Buildup of WiFi Network
Information Note to Schools
Introduction
For your school’s preparation of enhancing / topping up the IT infrastructure,
you may make reference to this information note in considering the
standard provision and add-on services required by your school.
Standard Provision
From schools’ experience in the Support Scheme for e-Learning in Schools
and also WiFi 900 Batch 1, the following provision is considered sufficient
for students to access the e-learning resources and conduct common
e-learning activities. It is outlined here for schools’ reference in figuring out
the expected service to be delivered by the WiFi network.
 WiFi Connectivity–use IEEE 802.11 a/b/g/n/ac or above network in a
standard classroom. The minimum number of classrooms to be covered
should be at least equal to the number of approved classes for the
2016/17 school year.
 Number of Concurrent Connection–commensurate with the maximum
number of students, say 40, in a class with at least 1 Mbps upload /
download bandwidth per user connection.
 Number of classrooms using WiFi concurrently.
 Authentication Method–use 802.1x standard based authentication and
Hong Kong Education City single sign-on services
 Session Control – Hong Kong Education City authentication service can
support one device or multiple devices to connect based on user group
(student, teachers).
1
 Internet Content Filtering Service–based on filtering profile commonly
adopted by most schools and managed by vendors.
 Existing Network Facilities – not rely on any existing network facilities
and cabling of the School, nor interfere with the existing WiFi network of
the School.
 Broadband Network – use separate broadband for the WiFi service.
State otherwise if the existing broadband can be utilized for the service.
 Managed Service–operate the WiFi network using managed service
model, provide end-to-end service with single point of contact including
configuration, provisioning of service, proactive monitoring,
maintenance and regular reporting.
 Service Level Agreement–ensure at least 99.7% availability of the WiFi
service, support four-hour response time and four-hour service recovery
with active monitoring, helpdesk support with support hours from Mon to
Sat 8:00 am to 6:00 pm, and provide monthly monitoring reports for
School.
 Contract End Arrangement– All provisions of trunks, conduits, cables,
LAN ports and power points shall be considered as fixture of the School
and shall become the property of the School. The Contractor shall
remove or keep those provisions according to the instruction of the
School. Contractor can remove the network equipment such as switch,
routers, and access points.
Add-on Service
Some schools may have other considerations in the use of WiFi network in
their campus. Such add-on service may incur more development time and
extra expenditure from schools. The variation could be
 WiFi Coverage– include special rooms and open areas
2
 Broadband Service–provide broadband service with at least 100Mbps
Internet connection at school and allowing upgrade to 1Gbps
 Authentication Method –user account system being used by School
 Session Control –Other requirements.
 WLAN System Access Control–provide MAC address filtering
mechanism, pre-shared key mechanism, etc.
 MAC Address Monitoring – The lists of filtering and filtered MAC
addresses are to be managed and monitored by the Contractor or the
School.
 Internet Content Filtering Service–specific request on content filtering
 Integration of networks – system integration with existing network with
secure design.
 Internet addresses subscription & configuration – for Internet access
to school internal resources.
 Monitoring of WiFi network–specific request on monitoring of WiFi
network by School
 Redundancy– increase the availability of the WiFi service
 Supporting hours–extended support hours and/or reduced time for
recovery
 Contract End Arrangement–Other requirements.
Wi-Fi.HK Service
3
Schools may consider the provision of free Wi-Fi services in some common
areas such as reception area and student hall to school visitors e.g. parents by
allowing the service provider (SP) to set up free Wi-Fi service using the
school WiFi network infrastructure, under the Wi-Fi.HK brand1, with a
SSID “Wi-Fi.HK via <name of SP>”. The Wi-Fi.HK service is a public
Wi-Fi initiative not related to the schools or EDB and will not incur extra
expenditure from schools. The respective SP will answer public queries
about the service and register with OFCA those hotspots that are going to
provide public Wi-Fi service under Wi-Fi.HK.
It is outlined here for schools’ reference and consideration on the related
service requirements.
 Authentication- landing page with Wi-Fi.HK logo, terms and
conditions and disclaimers but no registration/login is required for use
of Wi-Fi.HK; users can use the free Wi-Fi service after accepting the
terms and conditions in the landing page
 Content filtering- can also apply to Wi-Fi.HK though it is not
mandatory
 Integration - the network for supporting Wi-Fi.HK shall be isolated
from the School’s network without direct access; connections via
Wi-Fi.HK shall have access to the Internet only
 Helpdesk - service provider will provide hotline service and contact
email for public enquiry of its service
Checklist
The checklist below serves to facilitate the capture of users’ requirements.
Please be prepared to provide the information below.
Items
WiFi Connectivity
Standard Provision
 802.11 a/b/g/n/ac or
above.
1
Add-on Service
 Please specify.
To make it easier for the public and visitors to access free Wi-Fi services in Hong Kong, one of the initiatives in the 2014 Digital 21
Strategy is to promote the free Wi-Fi services offered by the public and private sectors in Hong Kong under a common Wi-Fi brand
“Wi-Fi.HK”. It will help the public and visitors find and connect to the public Wi-Fi hotspots throughout Hong Kong. Details
about the Wi-Fi.HK scheme can be found in www.wi-fi.hk.
4
Items
WiFi Coverage
Broadband and
network facilities
Authentication
Standard Provision
Add-on Service
 At least 1 Mbps upload /
download bandwidth per
connection.
 Total no. of floors and
 Other areas
classrooms for WiFi
(such as hall,
coverage
covered
 No. of classrooms on
playground,
each floor
activity rooms,
 Max no. of concurrent
laboratory,
connections in each
libraries,
classroom. Generally, 40
activity rooms,
concurrent connections is
other open
preferred
areas)
 Number of classrooms
 Max no. of
using WiFi concurrently
concurrent
connections in
the above
areas
 Separate broadband for
 100 Mbps or
the WiFi service
above. Please
specify.
 Integrate with
existing
network with
secure design.
 Other
requirements.
 Use Hong Kong
 Other device
Education City single
or user
sign-on services for
authentication
authentication
mechanisms
such as
school-owned
user
5
Items
Standard Provision
Add-on Service
accounting
system.
 Other
requirements.
Session Control
(for using Hong
Kong Education City
account
authentication only)
WLAN system
access control
 Allow one device or
multiple devices to
connect based on user
group (student, teachers).
 No access control
 No MAC address
filtering
 Use pre-shared
key
mechanism.
 Use MAC
address
filtering list for
access control.
 The lists of
filtering and
filtered MAC
addresses are
to be
monitored by
the Contractor
or the School.
Internet Content
Filtering Service
 Use content filtering
profile commonly
adopted by most schools
and managed by the
contractor.
 To be
specified by
School.
 True IP
addresses for
public access
to internal
resources.
Internet access to
internal resources
 DNS record
update.
6
Items
Standard Provision
Add-on Service
 Firewall
configuration
Managed service model,  Managed
provide end-to-end
service model
service including
with partial
configuration,
monitoring by
provisioning of service,
school.
proactive monitoring,
 To be
maintenance and regular
specified by
reporting.
School.
99.7% availability
 Higher
availability or
redundancy
required.
 To be
specified by
School.
Support four-hour
 Reduced time
response time and
for service
four-hour service
recovery.
recovery
 To be
specified by
School.
Support hours from Mon  Extended
to Sat 8:00 am to 6:00 pm
support hours,
say to start at
7am to match
the need of the
school.
 To be
specified by
School.
Provide monthly
 Other
monitoring reports
reporting
Monitoring of WiFi
network

Availability and
Redundancy

Recovery

Support hours

Reporting

7
Items
Standard Provision
Contract End
Arrangement
 The School reserves the
right to instruct the
contractor to remove or
retain both cables and
conduits whereas all
other WiFi network
equipment should be
removed.
 5 years subscription of
 To be
service with monthly
specified by
payment.
School.
 5 years subscription of
service with annual
payment.
 3 years subscription of
service with monthly
payment.
 3 years subscription of
service with annual
payment.
 Total no. of floors/area of Wi-Fi coverage and
maximum no. of connections in these areas
Payment
Wi-Fi.HK coverage
(optional)
Add-on Service
schedule. To
be specified by
School.
 Other
arrangements.
To be
specified by
School.
Structure Information  Floor plan of the School
 Network diagram of school’s network
Other Considerations
Schools may take specific consideration on the following situations, if
appropriate:
8
a) Trade-in of existing equipment
b) Buy-out of other existing service contracts
c) Sharing of existing broadband bandwidth to save cost and to increase
aggregated bandwidth
Working schedule
Schedule
Proposed time frame for consideration and
confirmation
Invitation of  June 2016
quotation and  Please propose a 3-hour session on a certain date
site visit by
for all potential contractors to conduct the site visit.
potential
This will be included in the user requirement
contractors
specification.
Site work
 July – August 2016
 The works will be followed up by school with the
Contractor.
Site Visit
The Contractor will meet the contact person of your school and conduct a
site visit. The following are some issues they wish to find out:
a) Penetration of WiFi signals
b) Cabling of WiFi infrastructure
c) Location of floor closet and switches, and spaces left for additional
network equipment, conduits and trunking
d) The condition and models of existing switches
IT in Education Section
Education Bureau
Dec 2015
9