NETWORK INFRASTRUCTURE REBUILD · Network Infrastructure Rebuild ! !! Version:!!2.1!...

NETWORK INFRASTRUCTURE REBUILD

PROPOSAL WILLIAMSON COUNTY

December 1, 2015

Williamson County 1003115001370Pro-1 11/03/2015 Network Infrastructure Rebuild

Version: 2.1 Confidential and Proprietary Page 1 of 35

Proposal Team

Name Company/Function Phone Email

Steve Jones Presidio 512-750-7158 [email protected]

Brett Marlier Presidio 512-818-0010 [email protected]

Eric Bursley Presidio 512-795-7127 [email protected]

Thomas Lansdell Presidio 512-795-7132 [email protected]

Nicole Tam Cisco Systems 512-378-6065 [email protected]

David Gierke Cisco Systems 210-787-9852 [email protected]

Richard Semple Williamson County 512-943-1489 [email protected]

Rory Tierney Williamson County 512-943-1457 [email protected]

Jay Schade Williamson County 512-943-1460 [email protected]

Revision History

Revision Revision Date

Name Notes

2.1 11/03/2015 Brett Marlier Submitted to Customer

Notices:

© 2014 Presidio Networked Solutions Group, LLC. All Rights Reserved. This document and its contents are the confidential and proprietary intellectual property of Presidio Networked Solutions Group, LLC and may not be duplicated, redistributed or displayed to any third party without the express written consent of Presidio Networked Solutions Group, LLC.

Other product and company names mentioned herein may be the trademarks of their respective owners.



Contents

1. Executive Overview .................................................................................................................. 4

1.1. Introduction ........................................................................................................................ 4

1.2. Situation ............................................................................................................................. 4

1.3. Client Considerations ......................................................................................................... 4

1.4. Solution Overview .............................................................................................................. 4

1.5. Project and Deployment Strategy .................................................................................... 15

1.6. Impact .............................................................................................................................. 15

2. STRATEGIC ENGAGEMENT FRAMEWORK ........................................................................ 16

2.1. Teaming ........................................................................................................................... 16

2.2. Envisioning Phase ............................................................................................................ 17

2.3. Proposal Phase ................................................................................................................ 17

2.4. Systems Engineering and Planning Phase ...................................................................... 17

2.5. Execution Phase .............................................................................................................. 18

2.6. Managed IT/Opex ............................................................................................................ 18

3. SYSTEMS ENGINEERING AND PLANNING PHASE ........................................................... 19

3.1. Introduction ...................................................................................................................... 19

3.2. Systems Engineering and Planning Phase Scope of Work ............................................. 20

3.3. Systems Engineering and Planning Phase Deliverables ................................................. 25

4. EXECUTION PHASE .............................................................................................................. 26

4.1. Introduction ...................................................................................................................... 26

4.2. Execution Phase Preliminary Scope of Work ................................................................... 26

4.3. Execution Phase Deliverables ......................................................................................... 28

4.4. Change Management Process ......................................................................................... 28

5. Assumptions ........................................................................................................................... 29

6. Pricing ..................................................................................................................................... 31

7. Terms and Conditions ............................................................................................................. 33

8. Authorization to Proceed ........................................................................................................ 34



9. Attachments ............................................................................................................................ 35



1. EXECUTIVE OVERVIEW

1.1. Introduction Presidio Networked Solutions Group, LLC, a wholly owned subsidiary of Presidio Networked Solutions, Inc. (“Presidio”) is pleased to propose the following solution to Williamson County. This Proposal summarizes the results of the Envisioning and Proposal Phases and details the efforts and conclusions of the Vision and Proposal Teams. This document provides a roadmap for the proposed solution and a foundation for the Systems Engineering and Planning Phase.

1.2. Situation Williamson County (WilCo) IT initially asked Presidio and Cisco to perform a network assessment that encompassed the entire infrastructure. The assessment quickly uncovered huge network configuration issues as the simple act of device discovery kicked off a storm of network broadcasts, ARP table overruns and servers going offline due to these overruns. Presidio and Cisco discovered that the County networks and server farms were constructed with few considerations made to Cisco best practices and none to the very basic of networking RFC’s that govern today’s modern infrastructures.

1.3. Client Considerations Because of limited capacity and the complexity of upgrading the existing network in several offices it is important to Williamson County that the solution is in place and fully functional by the end of this year. Two new locations are scheduled to open late this year and will need to be prioritized and closely coordinated with the Williamson County new site project manager.

1.4. Solution Overview Initial discussions with WilCo IT team revealed that the County technology infrastructure appeared to be built in a somewhat ad hoc manner with little adherence to industry best practices. Even so, the County does appear to have the basis of what could be a premier IT operation given the desires of the staff and some of the raw materials at the staff’s disposal. The discussions below are designed to highlight what can be done with what the County has and where Presidio feels the County should move.

The County supplied the Networking Infrastructure map shown below. All subsequent discussions leverage that map as the starting point.



Initial discussions with WilCo highlighted the overriding need for a clear understanding of the underlying physical infrastructure of the County around fiber, radio and copper. Such an understanding is of paramount importance as any overlaying networking technology depends 100% on the understanding and health of each medium.

The new network will be treated as a “Greenfield Installation” meaning that all installs will happen in parallel to the current network. Doing so will vastly reduce risk and eliminate the need to analyze the current network setup.

1.4.1. County Fiber Infrastructure Presidio Cabling will work with Williamson County in developing a full full fiber mapping of the County’s fiber network. Presidio engineering will use that map tin developing a fiber patching map. Verification will include:

1.4.2. County Radio Infrastructure Presidio will work with the County IT staff members in identifying and documenting the current configuration of the radio network. The radio network will be relegated as an alternative path network, however, a deeper understanding of the operation will have to be developed.

1.4.3. Services Clocking Presidio will work with the County IT staff in identifying how the current network and system clocks are derived. Presidio will then develop a “clocking” plan that is based on



industry best practices and execute on that plan. Presidio will work with the County to determine the best solution for the County. Presidio offers three main methods for deploying NTP, in preferred order:

1. GPS – Available to anyone with a clear view of the sky. The caveat to this method is that not all locations can mount a receiver in a place that can receive a signal. The method requires acquiring special NTP hardware appliances

2. Radio – The NIST broadcasts via radio over long distances time information in the WWVB format. One consideration to this method is that the signal may not be able to be received in all geographic locations due to the local topography. As with method #1, #2 requires specialized hardware appliances.

3. Internet Server – By far the most widely used method with a large number of timeservers available on the Internet. The caveat to using this method is that it requires opening the NTP service (UDP 123) through firewalls to the outside. This generally does not require specialized hardware acquisitions; however, hardware should be dedicated to provide an internal reference clock (stratum 1). This method requires careful planning and deployment due to clock stratum issues.

The new NTP architecture will be built in a hierarchical fashion. The Hierarchical design is the preferred design as it provides consistency, stability, and scalability. The diagram below provides an idealized depiction of a hierchical design and the Presidio and County team will design such an architecture:

NTP.org is an excellent source for reference equipment as well as a full discussion of NTP itself.

(http://support.ntp.org/bin/view/Support/VendorLinks)



VLANs and IP Addressing Presidio will work with the County in developing a complete re-architecture of the County’s VLAN and IP addressing scheme, leveraging well documented best practices and Presidio/Cisco expertise. Fortunately, the County’s DHCP scopes appear to have been somewhat constrained, meaning that the re-allocation of subnets could be as simple as a mask reduction for each site.

Presidio will build a VLAN and IP Subnet plan that will grow as the County’s demands grow. For example, Presidio VLAN planning accommodates Voice and Video VLANs even where such VLANs are currently not needed, in anticipation of future needs.

DNS/DHCP Presidio will work with the County in developing a deployment strategy that follows industry best practices for establishing both DNS and DHCP services. Cisco and Microsoft have both published complete guides that cover concepts as well as practical implementations. The original DNS standards documents, or RFC’s, are defined in RFC 882 and RFC 883. These RFCs were made obsolete by RFC 1034 and RFC 1035 and have been updated by multiple RFCs over the years.

It should be noted that Microsoft’s implementations of both DNS and DHCP can and should be used for all equipment – Network, Linux, Windows, Workstations, Servers, etc. There is absolutely no reason to purchase a separate product just to manage the static IP addresses of networking equipment (as many people do) or install a Linux-based BIND server just to manage Linux systems. The Microsoft versions of both DNS and DHCP will handle any and all IP end clients regardless of type.

Network Security The County has expressed an interest in looking at two areas of network security:

1. Access control for adminstrators gaining access to the network resources.

2. Network Access Control (NAC) for client access to the network

Presidio will engage the County IT staff in a Planning effort that establishes a blueprint for both efforts, and establishes an Execution plan for #1. Ideally the same solution will be able to address both needs.

1.4.4. Network Infrastructure The map below is a re-worked version of the original map presented above. The section map gives an overall look of the new infrastructure and provides a view into what the network might transform into as a whole.



The Justice Center (pictured below) depicts a representative transformation of the premise network by following the best practice of building a hierarchical network. The hierarchical network guarantees that changes within a particular layer will not adversely effect the operation of another layer. These layers are represented below via the numbered indicators:

1. Creation of a Core/Distribution/MAN boundary as a pair of Cisco Catalyst 10g switches. These switches act as a Layer 3 termination point for the Metro Area Network as well as providing an aggregation point for access layer switches.

2. A Datacenter network that ties into #1 via Layer3 and therefore protects server/storage/application assets from more widespread network activity (such as broadcast storms).

3. Access layer switching built as a stack of workgroup switches. Stacked switches act as a single switch, thus reducing network complexity, switch hop counts, etc. The Acces Layer will be addressed at a later time.

Such is the pattern that is repeated for most County buildings located on the MAN.



1.4.5. Metropolitan Area Network (MAN) Presidio will work with the County in re-building the Metropolitan Area Network (MAN), utilizing the County extensive fiber infrastructure. Ideally, one strives to achieve what is known as a “Distributed Star” topology that establishes hierarchical connectivity across the entire Metro network and builds on a single “Core” network component (see below). The “Star” concept can be further augmented by interconnecting the Distribution nodes, thus creating a ring topology with a Distributed Core design. In reality the operation of true ring is dependent upon the Layer 3 overlay and can offer more resiliency than the distributed star.



The drawing below is a breakout of just those buildings that will be part of the County’s new, large, fiber-based Metro Network. Assumptions are made with respect to building-to-building connectivity and will be updated after the fiber mapping activity is completed. The proposed backbone will be 10g Ethernet where the fiber supports 10g and the Core devices will be Cisco Catalyst switches designed to handle line-rate 10g Ethernet. High value buildings (to be determined, but possibly Sheriff, Justice, Annex, Juvenile, and ESOC) would have redundant Cores that would be dual connected to the other cores. The two identified Primary centers (Justice and ESOC) would also complete a separate connection that would tie the two datacenters together and provide an alternate path should the primary path fail.



1.4.6. Wide Area Network (WAN) The current County Wide Area Network is based around a proprietary point-to-point radio network that nominally provides 50mb of bandwidth to each site. The network is private and therefore not subject to encryption requirements. The radio network has served the County well, however, supportability is in question as very little is known about the hardware or the setup. There have been additional issues with respect to performance in that end users have complained about unpredictable response times. The County had already started talking to Time Warner regarding moving the current WAN to the TW Ethernet Local Area Network (ELAN) offering, however those conversations were in the preliminary stages.

The WAN recommendations are basically broken into two parts:

1. The actual transport technology.

2. The WAN overlay Technology.

All WAN recommendations are designed to scale as the County’s demands scale. Presidio is recommending router platforms that can be immediately leveraged for future services with no required upgrade. Some of those services are:

1. Voice Over IP support;

2. Quality of Service support, to be used to “guide” high and low priority traffic across the most appropriate link;



Transport Presidio will assist the County identifying the most appropriate WAN transport options. There are basically two options that we can leverage: a Layer2 option or a Layer3 option. The choice will likely come down to balancing cost against features, as well as the service area.

The existing radio links will be used as alternate paths and the actual utilization will depend on the robustness of the radio network and the choice of applications that will flow across the radio links as a primary path. The new carrier-based WAN will provide primary connectivity and backup connectivity by the current radio network.

WAN Overlay Presidio will implement a fully routed Wide Area Network (WAN) utilizing Cisco’s newest 4k Integrated Services Router (4kISR). The 4kISR line of routers are a departure from past router platforms in that the 4k’s follow the modular nature of the hardware and software found on the higher end ASR routers. The 4kISR’s utilize common multi-core CPU architectures and compartmentalize router functions such that each model is able to achieve its advertised throughput even with all services enabled. As an example, the 4kISR can be deployed as a simple edge router at first, and later have firewall services, voice services, etc. added and throughput will stay exactly the same. Thus, investment costs are preserved and longevity secured.

Note that there is an exception: We recommend employing Cisco’s largest ISR platform at the two sites marked PRIMARY DC in the drawing below. The two ISR’s will be outfitted with Cisco’s UCS Server blade on which will run Cisco’s CSR – a virtual version of the Cisco ASR platform. The CSR will serve as the central intelligence for the new County WAN.

The overlay used will depend on the services provided by the chosen carrier. The County requires that all carrier-borne WAN traffic be encrypted, therefore the most obvious choices are either DMVPN for a Layer3 service or GETVPN for a Layer2 service, thus the decision as to which will be made during Planning.



The end result will be a fully meshed WAN (DMVPN allows for the dynamic nature of site to site communications) that can actively steer traffic based upon predefined Application rules (i.e., “I want my VOIP traffic to go over the high cost circuit but Internet traffic over the radio circuit”) or that can react to carrier outages, etc.



1.4.7. Internet Internet connectivity will be re-architected such that the County have a connections from Suddenlink in the Jail and the Juvenile Center. The Internet connections will be terminated into Cisco ISR4451 routers and connect to existing County SonicWall firewalls (to be setup by County staff). Connections will then be made to the new County MAN and Internet access will be balanced between the two Internet PoPs. Failover between the two PoPs will be configured to occur automatically and transparently.



1.5. Project and Deployment Strategy The Execution Phase will occur over several weeks and will be performed in logical milestones. Planning for both the MAN and WAN will be performed at the same time, after which the two efforts will be managed as separate projects with their own milestones. It is anticipated that the fiber routes will be available first and therefore the MAN built out first. If at all possible, the new MAN will be built parallel to the existing connections and a graceful cutover be performed.

The WAN schedule will likely be built around the carriers schedule, but each circuit will be brought into the new ISR router, the new circuit connected and the primary link established. The radio link will then be trasitioned over.

1.6. Impact This project is recommended as a means of achieving critical organizational goals and objectives at WilCo. The investment in the proposed solution will help to consolidate and reduce costs while increasing reliability and improving customer and employee satisfaction. Improved efficiencies in workflow, increased collaboration and stable / always-on information platforms will help WilCo become more efficient and reduce current reoccurring communications expenditures.



2. STRATEGIC ENGAGEMENT FRAMEWORK

Presidio’s Strategic Engagement Framework (SEF) is used to ensure better business results with minimal risk. To accomplish this, initiatives are broken down into activities, tasks and deliverables in a series of phases that start with aligning needs of the Client with the capabilities of the technology and evaluating the impact to the organization (Envisioning). Once Vision consensus is achieved the solution is refined and proposed (Proposal). Capabilities of solutions are then further mapped into the technical and user environments and a detailed design and project plan is developed (Systems Engineering and Planning). With a clear understanding of business impact, risks and rewards, and with a comprehensive design and plan in place the solution is implemented (Execution). Once the solution is in place it is important to ensure a qualified, efficient, and timely support structure is in place to maintain optimal operating conditions and that the solution continues to add value over time (Managed IT/Opex). These phases combine to form the SEF. By partnering with Williamson County and focusing on envisioning and planning, Presidio is able to confidently execute a Williamson County- focused business technology solution and significantly reduce financial/organizational risk.

The following is a high level diagram of Presidio’s Strategic Engagement Framework:

2.1. Teaming To create the best possible business outcome with the lowest exposure to risk, SEF relies upon a collaborative approach during each phase of the project lifecycle. Both Williamson County and Presidio will have individual and joint tasks and responsibilities. Teaming also may incorporate third party representation when appropriate.



Each team is comprised of subject matter experts that come together in a synergistic fashion to the benefit of Williamson County. Presidio typically leads the team as a subject matter expert in technology, while Williamson County is obviously the expert in matters that pertain to your own business and industry, as well as the way that technology is used to the benefit of the business.

2.2. Envisioning Phase The goal of the Envisioning Phase is to align technology with business needs. The Vision Team is created to facilitate this process. Understanding business needs extends far beyond the function of a proposed technology into an awareness of the environment, type of industry, strategic objectives and tactical challenges of the organization. Determination of a possible solution’s value to the organization is made quickly. If a potential technology application does not add positive impact, valuable time and resources are not wasted pursuing it. Envisioning is critical to the success and impact of a project. The Project Vision is the main Vision Team deliverable, and is used to document the work done in the Envisioning Phase. Once Vision Consensus is achieved the next step is to move forward to the Proposal Phase.

2.3. Proposal Phase The goal of the Proposal Phase is to refine and formalize the Project Vision in a proposal. The Proposal Team is created to facilitate this process. The Proposal incorporates the work done during the Envisioning Phase and includes a quote for the Systems Engineering and Planning Phase, key assumptions, and project terms and conditions. A budget estimate for the Execution Phase and a preliminary bill of materials may also be included. While the Execution Phase is a budget estimate, Presidio provides assurance that any remaining uncertainty will be eliminated during the Systems Engineering and Planning Phase.

2.4. Systems Engineering and Planning Phase The goal of the Systems Engineering and Planning Phase is to assess and mitigate risk by documenting the project plan and creating a detailed design that considers all known issues that pertain to the technology solution, the client’s business and the end users. The Systems Engineering and Planning Phase work incorporates both industry and vendor best practices as well as previous Presidio real world execution experience. This work is centered on the discovery of the existing environment and integrating the solution into that environment. The Systems Engineering and Planning team creates the following Systems Engineering and Planning Phase documents and deliverables: Systems Engineering Report, detailed project scope and schedule, final bill of materials, and final services agreement to execute the solution. The work done in the Systems Engineering and Planning Phase significantly lowers risk by addressing all open issues and finalizing the fixed scope and budget before execution.

As your technology consultant, Presidio is committed to protecting your business’s daily operations and maximizing the availability of your business-critical systems. We recognize that our clients’ networks and systems have become crucial to their daily operations and strategic goals. It is our practice to take full advantage of the resiliency and survivability functionality provided in the products we sell and deploy. We have developed our “Resiliency-Test-Assurance” (“RTA”) methodology to help us deliver on this commitment.



This methodology starts at the Systems Engineering & Planning Phase and follows through the Execution Phase to final test and cutover of these important resiliency features.

2.5. Execution Phase The goal of the Execution Phase is to perform the scope of work developed and finalized in the Systems Engineering and Planning Phase. This is the phase where the actual deployment of the solution takes place.

2.6. Managed IT/Opex The goal of this phase is to ensure a qualified, efficient, and timely support structure is in place to maintain optimal operating conditions. To Presidio, success is not simply the installation and integration of technology for our clients. We help our clients plan and validate a strategy to ensure the long term operational viability of every solution we deploy. Presidio will work with Williamson County to identify the appropriate resources, knowledge and tools required to support the solution long term. We will also develop a transition plan to provide a “warm” handoff to the appropriate team once the solution is fully tested and operational. The Operations Plan will be finalized during the Operational Readiness Workshop and be delivered as part of the Systems Engineering Report.



3. SYSTEMS ENGINEERING AND PLANNING PHASE

The following is a detailed diagram of the Systems Engineering and Planning Phase of Presidio’s Strategic Engagement Framework:

3.1. Introduction The Systems Engineering Planning Phase is the detailed planning and design that incorporates discovery, analysis, and knowledge transfer. The results of this phase are detailed design recommendations and a specific project plan. Detailed planning is necessary to ensure that the proposed solution will meet project requirements and help to reduce risk of an unsuccessful or unexpectedly expensive Execution Phase. The Systems Engineering and Planning Phase documents are the technical and operational foundation for a successful execution.

Presidio relies on client involvement during this phase and incorporates Williamson County representatives as part of the project Systems Engineering and Planning Team. This is done to ensure that all decisions being made are sensitive to client input and needs. Key Presidio team members will be assigned during the planning phase and will include the following:



3.1.1. Project Manager Presidio will provide a Project Manager (PM) who is familiar with the technology involved and experienced in project management best practice methodologies. Responsibilities will include:

• Work with Williamson County and Presidio project personnel to prioritize and plan the activities for the duration of the engagement. Establish lines of communication and frequency of reporting.

• Review and communicate the status of the project with periodic status reports and/or conference calls that highlight performance on planned tasks, as well as any issues or other areas requiring attention by Presidio and/or Williamson County.

• Monitor quality on the project and establishing effective communications with Williamson County staff, while maintaining focused, high-quality effort through project completion.

• Create an implementation schedule with all necessary tasks and associated timelines.

• Attend any appropriate Project Systems Engineering and Planning Phase Workshops that require PM participation and associated follow-up (Action Items, Resource Planning, etc.)

3.1.2. Engineering Personnel Presidio will assign a lead senior consulting and systems architect who will lead this project from a technology and design perspective. This engineer will be responsible for the engineering document(s) during the Systems Engineering and Planning Phase and will work closely with Williamson County technical lead to ensure the design, configurations, equipment specifications, and methodology are accurate and in line with the overall project goals. This consulting engineer will also consider and make recommendations to ensure that the specifics of this project are in line with the greater system wide architecture and technology goals of Williamson County.

3.2. Systems Engineering and Planning Phase Scope of Work

3.2.1. Systems Engineering and Planning Phase Tasks The following Systems Engineering and Planning Phase tasks will be performed during this phase:

• Systems Engineering and Planning Team Organized • Project Kickoff Meeting • Systems Engineering and Planning and Systems Engineering Tasks • Project Systems Engineering and Planning Workshops • Systems Engineering and Planning Documents Creation and Review • Final Systems Engineering and Planning Documents Delivered



3.2.2. Systems Engineering and Planning Phase Elements The following elements will be identified, reviewed and/or defined in the Systems Engineering and Planning Phase:

3.2.2.1. Site Information

• Sites Included As Part of This Project (denotes special attention) o MAN

§ Juvenile § Justice Center § Inner Loop Annex § Courthouse § ESOC § Central Maintenance

o WAN § Jail § Juvenile § Central Maintenance § ESOC (possibly) § Cedar Park Annex § Texas Avenue § Round Rock Annex § Jester Annex § Hutto Annex § Taylor Annex § Expo Center § Parks § Radio Shop § Gun Range

o Internet § Jail § Juvenile

3.2.2.2. Data Network (MAN/Core/Distribution, Datacenter)

• High Level Topology Description with Diagrams • Equipment List, IP Addressing, IOS Revisions, and Feature Sets • Security Considerations • Network Device-level Security

§ Planning for TACACS+ • Support for up to two (2) roles (Level 1 and 15) • AD integration.



• Planning for future NAC deployment, devliverables to be: § Node counts and licensing § ISE hardware infrastructure scale § Support of edge devices for 802.1x COA § User directory support § Determine ISE features desired for future planning engagement when the

County is ready to deploy NAC. (the Planning here will be incorporated into the future Planning engagement).

• Routing Protocol Security • Control Plane Policing • SNMP • Spanning Tree • VLANs/VTP • IP Services (DHCP, DNS and NTP) • MAN Considerations • MAN Topology (4500X) • DC Considerations

§ Legacy server switches plug into the 4500X § WilCo will migrate servers

• DC Topology (9372’s w/ FEX) • Interior Gateway Protocol(s) • High Availability • Growth Systems Engineering and Planning • Other Considerations

3.2.2.3. Data Network (WAN)

• WAN Considerations (iWAN vs GETVPN) § All WAN traffic is to be encrypted

• Site connections § Radio with ELAN

• Jail • Central Maintenance (maybe migrated to ESOC) • Cedar Park Annex • Texas Avenue • Round Rock Annex • Jester Annex • Hutto Annex • Taylor Annex • Expo Center



• Gun Range § Radio Only

• Parks • Radio Shop (temp) • Lott Center (temp)

• WAN Topology • WAN Routing Protocols – preferential paths based on applications, latency,

traffic type. • Development of a Primary Building MAN site template for use by the County

when adding a new building as a primary MAN backbone participant. Tempate will include equipment and configuration necessary to setup a Primary MAN site.

§ Cisco 4500X VSS pair § Routing requirements § etc

• Development of a Secondary Building MAN site template for the County to use when setting up new building that will sit on the MAN but which will not participate in the core routing. Example:

§ Cisco WS-C3850-12S-S as building MDF running EIGRP stub. § Cisco 3650 as access layer uplinking to the 3850

• Development of a remote site “template” for setting up future remote locations. Current known list of future sites is:

§ Round Rock Annex § Texas Avenue § Expo Center § Parks § Gun Range

3.2.2.4. Internet Connection

• Locations are Jail and Juvenile § New ISR4451’s will be used

• High Level Topology Description with Diagrams • Equipment List, IP Addressing, IOS Revisions, and Feature Sets • Load Balancing for both Internet connections • Failover between two ISP’s • Security Considerations • Network Device-level Security • Routing Protocol and redistribution into backbone

3.2.2.5. Facilities

• Device Cabling Termination and Connectivity • Racks



• Power and UPS • Access

3.2.2.6. Quality of Service

• Business Critical Applications • Real Time Applications • Utility Applications • Best Effort Applications

3.2.2.7. Policies and Access

• Policies and Systems Access • Change Management Procedures

3.2.2.8. Training Plan

• Administrator Training • Training Setup & Preparation

3.2.2.9. Support Plan

• Initial Go Live Support and Freeze Period • Ongoing Solutions Support



3.3. Systems Engineering and Planning Phase Deliverables The following deliverables will be created by Presidio and provided to Williamson County as part of the Systems Engineering and Planning Phase of this project:

Key Focus Key Activities Deliverables

Project Kickoff Establish teams, define roles, an review project scope and planning schedule

Project schedule

Systems Engineering and Planning and Design

Discovery

Analysis

Recommendations

Design

Deployment strategy

Detailed scope of work

Training plan

Support plan

Systems Engineering Report

Bill of Materials Finalize BOM requirements for project

Final BOM

Execution Phase SOW

Execution Phase scope of work will determine Execution Phase pricing

Execution Phase Pricing

Execution Phase Timeline

Deployment strategy and scope of work will determine final execution phase timeline

Project Timeline

Systems Engineering and Planning Phase Completion

Communicate Systems Engineering and Planning Phase completion

Systems Engineering Acceptance document, or System Engineering Report as applicable



4. EXECUTION PHASE

The following is a detailed diagram of the Execution Phase of Presidio’s Strategic Engagement Framework:

4.1. Introduction The Execution Phase of this project consists of performing the detailed scope of work which will be developed and finalized in the Systems Engineering and Planning Phase. During the Execution Phase, risk is continually mitigated by strong project management, technical leadership, detailed documentation, training, knowledge transfer tasks and a defined “freeze period” that fine tunes the solution and assures that the solution operates to functional specifications before project completion and handoff to the operations team. This is all done to ensure client satisfaction and unity with business goals and objectives.

Presidio approaches project execution from a skills-based perspective. Our Execution Team is made up of individuals who have specific skill sets that will be utilized at different times during a given project. This allows us to provide a very specialized workforce to Williamson County and utilize the appropriate resource for the task required.

4.2. Execution Phase Preliminary Scope of Work The following Execution Phase tasks will be performed during this phase:

4.2.1. Services

• Configure NTP Services per plan (Presidio and County staff)



• Implement TACACS+ per plan (Presidio and County staff (AD integration)) o TACACS+ will provide AAA services for Presidio installed network hw only.

• Implement DNS/DHCP per plan (County staff)

4.2.2. MAN Core Switching

• Install and configure core 4500X switches in designated sites • Verify/Upgrade Native IOS • Configure network addressing according to the plan created during the Systems

Engineering and Planning Phase • Configure advanced switching features/security mechanisms • Configure High Availability features • Configure QoS • Configure IP Services

4.2.3. Datacenter Switching

• Install and configure Nexus 9372 switches in designated sites (Justice and ESOC) • Verify/Upgrade Native NXOS • Install and configure customer 2248 FEX’ • Configure network addressing according to the plan created during the Systems

Engineering and Planning Phase • Configure advanced switching features/security mechanisms • Configure High Availability features • Configure QoS • Configure IP Services

4.2.4. WAN routing

• Install and configure routers according to plan • Configure network addressing according to the plan created during the Systems

Engineering and Planning Phase • Configure WAN feature per Plan (iWAN/GETVPN) • Configure QoS • Configure IP Services • Remote site template for future lcoations

4.2.5. Internet connections

• Install and configure routers according to plan (Jail and Juvenile) • Configure network addressing according to the plan created during the Systems

Engineering and Planning Phase • Configure routing redistribution into backbone

• Configure ISP load balancing



• Configure ISP failover

4.2.6. Best Practices

• Document proposed configuration vs. Cisco best practices documentation • Recommend options for remediation of circumstances that do not meet best

practices

4.2.7. Initial Support (Freeze Period)

• Provide initial solution support • Institute Freeze Period change control process

4.3. Execution Phase Deliverables The following deliverables will be created by Presidio and provided to Williamson County as part of the Execution Phase of this project:

4.4. Change Management Process Presidio emphasizes detailed planning and design prior to any complex systems project. One of the reasons for this approach is to avoid any change orders during the Execution Phase that could affect budget, schedules, or business interruptions. During and upon completion of the Systems Engineering and Planning Phase Presidio will review all detailed system design and features so that when implementation begins there will be no surprises. However, there are times when a change order will be requested by the client upon completion of the Systems Engineering and Planning Phase and if this happens the change request will be considered an addendum to this proposal and the Systems Engineering and Planning documents and will be performed accordingly.

Key Focus Key Activities Deliverables

Execution Installation

Configuration

Testing

Go Live

Freeze Period

Final Project Documentation

Project Completion

Communicate project completion

Project Completion and Acceptance document



5. ASSUMPTIONS

The following project assumptions are made and will be verified in the Systems Engineering and Planning Phase:

Sites 1. This project involves all Williamson County sites with special provisions as indicated in

yellow.

Data Network (Core, Distribution, Datacenter and Access Layers) 2. Presidio will leverage the fiber map developed by Presidio Cabling and Williamson

County. That map will provide a current building to building fiber run mapping spreadsheet complete with OTDR testing fir each fiber strand.

3. Williamson County will work with the WAN provider and be responsible for tasks such as circuit ordering, delivery schedules, and coordination of turn-up. Presidio will assist in the definition of these requirements during the Systems Engineering and Planning Phase.

4. Williamson County will configure all network equipment currently in production and not included in this Proposal as needed to support this project.

5. Williamson County is responsible for the configuration of IP Services on the network, including DNS, DHCP and NTP. These services will be deployed within the Williamson County environment and will be in a stable state prior to beginning the installation

6. Williamson County will perform any desired device labeling or cable labeling/management.

7. Williamson County will be responsible for server migrations into the new infrastructure unless the County makes a specific request from Presidio. In this case Presidio will issue a Project Change Request and work with the County on a T&M basis to perform the migrations.

8. Data migration services, V2V, P2V, etc are not part of this proposal. 9. Support for non-Cisco network hardware will be made on a best-effort basis only.

Presidio cannot guarantee nor warranty the interoperability of hardware not specified or provided by Presidio.

Facilities 10. Williamson County will comply with all physical and environmental requirements per

vendor specifications and will provide all racking, cabling, power, and UPS needed for this project

Quality of Service 11. Identified applications will be tested to ensure QoS is properly categorizing traffic and

assigning traffic to the appropriate queues 12. All other application traffic will be directed to the best effort queue 13. Presidio’s responsibility for voice Quality of Service issues is limited only to devices

installed and configured by Presidio personnel

Policies and Access



14. Williamson County will provide to Presidio during the Systems Engineering and Planning Phase any change management policy and procedure that will need to be followed as part of the Execution Phase. Williamson County will manage the internal change management process and any communications to end users.

15. Remote access will be provided to Presidio in support of this project

Training 16. Administrator training will include up to 4 hours. 17. Williamson County will prepare and test all training equipment

Support 18. Presidio will provide 10 days of post implemantion support as part of this project.

General 19. Unless previously agreed upon all activities during the Systems Engineering and

Planning Phase will be performed during normal business hours: Monday through Friday, 8:00AM to 5:00PM. All activities requiring after-hours work in the Execution Phase will be identified during the Systems Engineering and Planning Phase and will be incorporated into the schedule. All remaining activities will be performed during normal business hours: Monday through Friday, 8:00AM to 5:00PM.

20. Cisco SMARTnet maintenance is current on any existing Cisco equipment that is part of this project

21. Williamson County will ensure requisite hardware, software, network, and connectivity configurations are acquired, fully licensed and available in support of this project

22. Any Williamson County-provided hardware is Cisco-certified 23. Performance of scope items not included in this Proposal are outside the scope of this

project and will necessitate the execution of a Project Change Request and may result in a change of project approach, staffing and/or pricing.



6. PRICING

Presidio is providing a Budget Estimate (BE) as part of this Proposal.

Presidio will invoice Williamson County based on the project milestones listed below:

Billing Milestones Fixed or Estimated

Amount

Systems Engineering and Planning Phase Milestone 1*

Fixed $ 46,800.00

Systems Engineering and Planning Phase Milestone 2*

Fixed $ 56,000.00

IP Services and Primary MAN Netowork Upgrade – Milestone 1

Estimated $ 48,900.00

Primary MAN Buildings – Milestone 2 Estimated $ 44,700.00

Secondary MAN Network Buildings – Milestone 3

Estimated $ 55,250.00

WAN and Internet – Milestone 4 Estimated $ 39,800.00

Closeout – Milestone 4 Estimated $ 37,600.00

Bill of Materials – WAN and Internet Estimated $ 193,952.40

Bill of Materials - MAN Estimated $ 425,025.62

Bill of Materials - Security Estimated $ 45,286.40

Total Estimated $ 993,314.42

OPEX (Monthly) Estimated TBD

*Please note each individual phase subsequent to the Systems Engineering and Planning Phase is optional and is a standalone activity.

** Execution Phase billing may be broken up into sub phase(s) and the pricing finalized as agreed to in the Systems Engineering Acceptance document.

***Attached BOM will be converted into a Fixed Quote for ordering upon the completion of the Systems Engineering and Planning Phase.



In the event we are presenting an OPEX estimate above or the Presidio Managed Services option, include the following as a **** qualifier to the OPEX (Monthly) line above:

**** At Williamson County’s request, Presidio will provide additional information regarding Presidio’s managed services offering through Presidio Managed Services. If Williamson County wishes to purchase these optional services, Presidio will work with Williamson County to address these needs. Presidio provides these services via a separate, stand alone, mutual written agreement between Presidio and its clients.

Invoices shall be sent to the following address:

Williamson County Attn: Accounts Payable Dept 1234 Freeway Dr Lewisville, TX

Expenses Any travel and incidental expenses incurred by Presidio in association with the execution of this Proposal are included in the pricing listed above.



7. TERMS AND CONDITIONS

DIR-TSO-2544



8. AUTHORIZATION TO PROCEED

The use of signatures on this Proposal is to ensure agreement on project objectives and the work to be performed by Presidio.

Presidio signature signifies our commitment to proceed with the project as described in this document. Please review this document thoroughly, as it will be the basis for all work performed by Presidio on this project.

This Proposal is valid for a period of sixty (60) days from the date that this proposal is provided by Presidio to Williamson County unless otherwise agreed to by both parties.

Williamson County

Signature Date

Printed Name

Presidio Networked Solutions Group, LLC

Signature Date

Printed Name

Please sign and return the entire document to [email protected] Thank you!



9. ATTACHMENTS

Date post:	26-Apr-2020
Category:	Documents
Upload:	others
View:	12 times
Download:	0 times