install IP-Telephony System to Enhance Communication to all NASSIT Offices Nationwide,

i. Supply and Install Video Conferencing Facility Across NASSIT Locations Nationwide,

j. Supply and Install a Disaster Recovery (DR) Site, and Provision Real-Time Replication between the Primary and the DR Sites.

k. Both the Primary Data Centre and DR Sites should be configured with all the required safeguards such as but not limited to the following: full access control system, raised floors, fire suppressors, cooling systems, fire alarm systems, smoke detectors, humidity and temperature monitor, water level monitor, etc. etc.

III. Supply and Install Optical Fibre Backbone to all NASSIT Offices Nationwide.

a. Install and Configure 3 STM1 (450MB) Internet Bandwidth in Total for all NASSIT Offices Nationwide.

b. Configure a Multi-Protocol VPN Interconnecting all NASSIT Offices Nationwide.

c. Implement End-to-End Fibre Optic Termination with VPLS.

IV. The Design and Implementation of the LAN and WAN should effectively transmit bidirectional fingerprint and facial Biometrics data centralised at the Head Office database.

V. Supply and Install an Integrated Power and Control System with Sufficient Capacity to Sustain Services up to Twenty-Four (24) Hours for the following:

a. Primary Data Centre

b. Disaster Recovery Site

VI. Supply and Install a Secondary Backup Radio Link Interconnecting All NASSIT Offices Nationwide.

VII. Configure the equipment and software to implement 24/7 network services

VIII. Test the equipment, seamlessly migrate all systems and also all network services implemented.

IX. Provide detailed performance and system test results including benchmark performance results.

X. Document all the procedures to monitor, manage and maintain the equipment and network services

XI. Train NASSIT IT officers to install, configure, troubleshoot and maintenance the equipment and network services implemented

Page 10: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

10

XII. Maintenance and Recurring Costs (Monthly and Yearly) for the following services should be clearly and separately indicated in the bid:

§ Primary Link § Secondary Link § Antivirus Licenses § Any other services that have monthly/yearly recurring costs.

XIII. Additional Deliverables: § Fibre Optic cables should link all floor-to-floor switch connectivity § 100 inch or larger smart TV should be used for Video Conferencing facility

with ancillaries § SMS and Email Alert System should be installed at the Data Centre and DR

Site for Environment Control § Contractor must provide Mandatory Warranty & Free Support Period § Contractor must provide the Inception Report required before project kick-

off § Only Cat 7 cabling or higher should be used in all locations § Contractor shall Provide detailed documentations of all designs § Contractor shall provide Centralised Wireless Controller to manage all

wireless access points at NASSIT nationwide

9. Expected Outcome § High availability (24 hours/7 days/365 days) network. § Full ICT recovery infrastructure within 30 minute if there is a major disaster and 5

Minutes recovery in medium range disaster, and 1 minute in low risk disaster classified category.

§ Optimal network performance and system availability with 99.99% performance. 10. Reporting

The firm will be responsible to the NASSIT Project Manager for this Project. This will include the provision of a weekly flash report for work executed by any firm’s consultants participating in the project and a monthly progress report. These reports will detail:

§ Planned activities in the previous period § Progress against these; § Indicators of achievement; § Implementation problems (Issues and Risks); § Strategies to overcome these; § Planned activities in the next period.

Page 11: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

11

11. Contract Duration and Working Space

§ Maximum of twelve (12) weeks for all deliverables, including supply and installation of all systems.

§ Firm will provide 90 days post implementation onsite technical assistance when project goes-live.

§ Firm will provide twelve (12) months ad-hoc technical support after go-live.

12. Minimum Technical Specifications of Required Servers, Switches, Routers and Other Devices

Description

1

Replication of High Availability Network: This will include proper configuration of the two major sites (Primary Data Centre in Freetown, and Disaster Recovery Site in Kenema) and reconfiguration of core network to ensure redundancy links are up and running.

2

SAN Switch Data high-performance 24-ports 1U switch is suitable for server virtualization of NASSIT core applications. Configurable with 24 ports and supports 16 Gbps speed. With Management and diagnostics features such as Monitoring and Alerting Policy, Dashboards, Flow Vision, to help NASSIT ICT avoid problems before they impact the

3

SAN Storage

• Supporting multi-protocol and virtualized multi-tier, multi-RAID-level storage policies.

• With dual redundant controllers, 24 internal drive slots, 8 GB Fibre Channel (FC) or four 10 Gb CSI network ports, and 1 Gb port per controller for out-of-band (OOB) management traffic.

• Supporting drive types range from Write-Intensive (WI) Solid State Drives (SSDs) to Read-Intensive (RI) SSDs to 15K, 10K, and 7.2K SAS drives in small form factor (2.5-inch).

• Dual Controller: Support up to 64 servers when configured with 10Gb iSCSI. Available with option of 4GB or 8GB cache controllers.

• Should support multi-tier data placement that improves application performance. • With Operating System (OS) with features such as block-level compression,

synchronous Live Volumes to restore data in a non-disruptive manner, and Active Directory (AD) Single-Sign-On (SSO).

Page 12: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

12

• Web-based management tool

4 12 Way PDU

4

Complete Automated fire protection and cooling systems for both the Data Centre at Head Office in Freetown, and the Disaster Recovery Site in Kenema. Vendor is required to visit the two proposed sites and take measurements.

5

LAN Restructure HQ/ICT Centre and all other NAASIT locations. This will include the total re-cabling of each and every NASSIT location. The structured cabling to include retesting and amendments of all data and power points at these NASSIT locations. This will also require the installation of the new gigabyte switches.

6 Network Design, Installation, Configuration Active Directory Reconfiguration.

Page 13: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

13

Total 10/100/1000 or Multigigabit copper ports

24 POE+

Default AC Power Supply 715W AC

Available PoE power 445W

StackWise-480 Yes

StackPower Yes

Default power supply PWR-C1-715WAC

Switching capacity 208 Gbps on 24-port Gigabit Ethernet model

Stacking bandwidth 480 Gbps

Total number of MAC addresses 32,000

Total number of IPv4 routes (ARP plus learned routes)

32,000 (24,000 direct routes and 8000 indirect routes)

IPv4 routing entries 32,000

IPv6 routing entries 16,000

Multicast routing scale 8000

QoS scale entries 5120

ACL scale entries 5120

Packet buffer per SKU 16 MB buffer for 24- or 48-port Gigabit Ethernet models

FNF entries 64,000 flow on 24- and 48-port Gigabit Ethernet models

DRAM 8 GB

Flash 16 GB

VLAN IDs 4000

Page 14: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

14

Total Switched Virtual Interfaces (SVIs)

2000

Jumbo frames 9198 bytes

Total routed ports per stack 208

Wireless bandwidth per switch Up to 48 Gbps on 24-port Gigabit Ethernet model

Forwarding rate 154.76 Mpps

Mean time between failures (hours) 299,000

Environmental Reduction of Hazardous Substances (ROHS) 5

Page 15: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

15

l Layer 3 Switch

Access Switch – L3

Product Details · There are Forty-eight 10/100/1000 Ethernet Gigabit Ports and two 10G SFP+ uplink

Ports on the front panel. · Two USB Type A ports and one USB mini-Type B (console) port are on the left. · This switch offers one RJ-45 console port and one Ethernet management port on the

left of the front panel. · Power over Ethernet Plus (PoE+) supports up to 740W of PoE budget for 24 ports

with 30W per port or 48 ports with 15.4W per port Firewall

Stateful Inspection Throughput (Maximum)

1.2 Gbps

Enclosure Type Rack-mountable - 1U Feature Set IP Lite Uplink Interfaces 2 x 10G SFP+ Ports 48 x 10/100/1000 (POE+) Available PoE Power 740W Forwarding Bandwidth 108Gbps Maximum stacking number 8 Stack bandwidth 80G Switching Bandwidth 216Gbps RAM 512 MB Flash Memory 128 MB

Page 16: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

16

Stateful Inspection Throughput (Multiprotocol)

600 Mbps

IPS Throughput 400 Mpbs (Extra hardware not required)

Next-Generation Throughput (Multiprotocol)

350 Mbps

3DES/AES VPN Throughput 250 Mbps

Users/Nodes Unlimited

IPsec VPN Peers 250

Cisco Cloud Web Security Users

250

Premium Any Connect VPN Peers (Included/Maximum)

2/250

Concurrent Connections 250,000

New Connections/Second 15,000

Virtual Interfaces (VLANs) 100

Security Contexts (Included/Maximum)6

2,5

High Availability Active/Active and Active/Standby

Expansion Slot 1 interface card

User-Accessible Flash Slot No

USB 2.0 Ports 2

Integrated I/O 6 GE Copper

Expansion I/O 6 GE Copper or 6 GE SFP

Serial Ports 1 RJ-45 console

Page 17: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

17

Solid State Drive 1 slot, 120 GB MLC SED

Memory 8 GB

Minimum System Flash 8 GB

System Bus Multibus architecture

Temperature 23 to 104°F (-5 to 40°C)

Relative Humidity 10 to 90 percent noncondensing

Altitude Designed and tested for 0 to 15,000 ft (4572m)

Shock 70G, 4.22 m/sec

Vibration 0.41 Grms2 (3 to 500 Hz) random input

Acoustic Noise 64.2 dBa max

Temperature -13 to 158ºF (-25 to 70ºC)

Relative Humidity 10 to 90 percent noncondensing

Altitude Designed and tested for 0 to 15,000 ft (4570m)

Shock 70G, 4.22 m/sec

Vibration 1.12 Grms2 (3 to 500 Hz) random input

AC Range Line Voltage 100 to 240 VAC

AC Normal Line Voltage 100 to 240 VAC

AC Current 4.85A

AC Frequency 50/60 Hz

Page 18: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

18

Router

Services Performance Engine module w/SPE 150

Rack Units 3U

Interfaces 3 integrated 10/100/1000 Ethernet ports with 2 ports capable of RJ-45 or SFP connectivity

Expansion Slot(s)

4 service module slots

1 Internal Services Module slot

4 onboard digital signal processor (DSP) slots

4 Enhanced High-Speed WAN Interface Card (EHWIC) slots

RAM 1 GB (installed) / 2 GB (max)

Flash Memory 256 MB (installed) / 8 GB (max)

Dimensions 47.6 cm x 43.8 cm x 13.3 cm

Package Weight 21.84 Kg

SAN Switch

I. Simple, flexible, and scalable

§ Scale easily from 8 to 24 ports with Ports-on-Demand (PoD) § Operate seamlessly with existing Brocade switches through E_Port connectivity § Manage multi-switch environments easily with Brocade Network Advisor

II. High-performance Fibre Channel

§ Give applications fast storage access with an optimized 8 Gbps Fibre Channel network

§ Enable efficient resource management and LAN-free backup with SAN-based architecture

Page 19: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

19

§ Support 192 Gbps of uncongested throughput high-performance data transfers

III. Comprehensive san management capabilities

§ Allow fast, easy setup and configuration with the system’s wizard § Provide comprehensive data centre fabric management with Brocade Network

Advisor § Simplify management with easy firmware uploads and error/system file retrieve

Firewall

The Firewall must have the following utilities and functionalities imbedded in its core:

§ Stateful Inspection Firewall § Intrusion Prevention System § Gateway Anti-Virus & Anti-Spyware § Gateway Anti-Spam § Web Filtering § Application Filtering § Web Application Firewall § Virtual Private Network § SSL VPN § Wireless WAN § Bandwidth Management § Networking § High Availability § Administration & System Management § User Authentication § Logging/Monitoring

Server Racks

42U of rackable space

§ Adjustable mounting depth of 6" - 30" (152 - 762 mm) § Overall rack depth, 39" (990 mm) § Universal square holes, cage nuts included § Dell, HP, IBM compatible

Secure rack made for servers

§ 76% perforation on doors exceeds OEM air flow requirements

Page 20: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

20

§ Doors and sides are removable, lockable, reversible § 1680 lbs (762 kgs) capacity § Casters, leveling feet included § Cable pass-throughs in top & bottom of rack

Network Cabinet

9U of rackable space

§ Adjustable mounting depth of 6" - 30" (152 - 762 mm) § Overall rack depth, 39" (990 mm) § Universal square holes, cage nuts included

Secure rack made for Switch and Router

§ 76% perforation on doors exceeds OEM air flow requirements § Doors and sides are removable, lockable, reversible § 168lbs (76.2 kgs) capacity § Casters, leveling feet included § Cable pass-throughs in top & bottom of rack

KVM Switch

The KVM Drawer with Built-In 8-Port 4K HDMI USB KVM Switch combines a rack mount 4Kx2K LCD monitor, keyboard, touchpad mouse and a 4K HDMI USB KVM Switch in a space-saving 1RU industrial strength drawer. Control up to 8 Ultra-HD 4Kx2K 30Hz HDMI USB computers from one user station!

• Forward-folding 17.3" TFT/LCD monitor. • Supports Ultra-HD 4Kx2K resolutions (3840x2160@30Hz). • Integrated 8-port 4K HDMI USB KVM Switch in 1U

o Control up to 8 Ultra-HD 4Kx2K 30Hz USB computers. • Torque-friction hinges - monitor does not wobble, spring, or slam shut. • Compact, heavy-duty tactile keyboard with 17-key numeric keypad. • Rugged steel construction with durable powder coat finish. • LCD auto-shutoff in closed position. • Drawer locks into place when open to prevent it from sliding in and out of the rack • Designed to be a one-person job when installing the drawer.

Inverter System

Page 21: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

21

A compact and scalable modular inverter providing a pure sine wave AC supply.

Leveraging the existing DC Power system, it provides an excellent high power AC backup solution. It uses the latest inverter technology, providing superior energy efficiency in a compact size.

The “Twin Sine Innovation” (TSI) technology eliminates all single points of failure with full scalability; up to 32 modules in parallel and high efficiency of up to 96…% reducing operating costs.

Must run for 24 hours backup electricity

All high power business critical applications and all types of AC loads.

The design is modular and scalable with hot- swappable inverter modules which ensures low Mean Time to Repair (MTTR), reduction in service costs and meets the changing needs for future expansion.

Complete Power Systems: The inverter should be available in complete power system consisting of cabinets with up to 6 modules.

Cabinet: 700x700x2100 mm (23’’)

Max bay capacity: 120 kVA/96 kW

Manual Bypass

Internal 120 kVA

External > 120 kVA

48 Vdc (40 to 60 Vdc)

3×400 Vac/230 Vac

3 phase IN / 3 phase out

3 phase IN / singe phase out

4 cabinets can be installed in parallel to reach 480 kVA!

High Availability Servers

Page 22: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

22

Option Selection

Base

Trusted Platform Module (TPM)

No Trusted Platform Module

Chassis Chassis Config 0, 24x3.5" HDD, Single PERC, for Riser Config 1 or 4

Processor Intel® Xeon® Silver 4114 2.2G, 10C/20T, 9.6GT/s, 14M Cache, Turbo, HT (85W) DDR4-2400

Additional Processor No Additional Processor

Processor Thermal Configuration

CPU 1 Thermal for FH Riser

Memory Configuration Type

Performance Optimized

Memoryi 32GB RDIMM 2666MT/s Dual Rank

RAID C4, RAID 5 for 3 or more HDDs or SSDs (Matching Type/Speed/Capacity)

RAID/Internal Storage Controllers

Dell PERC H730P RAID mezzanine, mini mono

Hard Drive 1TB 7.2K RPM SATA 6Gbps 512n 3.5in Hot-plug Hard Drive

Operating System Windows Server 2019 Data Centre

Licenses VSAN Licenses

Embedded Systems Management

iDRAC9 Enterprise with OME Server Configuration Management

Group Manager iDRAC Group Manager, Enabled

Password iDRAC,Factory Generated Password,OEM

PCIe Riser Riser Config 4, Butterfly - 1xFH+3xLP, Single CPU, R740XD2

Page 23: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

23

Option Selection

Additional Network Cards

On-Board Broadcom 5720 Dual Port 1Gb LOM

Optics & Cables for Network Cards

SFP+ SR Optic, 10GbE, for all SFP+ ports, excludes Intel X520 and high temp validation warning cards

Power Supply Dual, Hot-plug, Redundant Power Supply (1+1), 1100W

Power Cords English

BIOS and Advanced System Configuration Settings

Performance BIOS Setting

Advanced System Configurations

UEFI BIOS Boot Mode with GPT Partition

Rack Rails PEC Static Rails

Server Accessories 8X DVD-ROM, USB, External

System Documentation

Open Manage DVD Kit

13. Demonstration/Presentation of Proposed Solution Each Bidder will be required to give a PowerPoint presentation/demonstration of their proposed solution to a panel of evaluators and NASSIT Senior Management. The presentation should be in accordance with the bid already submitted. A maximum of thirty (30) minutes slot will be allocated to each bidder for this presentation.

14. Eligibility Criteria

a. The Bidder should be primarily an IT Company and Service provider dealing with Network System Design and Implementation for a period exceeding five years.

b. The Bidder must be providing support for all phases of the Network Design and Implementation life cycle and currently active in the business of network and infrastructure.

c. An undertaking (self-certificate) is to be submitted that there has been no outstanding bankruptcy, judgment or pending legal action that could impair operating as a going concern.

Page 24: FINAL RFP - NETWORK INFRASTRUCTURE UPGRADE - TORnassit.org.sl/wp-content/uploads/2019/05/FINAL-RFP-NETWORK... · virtualization and server consolidation software and implement a secure,

24

d. An undertaking (self-certificate) is to be submitted that the Bidder hasn’t been blacklisted by any Central/ State Government Department/ Central Government funded organizations/ State Government funded organizations/ World Bank, or other World Bank organizations (including the UN Organizations) and is not under investigation by Government or UN Member State Government.

e. The Bidder should have completed at least one project of similar nature in the past five years. The details of such jobs should be furnished with a copy of the signed contract.

f. Bidders shall not be under a declaration of ineligibility for corrupt and fraudulent practices issued by the Government of Sierra Leone ("GoSL")/State Governments / Regulatory agencies.

g. NASSIT reserves the right to carry out the capability assessment of the Bidders and its decision in this regard shall be final & binding to all.

h. Upon award of work order, the successful Bidder shall sign an agreement with NASSIT within 14 days.

i. The Bidder should have technically qualified network and infrastructure workforces for this specific business domain.

15. Procedure for Review of Work Progress The following is the procedure for review of progress reports, inception status, final draft and final reports:

§ The Bidder is expected to keep NASSIT informed of all the activities undertaken, progress made therein and future plans.

§ The Bidder shall initially prepare a weekly report and e-mail the same to NASSIT on the commencement of next week.

§ The Bidder & NASSIT can decide the format(s) of report writing mutually. The Bidder will be under obligation to change/ alter the format (s) as and when desired by NASSIT.

§ The Bidder shall prepare a Monthly Report mentioning gist of all the activities undertaken, progress made, corrective action taken, if any, during the month.

§ The Report Writing shall start from the first week itself of Commencement of the contract with the Bidder.


Recommended