SECTION 272133
PART 1 – GENERAL
1.01 SUMMARY
A. Section Includes: General description, functional requirements, characteristics, and
criteria for the implementation of an 802.11 based wireless local area network
(WLAN) as a complement to the wired network. The system includes WLAN
hardware and software components capable of providing a centralized wireless
management solution based on a centralized controller and access points capable
of integrating into the wired structured cabling system.
B. Related Sections: ****if any*****
Section xxxx –
Section xxxx –
Section xxxx –
Division xxxx - Electrical: Other sections of Division 16 as they apply to
installation of the System.
*** This section to be modified by end user of the specification as needed**
1.02 GENERAL
A. Provide all planning, site investigation, labor, products and services required for the
installation, configuration, deployment, and performance testing of the WLAN
system.
B. Where the work of several systems or specialties is involved, coordinate all related
work to provide each system is complete and in proper operating order.
C. Cooperate with all others involved on the Project, with due regard to their work, to
promote rapid completion of the entire Project.
1.
D. Local conditions: The Contractor shall thoroughly familiarize itself with the
work as well as the local conditions under which the work is to be performed.
1.03 SCOPE OF WORK
A. WLAN SYSTEM DESCRIPTION
2. General: The WLAN system is to provide wireless access to various data types and
network services as a complement to the wired network. All WLAN components shall
be provided by a single specialty contractor or subcontractor qualified in the planning,
design, installation, configuration, and deployment. The ability to provide warranty and
maintenance service for the system where necessary is required.
3. The WLAN system shall consist of the following core components, functionality, and
capability:
4. Wireless controller for the following functionality:
a. Centralized access point configuration and management.
b. Software capability for RF Management, Security, Intrusion Detection and
Protection, User Roles, Firewalling, and VPN termination.
c. Ability to monitor access points, users, and all related WLAN events.
d. Single point of management across the entire WLAN via hierarchical
deployment where one controller acts as a master and with a number of master
managed secondary or local wireless controllers.
5. Access points capable of the following:
a. Ability to integrate into the structured cabling system (SCS) wall mounted with
cable terminated to the access point using 110 punch down and installed on
traditional wall outlet boxes.
b. Able to be configured into multiple modes, 802.11b/g, 802.11a, and as WLAN
Air Monitors, without physically changing the device.
c. Integrated omni-directional diversity antennas.
d. Self configuring capability with centralized wireless controller.
e. 802.3af compliant Power-over-Ethernet (PoE) support.
6. RF Management functionality via controller integrated software operating system:
a. Global and per AP configuration of wireless, radio, and network settings.
b. Calibration to set correct channel and power level on access points to eliminate
manual configuration.
c. Planning tool for creating design models based on imported floor plans and a
dynamic capability to generate “RF Colorized Maps” that depict signal
coverage across a floor plan.
d. Real-time location tracking capability needed to located wireless devices in
some or all areas within the environment.
7. RF Optimization functions for performance enhancement:
a. Load Balancing to improve performance with configuration options based on a
number of users or utilization threshold.
b. Self Healing to ensure coverage from neighboring access points due to an AP
failure.
c. Interference and coverage hole detection to detect and correct areas with
unstable or inadequate coverage.
d. Bandwidth Contracts on a per role or user basis to limit bandwidth
consumption on specific roles.
e. Time Range capability to limit or restrict access for all or some WLAN users
during various time periods.
8. Security features necessary for authentication, encryption, and differentiated access:
a.
b.
c.
d.
e.
f.
g.
User/Device Roles for access differentiation will be the foundation of the
security model with the ability to apply various authentication and encryption
types and enhancements i.e. bandwidth contracts, time range etc.
Virtual Private Network (VPN) support for L2TP and PPTP, client software for
establishing VPN shall be included.
ICSA certified Stateful Firewall for granular access control policies to be used
for providing differentiated access.
Authentication capability on the wireless controller as well as to authentication
servers such as Radius, LDAP, and Active Directory.
Encryption levels ranging from standard Wired Equivalent Privacy (WEP) to
the latest Advanced Encryption System.
802.1x and support for a variety of Extensible Authentication Protocols (EAP).
Media access control (MAC) access control list (ACL) capability for device
level security control.
9. Intrusion Detection/Protection System for WLAN monitoring visibility and mitigation
of potential intrusion events, hacking, or malicious activity:
a. Rogue AP/Client notification to detect, classify, and disable, via denial of
service, any unauthorized client or AP device.
b. Denial of Service attack protection with the ability to automatically or manually
blacklist devices from communicating on the WLAN.
c. Signature recognition of common WLAN attack tools.
d. Man-in-the-middle attack detection and protection capability.
e. Ad-hoc network and bridge detection.
10. Administration tools and requirements for management, troubleshooting, monitoring
and reporting the condition of the WLAN:
a. Management via web-based graphical user interface (GUI) and command line
interface (CLI) accessible via telnet and Secure Shell (SSH).
b. Troubleshooting capability to determine issues with connectivity, resource
access, authentication, and signal quality.
c. Monitoring via real-time events, SNMP traps, logs, and ability to see the state
of access points and users connected to the WLAN.
d. Report functionality for standard or custom reports with output on usage,
intrusion, policy violations, and performance characteristics.
B. Provide all products and perform all installation, configuration, testing and
debugging of the system required to ensure a fully integrated, functional WLAN.
C. Provide system documentation and submittals.
D. Provide warranty and maintenance services and support.
E. Comply with codes, ordinances, regulations, and other legal requirements of
public authorities which bear on installation and performance of work.
F. Provide all related demolition, cutting and patching in support of the project. Refer
to the wireless design and/or site survey requirements and information as provided.
G. The work described in this Specification includes all labor, materials, equipment and
services necessary to construct and test the complete system. Any material, feature, software,
etc., not specifically mentioned in this Specification, or not shown on the Contract
Drawings, but required for proper performance and operation of the prescribed system, shall
be provided by the Contractor.
1.04 QUALIFICATIONS
A. Refer to Section xxxxx insert section number for qualifications for RFP
B. Personnel: The Contracting Agency shall be advised in writing of, and shall approve
any proposed changes in personnel.
1.05 QUALITY ASSURANCE
A. System shall be engineered by manufacturer authorized and certified systems
integrator and may require review by the manufacturer to be functional as designed.
B. The WLAN system shall be a properly designed, installed, and configured as specified
in design requirements. The system must include the necessary tools to measure actual
performance of the deployment as planned based upon WLAN requirements outlined
prior. The ability to graphically depict RF coverage across floor plans via wireless
controller is a requirement.
1.06 REFERENCES
Federal Communications Commission: Part 15 Class A.
Institute of Electrical and Electronics Engineers (IEEE), latest editions:
IEEE C2: National Electrical Safety Code.
IEEE 142: IEEE Recommended Practice for Grounding of Industrial and
Commercial Power Systems.
IEEE C62.41-1991: Recommended Practice on Surge Voltages in Low-Voltage
AC Power Circuits.
C. National Fire Protection Association (NFPA).
NFPA 70 (2002): National Electrical Code (NEC).
D. Telecommunications Industry Association/Electronics Industry Association (TIA/EIA).
1. EIA-310-D: Cabinets, Racks, Panels, and Associated Equipment.
2. ANSI/TIA/EIA-568-B.1,B.2,B.3 - Commercial Building Telecommunications
Cabling Standard.
3. ANSI/TIA/EIA-569-A – Commercial Building Standard for
Telecommunications Pathways and Spaces.
4. ANSI/TIA/EIA-606-A – The Administration Standards for the
Telecommunications Infrastructure of Commercial Building.
5. ANSI/TIA/EIA-607 – Commercial Building Grounding and Bonding
Requirements for Telecommunications.
E. Underwriters Laboratories Inc. (UL): UL-1950/60950.
1.07 SUBMITTALS
A. System Description and Analyses: Complete system descriptions, design analyses and
calculations used in determining the equipment required by the specifications.
Descriptions and calculations shall show how the equipment will operate as a system
to meet the performance of this Specification. The submittal shall include the
following:
System start-up and shutdown operations.
Configuration documentation.
Operating and maintenance instructions.
B: Manufacturers’ Data: This literature shall include a description and technical data for
all equipment and devices. Including any other equipment or accessories installed as
part of the system. Literature should be as detailed as possible in the form of
installation guides, datasheets, and user guides where applicable for all components.
C. Design Drawings: Select all that apply
System block diagrams.
System riser diagrams.
Floor plans detailing device locations.
Equipment room layouts to scale.
Installation of equipment located in the equipment rooms.
Interconnection with the high speed UTP copper and fiber optic transmission
systems.
Point-to-Point wiring diagrams.
Details for installation of equipment on buildings, poles and other
structures.
Surge protection device installation details.
Details of interconnection to fiber backbone system.
Prepare using the latest release of AutoCAD and deliver files to the
Owner.
D. Warranty information: All materials relating to warranties.
E. Certificate of Compliance:
1. All specified manufacturer’s certifications shall be included with the data
package.
F. Manuals:
1. Provide complete sets of manuals and other information necessary for
the operation and maintenance of the system.
2. Manuals: Manuals shall include names, addresses, and telephone
numbers of each subcontractor installing equipment and systems, and
nearest service representatives for each item of equipment for each
system.
a. Hard copy manuals shall have a table of contents and tab sheets.
1) Tab sheets shall be placed at the beginning of each chapter or
section and at the beginning of each appendix.
2) The final copies delivered after completion testing shall include
all modifications made during installation, checkout, and testing.
3. Users Guide: Guide shall identify the operational requirements for the
system and explain the theory of operation, design philosophy, and
specific functions. A description of hardware and software functions,
interfaces, and requirements shall be included for all system operating
modes.
4. Maintenance and service agreement: The service maintenance
agreement shall document and describe levels of support in reference
to software, hardware and replacement of defective components.
1.8 TRAINING
A. System Overview: Conduct an on-site system overview to instruct the end
users on the scope and operations of the systems.
B. Facilitate on-site training availability for designated maintenance technicians
and personnel on the operation and maintenance of the system(s). Training
shall be performed by a manufacturers’ certified trainer either on-site or at a
suitable off-site location.
C. Provide course syllabus for all training courses in advance of each course,
with outline of topics, estimated duration of the course, targeted audience and
training objectives. Training manuals shall be provided to all class attendees.
D. Provide the following knowledge transfer following final testing and
acceptance of the systems:
1. Demonstrate operation of system during System Overview tour and
demonstrate system set-up parameters.
1.9 WARRANTY AND SERVICE
A. Maintenance agreement period shall commence upon the date of purchase.
B. Warrant all components, parts and assemblies against defects in materials
and workmanship for a period of 12 months from date of purchase. Warranty
service shall be provided by trained and certified specialists that meet and
exceed equipment manufacturer requirements.
C. Warranty response times are shall not exceed four hours during hours of
business and replacement of failed equipment must be replaced next business
day via overnight shipment.
D. The installer shall correct any system defect within XXX hours of receipt of call
from the Owner. If the Contractor fails to respond to the service request within
th will operate as end user will have the right to repair the system without
invalidating the warranty.
E. Extended service/maintenance agreements shall be offered by the Contractor
for up to two years after the initial warranty expires. Submit 90 days prior to
final inspection.
F. System modifications: Make all recommendations for system modification in
writing to the Contracting Agency.
1. No system modifications, including operating parameters and control
settings, shall be made without prior approval of the Contracting
Agency’s designated representative.
2. Modifications made to the systems shall be incorporated into the
operations and maintenance manuals, and other documentation
affected.
PART 2 – PRODUCTS
2.01 ACCEPTABLE MANUFACTURERS
A. Product basis of design:
Wireless LAN system: Ortronics Wireless Solution:
Wireless controller units
Wi-Jack access points
Mid-Span Power over Ethernet (PoE)
Powered PoE Patch Panels
Product substitutions:
Substitutions will only be considered where there is currently no suitable product
to perform a unique or specialty purpose.
All substitutions must meet compliance and design specifications and all
appropriate product literature must be submitted before consideration and approval are
granted.
2.02 GENERAL SYSTEM REQUIREMENTS
A. System shall provide seamless end-to-end transport for wireless 802.11 a/b/g data
and control packets.
B. The system shall include all equipment, cables, adapters, terminators, and
appurtenances necessary for a fully functional system.
C. Computer network wiring shall meet the requirements of TIA/EIA-568-B.
D. WLAN shall operate in the FCC non-licensed 2.4GHz and 5.8GHz bands.
2.03 WIRELESS LAN (WLAN) EQUIPMENT
A. Wireless LAN equipment shall be based on the Ortronics Wireless solution
products.
B. The system shall be modular and shall allow for expansion or modification of net
throughput capacity by addition of wireless controllers and access points as
appropriately deployed and positioned.
C. Access Point Technology:
Access Point Frequency Band Range:
Radio Specification for 802.11b/g (US, Canada)
1) 2.412 ~2.462 GHz
b. Radio Specification for 802.11a (US, Canada)
~ 5.250 GHz (lower band)
5.250 ~ 5.350 GHz (middle band)
5.725 ~ 5.825 GHz (upper band)
2. Radio Technology Access Method:
a. 802.11b Direct Sequence Spread Spectrum (DSSS)
b. 802.11g Orthogonal Frequency Division Multiplexing (OFDM)
c. 802.11a Orthogonal Frequency Division Multiplexing (OFDM)
3. Radio Transmit Power
a. 802.11b/g – user configurable up to 100mW
b. 802.11a – user configurable up to 60mW
4. Modulation Type:
a. 802.11a – BPSK, QPSK, 1-QAM, 64QAM
b. 802.11b – CCK, BPSK, QPSK
c. 802.11g – CCK, BPSK, QPSK, 16-QAM, 64-QAM
5. Access Point Interfaces:
a.
b.
c.
d.
Ethernet Interface: 10/100 Base-TX auto sensing MDI/MDX
Ethernet Connector: RJ-45 female
Over Category 5e/6 cable
Serial and Power over Ethernet Capable – 48V DC/150mA 802.3af
Compliant
6. Media Access Control (MAC):
CSMA/CA with ACK
7. Integrated Antenna:
Integrated internal multi-mode (.11b/g/a) antennas
Omni-directional
Antenna diversity
8. Regulatory Compliance
a. FCC Part 15 Class A
b. FCC Part 15 Class E 15.407 (U-NI)
c. Industry Canada RSS210
9. Standards Compliance:
a. Ethernet 802.3/IEEE 802.3u
b. Wireless IEEE 802.11 a/b/g
c. Power Over Ethernet 802.3af
D.
Wireless Controller Technology
1. Advanced RF Management
a.
b.
c.
d.
e.
f.
g.
Centralized calibration
Self healing
Load balancing
Interference detection
Coverage hole detection
3-D Site survey planning tools
Active RF Signal Measurement with Color Floor Mapping.
2. Virtual Private Network (VPN)
a.
b.
c.
d.
Layer Two Tunneling Protocol over IPSEC (L2TP/IPSEC)
XAUTH over IPSEC
Point to Point Tunneling Protocol (PPTP)
VPN dialer client software
3. Stateful ICSA Certified Firewall
a.
b.
c.
d.
e.
f.
Configurable Traffic Policies
Per user or Per Port based
Traffic flow classification via Quality of Service (QoS) based priority queues
Per user or per role bandwidth contracts
802.1p and DSCP tagging
Traffic Policy time range capability
4. User Access Management
a. Role based access control
b. Support for multiple types of AAA servers, Radius, LDAP, Microsoft Active
Directory, Internal Local User Database
c. Device MAC address authentication
5. Captive Portal
a. For Authenticated user and guest access
b. Customizable portal web page
6. General Network features
a.
b.
c.
d.
e.
f.
Configurable DHCP server
Authentication based Virtual LAN (LAN) support
Multiple ESSIDs with per VLAN support
Network Address Translation
Traffic Redirection
Redundancy support via Virtual Router Redundancy Protocol (VRRP)
7. Layer 2 Authentication and Encryption
a. 802.1x with Extensible Authentication Protocol (EAP) support for TTLS, PEAP,
TLS, Cisco LEAP
b. MAC address authentication
c. Wired Equivalent Privacy (WEP), Wi-Fi Protected Access 1 and 2 (WPA-1,
WPA-2), 802.11i with Advanced Encryption Standard (AES-CCMP)
8. Intrusion Detection/Protection System (ID/Ps)
a.
b.
c.
d.
e.
f.
g.
h.
i.
Denial of service protection
Man-in-the-Middle attack detection and protection
Rogue AP classification and containment
AP misconfiguration alerts
Signature detection for common discovery and attack tools ex. Netstumbler,
ASLEAP, AirJack
Ad-hoc and wireless bridge detection
Surveillance and detection of weak WEP implementation
MAC address spoof detection
AP impersonation detection
9. Secure Voice Support
a.
b.
c.
d.
e.
Stateful voice traffic classification, QoS, and prioritization
Call redirection utilizing uncongested APs
Automatic bandwidth provisioning capability
Tunable settings for battery life conservation
Integrated VoIP support for Session Initiation Protocol (SIP), Spectralink Voice
Protocol (SVP), H323, and Cisco Skinny
f. Low latency handoffs <10ms
g. Maximum jitter <5ms
10. Software Upgrades
a. Access Points shall not require individual upgrades of software maintenance
b. All upgrades should be done at wireless controllers
c. Wireless controller hardware shall be robust to support future standard
requirements via software upgrade
E. Power Over Ethernet Mid-Span
1. Device Form Factors
a. Single Port Standalone
b. Six port rack mount- 1U
c. Twelve port rack mount- 1U
2. Output Specification
a.
b.
c.
d.
Pin Assignments and Polarity- 4/5 (+), 7/8(-)
Output Power Voltage- -48Vdc
User per port power- 15.4W minimum
Aggregate power- 100W for 6 ports, 200W for 12 ports
3. Input Power Requirements
a. AC Input Voltage-90 to 264 Vac
b. AC Frequency- 47 to 63Hz
c. AC Input Current
1) Single Port- 0.3A @ 110 Vac, 0.15 @ 240 Vac
2) Six and Twelve Port- 3.5A @110 Vac, 1.8A @ 240 Vac
4. Connector Interface
a. Shielded RJ-45, EIA 568A and 568B
2.04 SPECIAL EQUIPMENT
A. Special hardware, software, tools, test equipment, programming or initialization equipment
needed to modify or maintain any part of the System or its components shall be provided as
part of the System.
PART 3 – EXECUTION
3.01 INSTALLATION
A. General: Install all system components and appurtenances in accordance with the
manufacturer's instructions, NEC Article 810, applicable Codes and as shown. Provide all
necessary interconnections, services, and adjustments required for a complete and operable
system as specified and shown.
B. Site Inspection: Contractor shall afforded the opportunity to survey the site prior to
beginning work or submitting shop drawings, product data, design data, or other technical
submittals.
1. Contractor shall verify:
a. Information presented in the Contract Drawings is correct.
b. Installation of equipment and work can be accomplished as indicated in the
Contract Documents.
c. Contractor’s proposed equipment and methods of installation are compatible with
existing conditions.
2. Take necessary field measurements and record other data required for preparation of shop
drawings and other submittals.
3. Variations: Contract Drawings and other Documents indicate basic location,
arrangement, and routing of equipment and components.
a. The Contractor bears responsibility for determining suitability of the existing
conditions, and shall not rely on assurances of any other party in generating its
assessments of site conditions.
b. Where prior installations may require demolition or excavation, Contractor shall
coordinate all such requests with the Contracting Agency and await written
permission to conduct these activities.
4. Improvements and modifications of layout to accommodate Contractor’s proposed
equipment, field conditions, and detailed designs will be considered by the Contracting
Agency.
5. Do not proceed on incorporation of modifications and associated work until receiving
written approval from the Contracting Agency.
6. Reporting: Within 30 days following Notice to Proceed, submit a report to the Contracting
Agency describing the site investigation.
a. Indicate noted conflicts between Contract Documents and site investigation
information.
b. Describe proposed modifications and reasons for change.
c. Include specification sheets and written functional requirements to support
findings.
d. Prepare drawings and other data required showing variations and conditions
requiring changes.
e. If work schedule is affected by site investigation, revise initial progress schedule,
and submit to the Contracting Agency.
7. Certify that site investigation has been performed and that, except for items noted,
conditions shown and described in Contract Documents are acceptable, and equipment can
be installed and work can be performed as specified without conflicts with existing site
conditions.
C. Power line surge protection: All equipment connected to alternating current circuits shall be
protected from power line surges.
3.02 WLAN INSTALLATION
A. Conduct a thorough pre-installation site evaluation to Measure and report interference
concerns. Submit all recommended remedies prior to commencing physical installation
planning.
B. Conduct a site evaluation for the physical installation.
C. Test WLAN equipment in accordance with best practices and manufacturer
recommendations.
D. A network assessment shall be completed to discover potential conflicts due to existing
infrastructure and/or software application incompatibilities.
3.03 Configuration
A. Provide all software, original media, and applicable software licenses registered in the name
of the Owner for a complete and fully operational system.
B. The Systems Integrator, based on its technical expertise and experience on previous
projects, shall be responsible for all aspects of the WLAN-LAN transport. Submit in
accordance with the requirements of this section.
3.04 STARTUP
A. The Systems Integrator shall verify equipment has been set up in accordance with
manufacturer’s instructions before attempting operation.
1. A visual inspection of the system components shall be conducted to ensure that defective
equipment items have not been installed and that there are no loose connections.
2. System wiring has been tested and verified as correctly connected as indicated.
3. All system grounding and transient protection systems have been verified as properly
installed and connected as indicated.
4. Power supplies to be connected to the system and equipment have been verified as the
correct voltage, phasing, and frequency as indicated.
5. Satisfaction of the above requirements shall not relieve the Contractor of responsibility
for incorrect installations, defective equipment items, or collateral damage as a result of
Contractor work or equipment.
B. Calibration of access point channel and power level settings shall be performed to establish
optimal performance.
3.05 TESTING
A. General: Perform system testing, site testing, and adjustment of the completed system in
accordance with this specification.
1. Provide all personnel, equipment, instrumentation, and supplies necessary to perform all
testing.
2. Written notification of planned testing shall be given to the Contracting Agency at least
14 days prior to the test and in no case shall notice be given until after the Contractor has
received written approval of the specific test procedures.
B. Test Procedures and Reports: Test procedures shall explain, in detail, step-by-step actions
and expected results demonstrating compliance with the requirements of the Specification.
1. Test reports shall be used to document results of the tests.
2. Reports shall be submitted to the Contracting Agency for approval within 7 days after
completion of each test.
C. Contractor’s Field Testing: Calibrate and test all equipment, verify operation, place the
integrated system in service, and test the integrated system.
1. Submit a report to the Engineer for approval describing results of functional tests,
diagnostics, and calibrations including written certification that the installed complete
system has been calibrated, tested, and is ready to begin operation.
D. The field testing and documentation shall as a minimum include:
1. Verification that the all cabling has been installed, tested, and approved.
2. Written verification that all components are fully functional in accordance with the
manufacturers’ requirements.
3. Written verification that network bandwidth is adequate under worst-case field
conditions, with ample headroom to accommodate additional “future” cameras (and SU
equipment) without the addition of BSU or LAN equipment.
4. Written verification that all video sources provide a full specified bandwidth signal.
END OF SECTION