Modified Bid Document of Campus Wide Networking for Network Connectivity... · Web viewFor the...

Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana: Page 1 of 29

Tender Document for Network Connectivity at BPSMV on Turn Key Basis

Table of Contents

SECTION – I

1. Invitation for Bids

SECTION – II

1. Procedure for submission of Bids2. Cost of Tender3. Amendment of Tender Document4. Language of Bids5. Documents comprising the Bids

SECTION – III

1. Criteria for Pre-qualification2. Criteria for Technical Bid evaluation3. Financial Bid4. Campus Network Requirement5. Technical Terms & Conditions & Specifications

SECTION – IV

1. General Terms and Conditions


SECTION – I1. Invitation for Bids

1.1 The BPSMV, University proposes to procure networking components and solution for extending backbone network connectivity at BPSMV, University, Haryana. The BPSMV is looking for vendors who have experience in integration of above-mentioned systems.

1.2 The project is to be executed on turnkey basis.

1.3 Tenderers are advised to study all technical and commercial aspects, instructions, forms, terms and specifications carefully in the tender document. Failure to furnish all information required in the Tender Document or submission of a bid not substantially responsive to the Tender document in every respect will be at the tenderer’s risk and may result in the rejection of the bid.

1.4 Sealed offers prepared in accordance with the procedure enumerated in Clause 1 of Section II should be submitted to Director, BPSMV, Haryana, not later than the date and time laid down, at his address given in the schedule for invitation to Tender under Clause 1.7 of Section I.

1.5 All bids must be accompanied by an earnest money of Rs. 1.0 lacs in the form of Bank Draft / Bankers Cheque drawn from a scheduled bank in favour of the Registrar, BPSMV, Khanpur Kalan, Sonipat. Haryana.

1.6 This tender document is not transferable.

1.7 Schedule for Invitation to Tender

a) Address at which tender is to be submitted:Director, School of Engineering & Sciences,BPS Mahila Vishwavidyalaya, Khanpur Kalan, Sonepat-131305,Haryana.

b) Last time and date for submission of Tender by the tenderer:14th Oct, 2010 upto 4:00 PM

c) Date till which the tender is valid:60 days from the opening of technical bid.Implementation will be within 8 weeks after the allotment of tender.

d) BPSMV shall not be responsible for any postal delay about non-receipt/non-delivery of the documents.


SECTION – II

1. Procedure for submission of Bids

1.1 It is proposed to have a Three Cover System for this tendera) Pre-qualification documents (in duplicate) in one cover.b) Technical Bid (in duplicate) in one cover.c) Commercial bid (in duplicate) in one cover.

1.2 Each copy of the Pre-qualification document should be covered in a separate sealed cover super scribing the word: ‘Pre-qualification document’: Each copy should be marked as “Original Copy” and ‘First copy’. Both should be put in a single sealed cover super scribing the wordings ‘Pre-qualification document’.

1.3 Each copy of Technical Bid of the Tender should be covered in a separate sealed cover super scribing the wordings “Technical Bid”. Each copy should be marked as “Original Copy” and “First Copy”. Both should be put in a single sealed cover super scribing the wordings “Technical Bid”.

1.4 Each copy of Commercial Bid of the Tender should be covered in a separate sealed cover super scribing the wordings “Commercial Bid”. Each copy should be marked as “Original Copy” and “First Copy”. Both should be put in a single sealed cover super scribing the wordings “Commercial Bid”. Commercial Bid should only indicate prices (Preferably item-wise).

1.5 All the three documents viz. Pre-qualification, Technical Bid Cover and Commercial Bid Cover prepared as above are to be kept in a single sealed cover super scribed with Tender Number, Due date and the wordings “Tender document for the Campus wide networking”

1.6 The cover thus prepared should also indicate clearly the name and address of the tenderer to enable the Bid to be returned unopened in case it is declared “late”.

1.7 Each copy of the tender should be a complete document and should be bound as a volume. Different copies must be bound separately.

2. Cost of Tender

The tenderer shall bear all costs associated with the preparation and submission of its Bid, including the cost of presentation for the purpose of clarification of the bid, if so desired by the client and the client will in no case be responsible or liable for those costs, regardless of the conduct or outcome of the Tendering Process.


3. Amendment of Tender Document

3.1 At any time prior to the last date for receipt of bids, the client may for any reason, whether at its own initiative or in response to a clarification requested by a prospective Tenderer, modify the Tender Document by an amendment.

3.2 The amendment will be notified in writing or by telex or cable to all prospective Tenders who have received the Tender Documents and will be binding on them.

3.3 In order to afford prospective Tenderers reasonable time in which to take the amendment into account in preparing their bids, the Client may, at its discretion, extend the last date for the receipt of the Bids.

3.4 The institute reserve the right to fine tune the technical specification till the opening of the financial bid

4. Language of Bids

The bids prepared by the Tenderer and all correspondence and documents relating to the bids exchanged by the Tenderer and the Client, shall be written in English language, provided that any printed literature furnished by the Tenderer may be written in another language so long as accompanied by an English translation in which case, for purposes of interpretation of the bid, the English translation shall govern.

5. Documents comprising the Bids

5.1 The Bids prepared by the Tenderers shall comprise of following components: -

a) Pre-Qualifying Document shall consist of following: -(i) The documents supporting Clause 1 of Section III of the tender and

signed and complete in all respects.(ii) Bid security furnished in accordance with Clause 1.6 of Section III.(iii) Valid Income Tax Clearance Certificate in original.(iv) Photocopies of letter of Awards & Completion certificate (if any).

b) Technical Bid shall consist of the following: -(i) Technical Bid furnished as per the format for technical bid (Clause 2 of

Section III).(ii) Technical literature for each product/service, covering full technical

specifications, principle of operation, design features, test and monitoring facilities, description of operation, procedure and facilities.


(iii) Bar chart indicating the proposed schedule of completion (Bar chart should indicate the schedule of each activity under the tasks).

(iv) The details of products to be supplied should be given in the same sequence as mentioned in the tender. The brochures giving details of the products and other supporting documents should also be attached.

(v) The software supplied should be legal and licensed. Only hardcopies of original documentation/manuals will be accepted.

(vi) Model No., Make and standards (like IEEE) of each item should be specified clearly.

c) Commercial Bid consisting of the following: -(i) Bid prices duly filled, signed and complete as per the format (Clause 5 of

Section III).(ii) Maximum educational discount as could be offered in hardware and

software, should be mentioned.


SECTION - III

1. Criteria for Pre-qualification

1.1 The bidder should be a manufacturer, authorized distributor or large-scale system integrator of the required networking equipment.

1.2 The bidder must have a tender specific “MAF” for active and passive product.1.3 ISO 9001:2000 certificates or equivalent for the tenderer.1.4 Tenderer should have service center in Sonepat, Delhi (NCR) or in a radius of 40Km of

Haryana. 1.5 Experience of the similar type of projects.1.6 The bidder should have at least 1 Single Purchase Order of minimum 40Lacs of

similar nature.1.7 Earnest money in the form of Draft of Rs 1.0 lacs in the name of the Registrar ,

Bhagat Phool Singh Mahila Vishwavidalaya, Khanpur Kalan ,Sonepat should accompany the bid.

1.8 The main bidder should have a turn over of at least Rs. 30 crores annually for the last three years.

1.9 Pre Qualification bid should contain reports on the financial standing of the bidder such as profit & loss accounts/statements, balance sheet and auditor’s reports for the last three years banker’s certificate e.t.c.

2. Criteria for technical Bid evaluation The technical bid will be evaluated by a committee constituted by the director for this purpose. The committee will make the comparative statement of the bid, take any clarification and take technical presentation if required.

3. Financial Bid

The Financial Bid may be submitted in the following Format. (Cost for each item may be mentioned separately). Break – up of total cost should be provided as follows:

Sr. No.

Item Description/Make Qty. Unit Price

Sales Tax %age and

rupees

Any other taxes/duties/

levies in %age and rupees (mention

details)

Total FOR price (in Rs.)

1

2

3

4

5


4. Campus Network Requirements

Bhagat Phool Singh Mahila Vish. Sonepat Haryana, BPHMU is going to setup a campus wide Local Area Network. This network shall provide with high-speed access to all computers, and Internet access connectivity. The objective is to be achieved by deploying Gigabit link on the OFC backbone from the Computer Centre to various Departments, Sections & Offices in a 2-tier topology consisting of a central core switch followed by access switches in sequence to connect the desktops over Gigabit Ethernet. In addition to the procurement of the switches and hardware, related network security and management software will also be procured.

This is a turnkey project including supply of materials and implementation of the work comprising of laying cables, mounting switching, structured cabling and maintenance of campus wide network and so on.

Following considerations shall be kept in mind, to arrive at the solution of the campus wide LAN at Bhagat Phool Singh Mahila Vish. Sonepat Haryana .

Modularity: It is a key requirement, in the sense that incremental additions should be possible at the hardware & software levels, as evolving needs justify expansion.

Scalability and expandability: Scalability and expandability are the stated requirements of the proposed campus network at BPSMV, Haryana . The solution should be scalable and expandable, if required, should be easy with minimal changes in the network.

Flexibility: Flexibility and ease of adding new services or features (Data, Voice, Video, and Wireless etc.) required due to the dynamic operating environment. The proposed solution should also be flexible enough to support current standards and foreseen upcoming standards.

QoS: Quality of Service is required in the proposed network as various user groups and various applications will be running on the network. All the network components being proposed should support traffic policies & QoS.

Reliability: High Reliability of all the products constituting the core of the campus network & other sub systems is crucial. The products should have the self-healing with fast convergence features in case of any failure. The equipments proposed should have high MTBF and proven reliability.

Security: It is one of the key requirements of proposed campus network as different user groups are using this common infrastructure with very sensitive applications. So provision of adequate security has to be provided on the network between different user groups.

Management: Complete visibility and control of the network, as well as the provision


of being able to exchange data with the management platforms or other sub-systems is crucial to the proposed campus network. The NMS should support features for centralized proactive management, statistical analysis, trouble shooting tools, configuration tools etc and enabling or disabling particular node or route.

Simplicity: The proposed network design should be simple with minimum variety of components and preferably from a single manufacturer. This also implies simple to understand, implement & maintain the entire system.

The proposed network solution should be on Gigabit Ethernet technology and should support multimode fiber optic and single mode optic fibre.

The present requirement of LAN & Wifi Nodes in the SES and Administrative Buildings are as Under :-

Consolidated Nodes Break-up Details-SES (Building -1)

S.N0.Floor's Location

Total LAN Nodes

1 Port Faceplate

Patch Cord 4 Ft. Rack Side

Patch Cord 7 Ft. User Side

24 Port Cat6 Jack Panel

12U,15U & 42U Rack Requirement

1 Ground Floor 62 62 62 62 3 22 First Floor 189 189 189 189 11 53 Second Floor 74 74 74 74 4 24 Third Floor 67 67 67 67 4 2

Total 392 392 392 392 22 11

Consolidated Nodes Break-up Details-Admin Block (Building -2)

S.N0. Floor's Location

Total LAN Nodes

1 Port Faceplate

Patch Cord 4 Ft. Rack Side

Patch Cord 7 Ft. User Side

24 Port Cat6 Jack Panel

12U,15U & 42U Rack Requirement

1 Ground Floor 75 75 75 75 4 22 First Floor 61 61 61 61 3 23 Second Floor 67 67 67 67 3 24 Third Floor 67 67 67 67 3 2

Total 270 270 270 270 13 8


Schedule of RequirementsActive Components

Equipment Brief Description Quantity Unit1. Core Switch Modular Core Switch (24 port copper

and 16 port fibre after configure in Stacking)16 Ports x 1000 MBPS FO Modules24 Port 10/100/1000BaseT (Gigabit Ethernet)

1+1 Nos

2. Edge Switches Modular, expandable design with Fast Ethernet Switch : 24 10/100 Mbps ports with 2 x 1000 BaseT module or 2 SFP slots.

21+13 Nos

3. SX modules 1000BaseSX Modules 14+20 Nos4. LX Modules 1000Base LXModule 2 Nos5. Wireless Wireless Access Points 14+14 Nos6. Network

Management Software

Windows based NMS with centralized control with multiuser, multivendor Management framework based on client-server architecture to manage , monitor and transfer complex network data into graphical business centric information for 100 devices

1 Nos

7. Firewall( Cisco( Should not be Linksys)/UTMJJuniper/Cyberoam)

4 Gigabit ports unlimited users license and 500 Content and Service license.

1 Nos

8. 1 KVA Offline UPS

Sinewave type 8+8

9. 3 KVA Online UPS

Sinewave type 1

Passive ComponentsS.No Description UoM Qty1 4 pair, Cat 6 UTP Cable (1000 ft ) Nos 98

224 port, Cat 6 Loaded modular Jack panel for UTP termination at Rack end Nos 35

3 4 pair, cat 6 UTP Patch cord Rack end for data Nos 662


connectivity- 4ft4 Cat 6 Information Outlet User end Nos 6625 British style single port face plate (3X3) Nos 662

64 pair, cat 6 UTP Patch cord user end for data connectivity- 7ft Nos 662

7 3x3, PVC Gang Box, Deep Inside Nos 662

86-core MM 50/125 micron OM3 Outdoor Fiber Cable MTR

1500 mtr

919-inch rack mount patch panel, 1U, drawer style Unloaded Nos 26

10 6-fiber, SC-Style, Multimode adapter plate Nos 3411 Blank adapter plate Nos 1812 SC-Style Pigtail, 50/125, Multimode, 1.5 meter N os 204

13SC-LC Style Multimode 50/125 micron Duplex Patch Cord, 3 Meter Nos 34

1412 U Wall mount Rack with 2 FAN, 6 port 5/15 Amp PDU and 2pkt Hardware Nos 16

1515 U Wall mount Rack with 2 FAN, 6 port 5/15 Amp PDU and 3pkt Hardware Nos 1

16

42 U Networking Rack ( 600 X 1000 mm ) with 4 FAN at top mounted, Front Glass door, Rear perforated door, vertical cable manager for patchcord management, 10 port 5/15Amp PDU and 5PKT Hardware. Nos 2

17 1U closed PVC Cable manager Nos 41

18Supply of 50mmx50mm PVC Slotted Channel, duct type, Color gray MTR 600

19Supply of 32mm PVC Conduit/Channel Flexible pipe MTR 1500

20 Supply of 25mm PVC Conduit, ISI mark MTR 800

21

Any other hardware such as UTP/fibre Cable marker, fiber /copper/PVC, HDPE fittings & consumables etc. to make system complete

22 Project Management Charges Each 1

23

Site Certification for 20 Years (Including Db and DbM losses for fiber and Omni scanning reports for copper connectivity.) Each 1

List Of Approved Brands

For Active Product: Enterasys / Cisco( Should not be Linksys )/Avaya/juniper. All Switches & Access points must be of the same make.For Passive Product: Tyco / Digilink /Systimax/Panduit


For UPS Product : APC /Emerson/EatonFor Network Rack: HCL / Emerson/RittalFor Firewall/ UTM :- Juniper / Cisco( Should not be Linksys) / CyberoamConnectivity of

Distribution Switches

A. Active LAN DesignIt is proposed to deploy 2 fixed configuration layer 3 switch configured in stacking to

act as core switch . It will be located in Server Room in admin building. Each building will have 24 port 10/100/1000 cascaded switches to provide connectivity to the end users. The number of switches in the particular building/section will depend on the number of users in the building. All the servers are proposed to be centrally located at Server Room in admin building. Bhagat Phool Singh Mahila University Sonepat, Haryana may run IP Telephony and Video Conferencing on the Network at a later date. Necessary infrastructure for the same is not provided in proposed network, but it may be acquired by Bhagat Phool Singh Mahila University Sonepat Haryana as and when the need for the same arises. Basic levels of Policies and Quality of Service will be implemented on the Network to enable the Network to give priority to critical traffic. The network solution must be provided taking this fact in account. The necessary plan for the LAN connectivity is briefed below:

1. The new Gigabit Ethernet based Core switch has to be connected with the previous LAN so that the previous LAN and the new LAN are both integrated.

2. Splicing/Fusion for OFC will have to be done at both the ends for the above mentioned sites. The required SMF OFC is already present in above said places but needs to be spliced.

3. For the indoor connectivity within the hostels, wireless solution will be adopted. However Access Points to be installed in the halls should follow extended basic service set mode i.e. should be connected through CAT 6 Ethernet terminating at the edge switch.

4. Only wireless Access Points need to be installed through Edge switches.5. For the indoor wireless in the hostels, the IEEE Wireless standard of 802.11g shall be

adopted. 6. All the Access Points should have the facility of Power over Ethernet.7. The new edge switches must be configured such that different Departments form

different VLANs

B. WAN Design

The WAN infrastructure will be mainly used for providing Internet connectivity to students and faculties. It will also be used for remote access to lecture notes, assignment submission, etc. Our Institute has 10 MBPS to be upgrade upto 1Gbps (in the next six months ) leased line on local loop for Internet connectivity.


C. Security Setup

It is proposed to use 4 Gigabit ports hardware firewall for securing the campus wide LAN. The DMZ interface will be used for hosting publicly accessible servers while other servers will be part of secure network. The detailed diagram is given in Annexure -I

GENERAL TECHNICAL SPECIFICATIONS FOR THE SCHEDULE

The following are the basic guidelines for the various components and bidders to recommend right products and submit the bid.

(A) ACTIVE COMPONENTS SPECIFICATIONS

1. CORE SWITCHSwitch 1

The central switch should have following features:

Hardware Performance Required:

The Switch Should be stackable 24 Ports of 10/100/1000 with 4 Fiber GBICs. Switch should have a switching fabric backplane of minimum 32 Gbps for 24 ports

switch respectively. Switch should support performance rating of 35 Million pps for 24 ports switch respectively.

It should be possible to have the VLAN configuration done centrally.

Layer 1 Feature:

Support for 100BASE-FX , 10/100 BASE-TX , 10/100/1000BASE-T , 1000BASE-SX,-LX full duplex

Layer 2 Features:

Minimum 256 VLANs should be supported Support for 4096 VLANs per switch Link Aggregation should be based on IEEE 802.3 ad. Minimum 4800 MAC Address support. 802.3x flow control 802.1P Prioritization and 802.1q VLAN Tagging support. 802.1D IEEE 802.1s, IEEE 802.1w. Jumbo Frame support. 802.1Q VLAN Trunking.

Layer 3 Features

Should support IP routing protocols Static, Routing Information Protocol [RIP], RIP2, BOOTP.

IGMP v1, v2, and v3 IGMP filtering on access and trunk ports


IP multicast routing protocols: DVMRP, PIM Version 2 (Sparse Mode & Dense Mode)

Multicast Source Discovery Protocol (MSDP) Full Internet Control Message Protocol (ICMP) support ICMP Router Discovery Protocol

Traffic Management

Support for L2/L3/L4 Ingress Traffic Policing. Should support traffic policing with higher level of granularity with 64 Kbps traffic

flow for both Fast Ethernet and Gigabit Ethernet ports. Single console port and single IP address to manage all features of the system Manageable through network management software on a per-port and per-switch

basis, providing a common management interface for routers and switches SNMP v1, v2, and v3 instrumentation, delivering comprehensive in-band

management Command-line interface (CLI)-based management console to provide detailed out-

of-band management Remote Monitoring (RMON) software agent to support four RMON groups (history,

statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis

Analysis support, including ingress port, egress port, and VLAN SPAN

Advanced Security

TACACS+ /RADIUS, which enable centralized control of the switch and restrict unauthorized users from altering the configuration.

Standard and extended ACLs on all ports. 802.1x user authentication. Router ACLs (RACLs) on all ports (no performance penalty). VLAN ACLs (VACLs). Private VLANs (PVLANs) on access and trunk ports. Dynamic Host Configuration Protocol (DHCP) snooping. Protection against Unicast, Multicast & Broadcast Storms on a per port basis. DHCP relay functionality should be provided. Layer 2-4 ACL on all ports. Support for port security to prevent unauthorized stations from accessing the

switch by restricting the number of MAC addresses allowed to access the port as well as by statically configuring the MAC address.

Support for IGMP and IGMP Snooping. MAC Address Based Security (802.1x). Radius Support..

Switch 2

Hardware Performance Required:

The Switch Should be stackable Switch should be 12 ports SFP based for 12 Ports of 1000 MBPS Fiber or 1000 Giga.


Switch should have a switching fabric backplane of minimum 32 Gbps for 12 ports switch respectively

Switch should support performance rating of 35 Million pps for 12 ports switch respectively.

It should be possible to have the VLAN configuration done centrally.

Layer 1 Feature:

Support for 100BASE-FX , 10/100 BASE-TX , 10/100/1000BASE-T , 1000BASE-SX,-LX full duplex

Layer 2 Features:

Minimum 256 VLANs should be supported Support for 4096 VLANs per switch Link Aggregation should be based on IEEE 802.3 ad. Minimum 4800 MAC Address support. 802.3x flow control 802.1P Prioritization and 802.1q VLAN Tagging support. 802.1D IEEE 802.1s, IEEE 802.1w. Jumbo Frame support. 802.1Q VLAN Trunking.

Layer 3 Features

Should support IP routing protocols Static, Routing Information Protocol [RIP], RIP2, BOOTP.

IGMP v1, v2, and v3 IGMP filtering on access and trunk ports IP multicast routing protocols: DVMRP, PIM Version 2 (Sparse Mode & Dense

Mode) Multicast Source Discovery Protocol (MSDP) Full Internet Control Message Protocol (ICMP) support ICMP Router Discovery Protocol

Traffic Management

Support for L2/L3/L4 Ingress Traffic Policing. Should support traffic policing with higher level of granularity with 64 Kbps traffic

flow for both Fast Ethernet and Gigabit Ethernet ports. Single console port and single IP address to manage all features of the system Manageable through network management software on a per-port and per-switch

basis, providing a common management interface for routers and switches SNMP v1, v2, and v3 instrumentation, delivering comprehensive in-band

management Command-line interface (CLI)-based management console to provide detailed out-

of-band management Remote Monitoring (RMON) software agent to support four RMON groups (history,

statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis

Analysis support, including ingress port, egress port, and VLAN SPAN


Advanced Security

TACACS+ /RADIUS, which enable centralized control of the switch and restrict unauthorized users from altering the configuration.

Standard and extended ACLs on all ports. 802.1x user authentication. Router ACLs (RACLs) on all ports (no performance penalty). VLAN ACLs (VACLs). Private VLANs (PVLANs) on access and trunk ports. Dynamic Host Configuration Protocol (DHCP) snooping. Protection against Unicast, Multicast & Broadcast Storms on a per port basis. DHCP relay functionality should be provided. Layer 2-4 ACL on all ports. Support for port security to prevent unauthorized stations from accessing the

switch by restricting the number of MAC addresses allowed to access the port as well as by statically configuring the MAC address.

Support for IGMP and IGMP Snooping. MAC Address Based Security (802.1x). Radius Support..

2. Edge Switch Specifications

1. Hardware configuration:24 auto-negotiating 10 BASE-T/100BASE-TX ports configured as Auto Sensing2 x Gigabit uplink ports (2x10/100/1000BASE-T uplink ports with inbuilt 2 x GBIC/SFP slots)2 x 10/100/1000 Mbps ports (minimum).

2.Multicasting:High-bandwidth video traffic is optimized so that it does not impact other applications on the network.

3.QoS:Smartports support to detect end devices connected to network & accordingly should configure QoS for different type traffic flow of connected device.

4.Performance:24-ports x 10/100 & 2 x 1000 BaseT /Sx16 Gbps switching capacity or maximum forwarding bandwidth6.5 million packets per second wire-speed forwarding rate4-Gbps duplex uplink performance8000 MAC address supported255 VLANs (in range of 1000)


4 queues per portShaped Round Robin (SRR) queuing

5. Environmental Requirement:Operating Temperature: -5ºC to +45ºC Operating Humidity: 30 to 75%. (non-condensing)

6. Safety Agency Certifications:Immunity:UL to UL 60950-1CUL to CAN/CSA C22.2 No. 60950-1TUV/GS to EN 60950-1CE MarkingCB to IEC 60950-1 with all country deviationsNOM

7. Power supply:AC line frequency 50/60 HzInput Voltage 100 to 240 VAC (auto-ranging), Power consumption 65 watts. 8. Standards:IEEE 802.1d Spanning Tree ProtocolIEEE 802.1p Class of service (CoS) classificationIEEE 802.1q VLANIEEE 802.1w Rapid Convergence Spanning Tree ProtocolIEEE 802.1x Port Access AuthenticationIEEE 802.3ad Link Aggregation Control Protocol (LACP)IEEE 802.3af Power over EthernetIEEE 802.3x full duplex on 10BASE-T, 100BASE-TX, and 1000BASE-T portsIEEE 802.3u 100BASE-TIEEE 802.3ab 1000BASE-TIEEE 802.3z 1000BASE-XIGMP (v1, v2, and v3) snoopingSecure Sockets Layer (SSL)SNMPv3

9. Management:GUI device Management SoftwareManagement using centralized network management softwareSNMP v3 compatibility

3 Firewall / UTM Specifications:Hardware Architecture -:

1. The appliance should have Multi-bus system Architecture


a Hardware platform must be 64 bit

2. The appliance should have Firewall, VPN, Full content and Services functionality

3. Should support unlimited Users/Nodes4. Content and Service license of 500 Users for 1 year minimum.

PERFORMACE SPECIFICATIONS -:

The TCP Firewall Throughput should be 1.8 Gbps & UDP 2.5 Gbps

b Must be based on Multicore Parallel Processing Architecture c 6 number of 10/100/1000 interface with Hardware Bypass d 15,000 number of new connection e 2.6 Gbps UDP Firewall throughput and 1.8Gbps TCP Firewall throughput f 850Mbps IPS throughput g 450Mpbs Antivirus throughput h 350Mpbs UTM throughput

1. Should support concurrent threat mitigation throughput (Firewall + Content and Service) Up to 375 Mbps with the help of additional hardware

2. Should Support 3DES/AES VPN Throughput up to 200 Mbps 3. Should Support upto 5,00,000 Concurrent Sessions

4. Should have 6 10/100/1000 integrated gigabit ports

5. Should support inbuilt support for IPSEC VPNs with DES/ 3DES and AES support

6. Should support atleast 4000 VLANS

7. Network Time Protocol (NTPv3) Client

8. Should have console port (RJ45/DB9), 2 USB Ports

Other Hardware Requirements

1. The device should support minimum of 6 10/100/1000 Gigabit interfaces

2. The firewall should have 1 Gb of DRAM

Software RequirementsThe firewall should support the following software features.


RIP Version 2 passive mode support Support for OSPF Support for LAN Based Failover Support for VLAN (802.1Q trunking) DHCP server The firewall should be RFC 1918 compatible with support for Static & Dynamic

Network Address Translation and also Port Address Translation Support for bi-directional NAT Split tunneling VPN support The firewall should support configurations through a command Line interface as

well as a GUI based Support for proxy Support for NAT-T (NAT Transparency) Support for fix-up (to support fix-up protocols like H.323, SIP, FTP etc)

Network Management1. Telnet client and server functionality support is must. 2. The firewall must support FTP or TFTP for easy software upgrades over the

network.3. Dedicated Out-of-Band Management Interface4. Network management services should be provided using standards based

protocols like SNMP & SNMP V2 . The following MIBs should be supported :

Should support SNMP, SNMP Trap, and Custom MIB, Syslog.

5. Real time alerting & notification features and Syslog support.

Fire walling features support include: Outbound ACLs Time-based ACLs Configuring NAT policy should not be required to pass traffic through the device. Option to pass traffic between interfaces with the same security level URL filtering performance enhancements

VPN Features support include -: Are You There (AYT) support for CSA TCP based NAT transparency VPN Hub, client-to-client routing; traffic u-turn on interface Support PPTP , L2TP, IPSEC, SSL VPN Support for Deffie Hellman Group, 1,2,5,14,15,16 OSPF routing and QoS over VPN tunnels IKE DoS safeguards (Aggressive Mode knob) Support for n-tiered X.509 certificate chaining Manual X.509 certificate enrollment (PKCS 10/7 support) 4096-bit RSA support

Authentication, Authorization and Accounting (AAA) Features:


Support multiple RADIUS accounting servers Accounting for management traffic - generates AAA accounting records for

management connections to the device. Native Window NT/Active Directory user authentication support (VPN only) Native SDI/RSA SecurID user authentication support (VPN only)

Content and Service features support includes -:

1. Should support Gateway level Antivirus, Antispam, Anttispyware, Webfitering, Mail filtering etc.

2. Should support Zero-Downtime Software Upgrades

Regulatory and Standards ComplianceSafety -:

UL 1950

Firewall , IPS , Content and Services features (Gateway Antivirus, Antispam, webfiltering) should be integrated on one appliance and should store database for webfiltering, IPS, Antivirus on box and should not query any third party or device.

5: Wireless Access Points

1. Frequency : 2.400-2.4835 GHZ ISM band2. Wireless operating range of atleast 70 meters indoor 3. AP should have integrated antenna.4. Security features including MAC address filtering through Wireless LAN, port

based authentication with RADIUS client5. Web based Network Management configuration6. Backward compatible with IEEE 802.11b7. Configurable to throughout of 54 Mbps/11 Mbps8. RF Technology : IEEE 802.11g + 802.11 i9. Should support Roaming when configured in Infrastructure of Extension basic set

service mode10. Operating Channels : 3 Non-overlapping channels and 10 overlapping channels11. Extension Port : 10/100Base T Ethernet12. Access Point must support Infrastructure as well as Extension basic service set

mode over Ethernet.13. Standard Bridging Capability14. 128, 64 and 0-bit WEP Encryption.15. MAC Filtering support for clients16. WPA security support17. Full driver support for leading Operating systems.18. Auto sensing and switching.19. Static as well as dynamic IP addressing20. Warranty: 3 years on-site warranty.


21. The Access Points should not interfere with each other hence configured at appropriate Channels

22. Roaming from one wireless cell to another in the building should be possible without making any changes.

23. The vendor shall provide all other equipment required to provide the integrated solution mentioned above.

24. The vendor shall also provide testing of the site over high load.25. All Radio devices must comply to FCC regulations.26. The Access Points must be configured with Power Over Ethernet.

(B) PASSIVE COPPER COMPONENTS SPECIFICATION Cabling System and Component Specifications

1. Outdoor Fiber optic Cable

Cable Type 6-core, Multi Mode, armored Loose-tube, Gel filled ComplianceFiber Type Multi Mode, 50 / 125 microns OM3No. of cores 6Armor Corrugated Steel Tape ArmorCable Construction Type

BELLCORE GR 20 / IEC 794-1

Attenuation@ 1300nm <=0.6 db/KM@850nm <=2.4 dB/KMTensile rating 1250NMaximum Crush Resistance

3000

Operating Temperature

-20 Degree C to +70 Degree C

3. SC Style Fiber Optic Pig Tails

Fiber Optic Patch cord LC/MTRJ/SC, MM ComplianceAttenuation <=0.3 dBReturn Loss >=20 dB3 UTP Cabling System

Type Unshielded twisted pair cabling system, Certificate by Intertek (ETL) for the 4-Connectors channel testing to the Cat 6 Cabling system as per the ANSI/TIA 568 C.2 & as well as the ISO 11801 standards up to 600 MHz.

Compliance

Networks 10 / 100 Ethernet, 155 Mbps ATM, 1000 Mbps


Supported IEEE 802.3ab Ethernet, and proposed Cat 6 Gigabit Ethernet

ApprovalsTIA / EIA 568-B.1 ETL Verified

IEEE 802.3ab Zero-bit Error, ETL verifiedWarranty 25-year systems warranty; Warranty to cover

Bandwidth of the specified and installed cabling system, and the installation costs

Performance characteristics to be provided along with bid

Attenuation, Pair-to-pair and PS NEXT, ELFEXT and PSELFEXT, Return Loss, ACR and PS ACR for 4-connector channel

1. UTP Cable

Type Unshielded Twisted Pair, Category 6, TIA / EIA 568-C.2 & ISO/IEC 11801

Compliance

Material:Conductors 23 AWG solid bare copperInsulation PolyethyleneSeperator Cross-member (+) fluted Spline.Jacket Flame Retardant PVC Approvals UL Listed

ETL verified to TIA / EIA Cat 6Operating temperature

-20 Deg. C to +60 Deg. C

Frequency tested up to

600 MHz

Packing Box of 305 metersDelay Skew 45ns MAXImpedance 100 Ohms + / - 15 ohms, 1 to 600 MHz.Performance characteristics to be provided along with bid

Attenuation, Pair-to-pair and PS NEXT, ELFEXT and PSELFEXT, Return Loss, ACR and PS ACR

ROHS Compliant ROHS/ELV Compliant 2. UTP JACKS

Type PCB based, Unshielded Twisted Pair, Category 6, TIA /EIA 568-C.2 and ISO/IEC 11801 Compliance

Modular Jack 750 mating cycles Wire terminal 200 termination cycles Accessories Integrated bend-limiting strain-relief unit for

cable entry


Integrated hinged dust cover Support cable pair termination process on the jacks at 90 degree angle.Bidder should have a mechanism to maintain the quality of the termination ir-respective of the skill level of the termination staff.

Housing Polyphenylene oxide, 94V-0 rated.110 Blocks polycarbonate, 94V-0 ratedJack contacts Beryllium copper, plated with 1.27 mm

[.000050] thick gold in localized area and 3.81 mm [.000150] minimum thick tin-lead in solder area over 1.27 mm [.000050] minimum thick nickel under plate

Wiring blocks Polycarbonate, 94V-0 rated

Approvals (a) UL Listed / CSA Approved (b) ETL verified to TIA / EIA Cat 6 Performance Characteristics to be provided with bid

Attenuation, NEXT, PS NEXT, FEXT and Return Loss

ROHS Compliant ROHS/ELV Compliant

3. UTP JACK PANEL

Type 24-port, Modular, PCB based, Unshielded Twisted Pair, Category 6, TIA / EIA 568-C.2 and ISO/IEC 11801 Compliance

Ports 24 Port arrangement Configured as 6 Port Module with individually

replaceable CAT-6 JacksCircuit Identification

Front of each module shall be capable of accepting 9 mm to 12 mm labels

Port Identification

9mm or 12mm Labels on each of 24-ports (to be included in supply

Modular Jack 750 mating cycles Wire terminal 200 termination cycles Accessories Integrated bend-limiting strain-relief unit for

cable entry Materials

Housing Polyphenylene oxide, 94V-0 ratedWiring blocks Polycarbonate, 94V-0 ratedJack contacts Beryllium copper, plated with 1.27 mm

[.000050] thick gold in localized area and 3.81


mm [.000150] minimum thick tin-lead in solder area over 1.27 mm [.000050] minimum thick nickel under plate

Panel Black, powder coated steelApprovals UL listed / ETL Verified Termination Pattern TIA / EIA 568 A and B;


4. PATCH CORD

Type Unshielded Twisted Pair, Category 6, TIA / EIA 568-C.2 & ISO/IEC 11801 Compliance

Conductor 24 AWG 7 / 32, stranded copper conductors 100 Ohm

Length 4 feet, 7 feet, 10 feet Plug Protection

Transparent Slim boot Warranty 25-year component Insulation Flame Retardant Polyethylene


5. FACE PLATE

Type Single Gang ComplianceMaterial ABS / UL 94 V-0 No. of ports One/Two


NOTE:1. The all passive components quoted should be of one make and compatible with each

other and the active components so that the required certification can be provided with the OEM.

2. All the components in the CAT-6 system should be verified from ETL/UL (Third party) for the system performance.

Cabling Installation, Acceptance, Warranty and Documentation Specifications:

Please confirm Compliance for complete set of Implementation Specifications. By


writing “Yes” it will be assumed that the bidder confirms compliance with all the clauses and guidelines given here, unless deviations has been sought in writing against each/any guideline.

5.TECHNICAL TERMS & CONDITIONS & SPECIFICATIONS

Terms and Conditions

a) Performance of the on-site assembly, commissioning and startup of the equipment. Including the following:i. Installation, configuration and Satisfactory Customization of the parameters of

the Layer3 Core Switch including the cost for the configuration and customization of the layer 3 Module or the Policy Module (where applicable);

ii. Installation, Configuration and Satisfactory Customization of the parameters of the Layer 2 Access Switches.

iii. Installation, Configuration and Satisfactory Customization of the parameters of the Firewall and other security products as per defined policies;

b) Furnishing the detailed operation and maintenance manuals for each item of supply;

c) The equipment offered for supply must be of the most recent series models incorporating the latest improvements in design the models should have been released on or after 2009.All make latest not at the end of life(obsolete) and be in satisfactory operations for minimum 6 months as on date of bid opening.

d) All the type of Switches (Core, Distribution and Edge), Firewall, Wirelless access points should be of the same make/brand.

e) Training of the Purchaser’s personal at the purchaser’s site in the installation and operation of the hardware, utilities and all contracted software

f) Maintenance and repair of the equipment at each location during the warranty period including supply of all spares. This shall not relieve the supplier of any warranty obligations under this contract.

g) On-site assembly, commissioning of the network.

h) Critical Equipment and spares should be maintained at BPSMV or at vendor’s local office to ensure immediate rectification of critical failures.

i) After complete system installation, vendor should arrange for softcopy of all configurations of all the equipments deployed by the vendor.

j) Furnishing the documents with following details after successful implementation of the structured Cabling System to be provided in both hard copy and soft copy in CD-ROM in standard format;1 Detailed connectivity diagram;2 Raceway/pathway diagram;


3 Cable and Fiber patching details;4 Naming and labeling details;5 Cable scanning and test results.

NOTE:

1 All passive components quantities shown in the bid document are indicative and hence may vary as per actual requirements. The vendor will assess the exact distances for OFC and UTP cabling involved at the time of site survey before the submission of their bids. The final payment for cabling will made in accordance with their financial bids, hence vendors must quote for actual quantities of UTP and OFC cabling requirements in their bids.

2 The vendor will configure the Layer 3 switches to provide isolation between different departments / sections based on VLAN technology.

TECHNICAL SPECIFICATIONSGeneral Scope of Work

1 Suitable solution to the campus wide network should be quoted.2 Supply, Install the Network Switches, firewall etc., and associated equipments as

per the solution3 Supply, Install the cabling components and associated equipments as per the

solution4 Test connectivity end-to-end and commission the system for proper connectivity as

a part of QA/QC and UAT procedures documentation of the system installed and commissioned.

Provide the details of the VLAN and security policy to be implemented, and its implementation.

Objectives:

The new network should be reliable, scalable, robust, and manageable with a futuristic scope of expansion.

Functional Requirements:1. The network should continually add capacity in terms of users and bandwidth

without any fundamental change in the architecture.2. The network by no means should disrupt the previous operational network except

for addition of users.3. The network should handle changes without disrupting the user environment.4. It should cater to hi-end design applications and for future educational engineering

institute.5. The network should have absolute security in terms of Internet, Wireless accesses

and Intranet.


Installation Specifications

Cables should be ducted and directly buried at a minimum depth of 1m above a bed of sand. The cable shall be covered by semi-circular concrete shells/bricks. Soil shall be filled up to a height of 250mm above the cable and covered with warning tape. The remaining height of the trench shall be filled back with extracted material from the trench. Cable bend radius should be as per the norms and cable markers should be provided every 100 meters or at bends which ever is less. In addition, each cable type shall be terminated as indicated below:

1 Cables shall be laid and terminated in accordance with the recommendations made in the TIA/EIA document, manufacturer’s recommendations and/or best industry practices.

2 Removal of Armored core at the termination enclosure/ shelf should not be more than the required length for terminations of Fiber cores.

3 Bend radius of the cable in the termination area shall not be less than 20 times the outside diameter of the cable.

4 Buffer Tubing should be used before the terminations or splicing at the enclosure end.

5 Cables shall be neatly clamped on the walls near the terminations boxes or shelves in the racks.

6 Each cable shall be clearly labeled at the enclosure end. Cables labeled within the shelf or wall mount enclosures, where the label is obscured from view shall not be acceptable.

7 Additional OFC of atleast 3m of length should be left at the enclosure end on both sides for future shifting of Rack/Wall enclosures.

8 It will be the responsibility of the vendor to take necessary permissions for Road digging and the roads should be concreted after the cabling has been done. It is advisable to carry the digging work during night hours.

Documentation SpecificationsPlease Confirm ComplianceYes / No

The successful bidder shall after completion of the installation, submit a detailed documentation of the cable plant. The documentation shall cover, in the minimum, the following

1 As-built diagrams of the campus Network, with building and floor wise distribution of users and connectivity

2 Test results for UTP links3 Consolidated BOM with manufacturer’s part Nos. and quantities used

Warranty certificate from OEM supplier


Warranty Specifications:

Please Confirm ComplianceYes / NoBPSMV Haryana, seeks warranty for the installed cable plant from the OEM equipment supplier. Bidder shall ensure that the OEM norms for supply, installation, testing and documentation as specified by the OEM supplier shall be adhered to, provided those are in line with TIA / EIA standards and BPSMV, Haryana, requirement AND specifications. The warranty shall be provided by the OEM vendor to BPSMV, Haryana and shall not be administered in India for the authenticity of the process. It should be evaluated by an independent center which can’t be influenced by the in country people. The duration of the warranty shall be for a minimum of 20 years for the passive components, 03 years for the active components and shall cover the system performance, application assurance. A sample warranty certificate shall be provided by the bidder along with the bid.

SECTION - IV

1. General Terms and Conditions

1.1 The prices should be FOR Bhagat Phool Singh Mahila Visjhwavidalya ,Khanpur Kalan Sonepat,Hayana.

1.2 The BPSMV will provide D certificate. The rate of applicable sales tax, octroi etc should be clearly mentioned. However, BPSMV is entitled to issue educational concession tax certificate also.

1.3 The BPSMV will not pay any advance. The payment terms should be mentioned clearly.

1.4 Warranty for each item in the system should be at least for 3 years from the date of commissioning.

1.5 The selected vendor will be required to furnish bank guarantee for 10% value of total order for a period of 3 years after installation and commissioning.

1.6 The BPSMV have if any problem in the network systems problem must be rectified with in 24 hours after submission of the complaint.

1.7 The validity of offer should be at least 60 days after opening the technical bid.1.8 The order must be executed within the stipulated period. In case the vender is not

able to bring the material within the stipulated period, and not install it successfully in the stipulated period a penalty @ 2% of the total fixed cost of the equipment will be levied on the vender.

1.9 Performance Security in the shape of bank guarantee should remain valid for a period of sixty days beyond the date of completion of all contractual obligations of the supplier including warranty obligations.

1.10Situations in which bid security will stand forfeited i.e. if a bidder withdraws its bid during the period of bid validity specified by bidder on the bid form, and in the case of successful bidder, if the bidder fails to sign the contract in accordance with clause of tender or fails to furnish performance security in accordance with the tender.

1.11The Resultant contract will be interpreted under Indian laws.1.12Prices should be quoted in Indian Rupees.


1.13All the pages of the bid, except for printing literature shall be initialed by the person or persons signing the bid. Any erasures or overwriting shall be valid only if they are initiated by the person or persons signing the bid.

1.14Payment termsThe payment will be released as per the following: 50% on successful delivery and physical inspection, 40% on successful installation and acceptance and 10% against Bank Guarantee of equivalent amount for warranty period.


BPSMU LAN/WAN INTERFACE

LAN

Or multiple interface Firewall with VLAN

DNS ACAD WEB MAIL WEB

SWITCH

Global Pool in DMZ

PROXY

INTERNET

ROUTER

CORESWITCH

FIREWALL

PROXY

ANNEXURE I

Date post:	24-Mar-2019
Category:	Documents
Upload:	trannga
View:	213 times
Download:	0 times