Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 1 of 30 Tender Document for Network Connectivity at BPSMV on Turn Key Basis Table of Contents SECTION – I 1. Invitation for Bids SECTION – II 1. 2. 3. 4. 5. Procedure for submission of Bids Cost of Tender Amendment of Tender Document Language of Bids Documents comprising the Bids SECTION – III 1. 2. 3. 4. 5. Criteria for Pre-qualification Criteria for Technical Bid evaluation Financial Bid Campus Network Requirement Technical Terms & Conditions & Specifications SECTION – IV 1. General Terms and Conditions Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 2 of 30 SECTION – I 1. Invitation for Bids 1.1 The BPSMV, University proposes to procure networking components and solution for extending backbone network connectivity at BPSMV, University, Haryana. The BPSMV is looking for vendors who have experience in integration of abovementioned systems. 1.2 The project is to be executed on turnkey basis. 1.3 Tenderers are advised to study all technical and commercial aspects, instructions, forms, terms and specifications carefully in the tender document. Failure to furnish all information required in the Tender Document or submission of a bid not substantially responsive to the Tender document in every respect will be at the tenderer’s risk and may result in the rejection of the bid. 1.4 Sealed offers prepared in accordance with the procedure enumerated in Clause 1 of Section II should be submitted to Director, BPSMV, Haryana, not later than the date and time laid down, at his address given in the schedule for invitation to Tender under Clause 1.7 of Section I. 1.5 All bids must be accompanied by an earnest money of Rs. 1.0 lacs in the form of Bank Draft / Bankers Cheque drawn from a scheduled bank in favour of the Registrar, BPSMV, Khanpur Kalan, Sonipat. Haryana. 1.6 This tender document is not transferable. 1.7 Schedule for Invitation to Tender a) b) Address at which tender is to be submitted: Director, School of Engineering & Sciences, BPS Mahila Vishwavidyalaya, Khanpur Kalan, Sonepat-131305, Haryana. Last time and date for submission of Tender by the tenderer: 14th Oct, 2010 upto 4:00 PM c) Date till which the tender is valid: 60 days from the opening of technical bid. Implementation will be within 8 weeks after the allotment of tender. d) BPSMV shall not be responsible for any postal delay about non-receipt/nondelivery of the documents. Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 3 of 30 SECTION – II 1. Procedure for submission of Bids 1.1 It is proposed to have a Three Cover System for this tender a) Pre-qualification documents (in duplicate) in one cover. b) Technical Bid (in duplicate) in one cover. c) Commercial bid (in duplicate) in one cover. 1.2 Each copy of the Pre-qualification document should be covered in a separate sealed cover super scribing the word: ‘Pre-qualification document’: Each copy should be marked as “Original Copy” and ‘First copy’. Both should be put in a single sealed cover super scribing the wordings ‘Pre-qualification document’. 1.3 Each copy of Technical Bid of the Tender should be covered in a separate sealed cover super scribing the wordings “Technical Bid”. Each copy should be marked as “Original Copy” and “First Copy”. Both should be put in a single sealed cover super scribing the wordings “Technical Bid”. 1.4 Each copy of Commercial Bid of the Tender should be covered in a separate sealed cover super scribing the wordings “Commercial Bid”. Each copy should be marked as “Original Copy” and “First Copy”. Both should be put in a single sealed cover super scribing the wordings “Commercial Bid”. Commercial Bid should only indicate prices (Preferably item-wise). 1.5 All the three documents viz. Pre-qualification, Technical Bid Cover and Commercial Bid Cover prepared as above are to be kept in a single sealed cover super scribed with Tender Number, Due date and the wordings “Tender document for the Campus wide networking” 1.6 The cover thus prepared should also indicate clearly the name and address of the tenderer to enable the Bid to be returned unopened in case it is declared “late”. 1.7 Each copy of the tender should be a complete document and should be bound as a volume. Different copies must be bound separately. 2. Cost of Tender The tenderer shall bear all costs associated with the preparation and submission of its Bid, including the cost of presentation for the purpose of clarification of the bid, if so desired by the client and the client will in no case be responsible or liable for those costs, regardless of the conduct or outcome of the Tendering Process. Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 4 of 30 3. Amendment of Tender Document 3.1 At any time prior to the last date for receipt of bids, the client may for any reason, whether at its own initiative or in response to a clarification requested by a prospective Tenderer, modify the Tender Document by an amendment. 3.2 The amendment will be notified in writing or by telex or cable to all prospective Tenders who have received the Tender Documents and will be binding on them. 3.3 In order to afford prospective Tenderers reasonable time in which to take the amendment into account in preparing their bids, the Client may, at its discretion, extend the last date for the receipt of the Bids. 3.4 The institute reserve the right to fine tune the technical specification till the opening of the financial bid 4. Language of Bids The bids prepared by the Tenderer and all correspondence and documents relating to the bids exchanged by the Tenderer and the Client, shall be written in English language, provided that any printed literature furnished by the Tenderer may be written in another language so long as accompanied by an English translation in which case, for purposes of interpretation of the bid, the English translation shall govern. 5. Documents comprising the Bids 5.1 The Bids prepared by the Tenderers shall comprise of following components: a) Pre-Qualifying Document shall consist of following: (i) The documents supporting Clause 1 of Section III of the tender and signed and complete in all respects. (ii) Bid security furnished in accordance with Clause 1.6 of Section III. (iii) Valid Income Tax Clearance Certificate in original. (iv) Photocopies of letter of Awards & Completion certificate (if any). b) Technical Bid shall consist of the following: (i) Technical Bid furnished as per the format for technical bid (Clause 2 of Section III). (ii) Technical literature for each product/service, covering full technical specifications, principle of operation, design features, test and monitoring facilities, description of operation, procedure and facilities. Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 5 of 30 (iii) (iv) (v) (vi) c) Bar chart indicating the proposed schedule of completion (Bar chart should indicate the schedule of each activity under the tasks). The details of products to be supplied should be given in the same sequence as mentioned in the tender. The brochures giving details of the products and other supporting documents should also be attached. The software supplied should be legal and licensed. Only hardcopies of original documentation/manuals will be accepted. Model No., Make and standards (like IEEE) of each item should be specified clearly. Commercial Bid consisting of the following: (i) Bid prices duly filled, signed and complete as per the format (Clause 5 of Section III). (ii) Maximum educational discount as could be offered in hardware and software, should be mentioned. Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 6 of 30 SECTION - III 1. Criteria for Pre-qualification 1.1 The bidder should be a manufacturer, authorized distributor or large-scale system integrator of the required networking equipment. 1.2 The bidder must have a tender specific “MAF” for active and passive product. 1.3 ISO 9001:2000 certificates or equivalent for the tenderer. 1.4 Tenderer should have service center in Sonepat, Delhi (NCR) or in a radius of 40Km of Haryana. 1.5 Experience of the similar type of projects. 1.6 The bidder should have at least 1 Single Purchase Order of minimum 40Lacs of similar nature. 1.7 Earnest money in the form of Draft of Rs 1.0 lacs in the name of the Registrar , Bhagat Phool Singh Mahila Vishwavidalaya, Khanpur Kalan ,Sonepat should accompany the bid. 1.8 The main bidder should have a turn over of at least Rs. 30 crores annually for the last three years. 1.9 Pre Qualification bid should contain reports on the financial standing of the bidder such as profit & loss accounts/statements, balance sheet and auditor’s reports for the last three years banker’s certificate e.t.c. 2. Criteria for technical Bid evaluation The technical bid will be evaluated by a committee constituted by the director for this purpose. The committee will make the comparative statement of the bid, take any clarification and take technical presentation if required. 3. Financial Bid The Financial Bid may be submitted in the following Format. (Cost for each item may be mentioned separately). Break – up of total cost should be provided as follows: Sr. No. 1 2 3 4 5 Item Description/Make Qty. Unit Price Sales Tax %age and rupees Any other taxes/duties/ levies in %age and rupees (mention details) Total FOR price (in Rs.) Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 7 of 30 4. Campus Network Requirements Bhagat Phool Singh Mahila Vish. Sonepat Haryana, BPHMU is going to setup a campus wide Local Area Network. This network shall provide with high-speed access to all computers, and Internet access connectivity. The objective is to be achieved by deploying Gigabit link on the OFC backbone from the Computer Centre to various Departments, Sections & Offices in a 2-tier topology consisting of a central core switch followed by access switches in sequence to connect the desktops over Gigabit Ethernet. In addition to the procurement of the switches and hardware, related network security and management software will also be procured. This is a turnkey project including supply of materials and implementation of the work comprising of laying cables, mounting switching, structured cabling and maintenance of campus wide network and so on. Following considerations shall be kept in mind, to arrive at the solution of the campus wide LAN at Bhagat Phool Singh Mahila Vish. Sonepat Haryana . Modularity: It is a key requirement, in the sense that incremental additions should be possible at the hardware & software levels, as evolving needs justify expansion. Scalability and expandability: Scalability and expandability are the stated requirements of the proposed campus network at BPSMV, Haryana . The solution should be scalable and expandable, if required, should be easy with minimal changes in the network. Flexibility: Flexibility and ease of adding new services or features (Data, Voice, Video, and Wireless etc.) required due to the dynamic operating environment. The proposed solution should also be flexible enough to support current standards and foreseen upcoming standards. QoS: Quality of Service is required in the proposed network as various user groups and various applications will be running on the network. All the network components being proposed should support traffic policies & QoS. Reliability: High Reliability of all the products constituting the core of the campus network & other sub systems is crucial. The products should have the self-healing with fast convergence features in case of any failure. The equipments proposed should have high MTBF and proven reliability. Security: It is one of the key requirements of proposed campus network as different user groups are using this common infrastructure with very sensitive applications. So provision of adequate security has to be provided on the network between different user groups. Management: Complete visibility and control of the network, as well as the provision Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 8 of 30 of being able to exchange data with the management platforms or other sub-systems is crucial to the proposed campus network. The NMS should support features for centralized proactive management, statistical analysis, trouble shooting tools, configuration tools etc and enabling or disabling particular node or route. Simplicity: The proposed network design should be simple with minimum variety of components and preferably from a single manufacturer. This also implies simple to understand, implement & maintain the entire system. The proposed network solution should be on Gigabit Ethernet technology and should support multimode fiber optic and single mode optic fibre. The present requirement of LAN & Wifi Nodes in the SES and Administrative Buildings are as Under :Consolidated Nodes Break-up Details-SES (Building -1) S.N0. 1 2 3 4 Floor's Location Ground Floor First Floor Second Floor Third Floor Total Total LAN 1 Port Nodes Faceplate 62 62 189 189 74 74 67 67 392 392 Patch Cord 4 Ft. Rack Side 62 189 74 67 392 Patch Cord 7 Ft. User Side 62 189 74 67 392 24 Port Cat6 12U,15U & Jack 42U Rack Panel Requirement 3 2 11 5 4 2 4 2 22 11 Consolidated Nodes Break-up Details-Admin Block (Building -2) S.N0. 1 2 3 4 Total Floor's Location Ground Floor First Floor Second Floor Third Floor Total LAN 1 Port Nodes Faceplate 75 75 61 61 67 67 67 67 270 270 Patch Cord 4 Ft. Rack Side 75 61 67 67 270 Patch Cord 7 Ft. User Side 75 61 67 67 270 24 Port Cat6 12U,15U & Jack 42U Rack Panel Requirement 4 2 3 2 3 2 3 2 13 8 Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 9 of 30 Schedule of Requirements Active Components 1. Equipment Core Switch Brief Description Modular Core Switch (24 port copper and 16 port fibre after configure in Stacking) 16 Ports x 1000 MBPS FO Modules 24 Port 10/100/1000BaseT (Gigabit Ethernet) Quantity 1+1 Unit Nos 2. Edge Switches Modular, expandable design with Fast Ethernet Switch : 24 10/100 Mbps ports with 2 x 1000 BaseT module or 2 SFP slots. 21+13 Nos 3. 4. 5. 6. SX modules LX Modules Wireless Network Management Software 14+20 2 14+14 1 Nos Nos Nos Nos 7. Firewall( Cisco( Should not be Linksys)/UTMJ Juniper/Cyber oam) 1 KVA Offline UPS 3 KVA Online UPS 1000BaseSX Modules 1000Base LXModule Wireless Access Points Windows based NMS with centralized control with multiuser, multivendor Management framework based on client-server architecture to manage , monitor and transfer complex network data into graphical business centric information for 100 devices 4 Gigabit ports unlimited users license and 500 Content and Service license. 1 Nos 8. 9. Sinewave type 8+8 Sinewave type 1 Passive Components S.No 1 2 3 Description 4 pair, Cat 6 UTP Cable (1000 ft ) 24 port, Cat 6 Loaded modular Jack panel for UTP termination at Rack end 4 pair, cat 6 UTP Patch cord Rack end for data UoM Nos Qty 98 Nos Nos 35 662 Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 10 of 30 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 connectivity- 4ft Cat 6 Information Outlet User end British style single port face plate (3X3) 4 pair, cat 6 UTP Patch cord user end for data connectivity- 7ft 3x3, PVC Gang Box, Deep Inside 6-core MM 50/125 micron OM3 Outdoor Fiber Cable 19-inch rack mount patch panel, 1U, drawer style Unloaded 6-fiber, SC-Style, Multimode adapter plate Blank adapter plate SC-Style Pigtail, 50/125, Multimode, 1.5 meter SC-LC Style Multimode 50/125 micron Duplex Patch Cord, 3 Meter 12 U Wall mount Rack with 2 FAN, 6 port 5/15 Amp PDU and 2pkt Hardware 15 U Wall mount Rack with 2 FAN, 6 port 5/15 Amp PDU and 3pkt Hardware 42 U Networking Rack ( 600 X 1000 mm ) with 4 FAN at top mounted, Front Glass door, Rear perforated door, vertical cable manager for patchcord management, 10 port 5/15Amp PDU and 5PKT Hardware. 1U closed PVC Cable manager Nos Nos 662 662 Nos Nos MTR 662 662 1500 mtr Nos Nos Nos N os 26 34 18 204 Nos 34 Nos 16 Nos 1 Nos Nos 2 41 Supply of 50mmx50mm PVC Slotted Channel, duct type, Color gray MTR Supply of 32mm PVC Conduit/Channel Flexible pipe MTR Supply of 25mm PVC Conduit, ISI mark MTR Any other hardware such as UTP/fibre Cable marker, fiber /copper/PVC, HDPE fittings & consumables etc. to make system complete Project Management Charges Site Certification for 20 Years (Including Db and DbM losses for fiber and Omni scanning reports for copper connectivity.) 600 1500 800 Each 1 Each 1 List Of Approved Brands For Active Product: Enterasys / Cisco( Should not be Linksys )/Avaya/juniper. All Switches & Access points must be of the same make. For Passive Product: Tyco / Digilink /Systimax/Panduit Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 11 of 30 For UPS Product : APC /Emerson/Eaton For Network Rack: HCL / Emerson/Rittal For Firewall/ UTM :- Juniper / Cisco( Should not be Linksys) / CyberoamConnectivity of Distribution Switches A. Active LAN Design It is proposed to deploy 2 fixed configuration layer 3 switch configured in stacking to act as core switch . It will be located in Server Room in admin building. Each building will have 24 port 10/100/1000 cascaded switches to provide connectivity to the end users. The number of switches in the particular building/section will depend on the number of users in the building. All the servers are proposed to be centrally located at Server Room in admin building. Bhagat Phool Singh Mahila University Sonepat, Haryana may run IP Telephony and Video Conferencing on the Network at a later date. Necessary infrastructure for the same is not provided in proposed network, but it may be acquired by Bhagat Phool Singh Mahila University Sonepat Haryana as and when the need for the same arises. Basic levels of Policies and Quality of Service will be implemented on the Network to enable the Network to give priority to critical traffic. The network solution must be provided taking this fact in account. The necessary plan for the LAN connectivity is briefed below: 1. 2. 3. 4. 5. 6. 7. The new Gigabit Ethernet based Core switch has to be connected with the previous LAN so that the previous LAN and the new LAN are both integrated. Splicing/Fusion for OFC will have to be done at both the ends for the above mentioned sites. The required SMF OFC is already present in above said places but needs to be spliced. For the indoor connectivity within the hostels, wireless solution will be adopted. However Access Points to be installed in the halls should follow extended basic service set mode i.e. should be connected through CAT 6 Ethernet terminating at the edge switch. Only wireless Access Points need to be installed through Edge switches. For the indoor wireless in the hostels, the IEEE Wireless standard of 802.11g shall be adopted. All the Access Points should have the facility of Power over Ethernet. The new edge switches must be configured such that different Departments form different VLANs B. WAN Design The WAN infrastructure will be mainly used for providing Internet connectivity to students and faculties. It will also be used for remote access to lecture notes, assignment submission, etc. Our Institute has 10 MBPS to be upgrade upto 1Gbps (in the next six months ) leased line on local loop for Internet connectivity. Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 12 of 30 C. Security Setup It is proposed to use 4 Gigabit ports hardware firewall for securing the campus wide LAN. The DMZ interface will be used for hosting publicly accessible servers while other servers will be part of secure network. The detailed diagram is given in Annexure -I GENERAL TECHNICAL SPECIFICATIONS FOR THE SCHEDULE The following are the basic guidelines for the various components and bidders to recommend right products and submit the bid. (A) ACTIVE COMPONENTS SPECIFICATIONS 1. CORE SWITCH Switch 1 The central switch should have following features: Hardware Performance Required: The Switch Should be stackable 24 Ports of 10/100/1000 with 4 Fiber GBICs. Switch should have a switching fabric backplane of minimum 32 Gbps for 24 ports switch respectively. Switch should support performance rating of 35 Million pps for 24 ports switch respectively. It should be possible to have the VLAN configuration done centrally. Layer 1 Feature: Support for 100BASE-FX , 10/100 BASE-TX , 10/100/1000BASE-T , 1000BASE-SX,-LX full duplex Layer 2 Features: Minimum 256 VLANs should be supported Support for 4096 VLANs per switch Link Aggregation should be based on IEEE 802.3 ad. Minimum 4800 MAC Address support. 802.3x flow control 802.1P Prioritization and 802.1q VLAN Tagging support. 802.1D IEEE 802.1s, IEEE 802.1w. Jumbo Frame support. 802.1Q VLAN Trunking. Layer 3 Features Should support IP routing protocols Static, Routing Information Protocol [RIP], RIP2, BOOTP. IGMP v1, v2, and v3 IGMP filtering on access and trunk ports Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 13 of 30 IP multicast routing protocols: DVMRP, PIM Version 2 (Sparse Mode & Dense Mode) Multicast Source Discovery Protocol (MSDP) Full Internet Control Message Protocol (ICMP) support ICMP Router Discovery Protocol Traffic Management Support for L2/L3/L4 Ingress Traffic Policing. Should support traffic policing with higher level of granularity with 64 Kbps traffic flow for both Fast Ethernet and Gigabit Ethernet ports. Single console port and single IP address to manage all features of the system Manageable through network management software on a per-port and per-switch basis, providing a common management interface for routers and switches SNMP v1, v2, and v3 instrumentation, delivering comprehensive in-band management Command-line interface (CLI)-based management console to provide detailed outof-band management Remote Monitoring (RMON) software agent to support four RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis Analysis support, including ingress port, egress port, and VLAN SPAN Advanced Security TACACS+ /RADIUS, which enable centralized control of the switch and restrict unauthorized users from altering the configuration. Standard and extended ACLs on all ports. 802.1x user authentication. Router ACLs (RACLs) on all ports (no performance penalty). VLAN ACLs (VACLs). Private VLANs (PVLANs) on access and trunk ports. Dynamic Host Configuration Protocol (DHCP) snooping. Protection against Unicast, Multicast & Broadcast Storms on a per port basis. DHCP relay functionality should be provided. Layer 2-4 ACL on all ports. Support for port security to prevent unauthorized stations from accessing the switch by restricting the number of MAC addresses allowed to access the port as well as by statically configuring the MAC address. Support for IGMP and IGMP Snooping. MAC Address Based Security (802.1x). Radius Support.. Switch 2 Hardware Performance Required: The Switch Should be stackable Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 14 of 30 Switch should be 12 ports SFP based for 12 Ports of 1000 MBPS Fiber or 1000 Giga. Switch should have a switching fabric backplane of minimum 32 Gbps for 12 ports switch respectively Switch should support performance rating of 35 Million pps for 12 ports switch respectively. It should be possible to have the VLAN configuration done centrally. Layer 1 Feature: Support for 100BASE-FX , 10/100 BASE-TX , 10/100/1000BASE-T , 1000BASE-SX,-LX full duplex Layer 2 Features: Minimum 256 VLANs should be supported Support for 4096 VLANs per switch Link Aggregation should be based on IEEE 802.3 ad. Minimum 4800 MAC Address support. 802.3x flow control 802.1P Prioritization and 802.1q VLAN Tagging support. 802.1D IEEE 802.1s, IEEE 802.1w. Jumbo Frame support. 802.1Q VLAN Trunking. Layer 3 Features Should support IP routing protocols Static, Routing Information Protocol [RIP], RIP2, BOOTP. IGMP v1, v2, and v3 IGMP filtering on access and trunk ports IP multicast routing protocols: DVMRP, PIM Version 2 (Sparse Mode & Dense Mode) Multicast Source Discovery Protocol (MSDP) Full Internet Control Message Protocol (ICMP) support ICMP Router Discovery Protocol Traffic Management Support for L2/L3/L4 Ingress Traffic Policing. Should support traffic policing with higher level of granularity with 64 Kbps traffic flow for both Fast Ethernet and Gigabit Ethernet ports. Single console port and single IP address to manage all features of the system Manageable through network management software on a per-port and per-switch basis, providing a common management interface for routers and switches SNMP v1, v2, and v3 instrumentation, delivering comprehensive in-band management Command-line interface (CLI)-based management console to provide detailed outof-band management Remote Monitoring (RMON) software agent to support four RMON groups (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 15 of 30 Analysis support, including ingress port, egress port, and VLAN SPAN Advanced Security TACACS+ /RADIUS, which enable centralized control of the switch and restrict unauthorized users from altering the configuration. Standard and extended ACLs on all ports. 802.1x user authentication. Router ACLs (RACLs) on all ports (no performance penalty). VLAN ACLs (VACLs). Private VLANs (PVLANs) on access and trunk ports. Dynamic Host Configuration Protocol (DHCP) snooping. Protection against Unicast, Multicast & Broadcast Storms on a per port basis. DHCP relay functionality should be provided. Layer 2-4 ACL on all ports. Support for port security to prevent unauthorized stations from accessing the switch by restricting the number of MAC addresses allowed to access the port as well as by statically configuring the MAC address. Support for IGMP and IGMP Snooping. MAC Address Based Security (802.1x). Radius Support.. 2. Edge Switch Specifications 1. Hardware configuration: 24 auto-negotiating 10 BASE-T/100BASE-TX ports configured as Auto Sensing 2 x Gigabit uplink ports (2x10/100/1000BASE-T uplink ports with inbuilt 2 x GBIC/SFP slots) 2 x 10/100/1000 Mbps ports (minimum). 2.Multicasting: High-bandwidth video traffic is optimized so that it does not impact other applications on the network. 3.QoS: Smartports support to detect end devices connected to network & accordingly should configure QoS for different type traffic flow of connected device. 4.Performance: 24-ports x 10/100 & 2 x 1000 BaseT /Sx 16 Gbps switching capacity or maximum forwarding bandwidth 6.5 million packets per second wire-speed forwarding rate Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 16 of 30 4-Gbps duplex uplink performance 8000 MAC address supported 255 VLANs (in range of 1000) 4 queues per port Shaped Round Robin (SRR) queuing 5. Environmental Requirement: Operating Temperature: -5ºC to +45ºC Operating Humidity: 30 to 75%. (non-condensing) 6. Safety Agency Certifications: Immunity: UL to UL 60950-1 CUL to CAN/CSA C22.2 No. 60950-1 TUV/GS to EN 60950-1 CE Marking CB to IEC 60950-1 with all country deviations NOM 7. Power supply: AC line frequency 50/60 Hz Input Voltage 100 to 240 VAC (auto-ranging), Power consumption 65 watts. 8. Standards: IEEE 802.1d Spanning Tree Protocol IEEE 802.1p Class of service (CoS) classification IEEE 802.1q VLAN IEEE 802.1w Rapid Convergence Spanning Tree Protocol IEEE 802.1x Port Access Authentication IEEE 802.3ad Link Aggregation Control Protocol (LACP) IEEE 802.3af Power over Ethernet IEEE 802.3x full duplex on 10BASE-T, 100BASE-TX, and 1000BASE-T ports IEEE 802.3u 100BASE-T IEEE 802.3ab 1000BASE-T IEEE 802.3z 1000BASE-X IGMP (v1, v2, and v3) snooping Secure Sockets Layer (SSL) SNMPv3 9. Management: GUI device Management Software Management using centralized network management software SNMP v3 compatibility Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 17 of 30 3 Firewall / UTM Specifications: Hardware Architecture -: 1. The appliance should have Multi-bus system Architecture a Hardware platform must be 64 bit 2. The appliance should have Firewall, VPN, Full content and Services functionality 3. Should support unlimited Users/Nodes 4. Content and Service license of 500 Users for 1 year minimum. PERFORMACE SPECIFICATIONS -: The TCP Firewall Throughput should be 1.8 Gbps & UDP 2.5 Gbps b c d e f g h Must be based on Multicore Parallel Processing Architecture 6 number of 10/100/1000 interface with Hardware Bypass 15,000 number of new connection 2.6 Gbps UDP Firewall throughput and 1.8Gbps TCP Firewall throughput 850Mbps IPS throughput 450Mpbs Antivirus throughput 350Mpbs UTM throughput 1. Should support concurrent threat mitigation throughput (Firewall + Content and Service) Up to 375 Mbps with the help of additional hardware 2. Should Support 3DES/AES VPN Throughput up to 200 Mbps 3. Should Support upto 5,00,000 Concurrent Sessions 4. Should have 6 10/100/1000 integrated gigabit ports 5. Should support inbuilt support for IPSEC VPNs with DES/ 3DES and AES support 6. Should support atleast 4000 VLANS 7. Network Time Protocol (NTPv3) Client 8. Should have console port (RJ45/DB9), 2 USB Ports Other Hardware Requirements 1. The device should support minimum of 6 10/100/1000 Gigabit interfaces Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 18 of 30 2. The firewall should have 1 Gb of DRAM Software Requirements The firewall should support the following software features. RIP Version 2 passive mode support Support for OSPF Support for LAN Based Failover Support for VLAN (802.1Q trunking) DHCP server The firewall should be RFC 1918 compatible with support for Static & Dynamic Network Address Translation and also Port Address Translation Support for bi-directional NAT Split tunneling VPN support The firewall should support configurations through a command Line interface as well as a GUI based Support for proxy Support for NAT-T (NAT Transparency) Support for fix-up (to support fix-up protocols like H.323, SIP, FTP etc) Network Management 1. Telnet client and server functionality support is must. 2. The firewall must support FTP or TFTP for easy software upgrades over the network. 3. Dedicated Out-of-Band Management Interface 4. Network management services should be provided using standards based protocols like SNMP & SNMP V2 . The following MIBs should be supported : Should support SNMP, SNMP Trap, and Custom MIB, Syslog. 5. Real time alerting & notification features and Syslog support. Fire walling features support include: Outbound ACLs Time-based ACLs Configuring NAT policy should not be required to pass traffic through the device. Option to pass traffic between interfaces with the same security level URL filtering performance enhancements VPN Features support include -: Are You There (AYT) support for CSA TCP based NAT transparency VPN Hub, client-to-client routing; traffic u-turn on interface Support PPTP , L2TP, IPSEC, SSL VPN Support for Deffie Hellman Group, 1,2,5,14,15,16 OSPF routing and QoS over VPN tunnels IKE DoS safeguards (Aggressive Mode knob) Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 19 of 30 Support for n-tiered X.509 certificate chaining Manual X.509 certificate enrollment (PKCS 10/7 support) 4096-bit RSA support Authentication, Authorization and Accounting (AAA) Features: Support multiple RADIUS accounting servers Accounting for management traffic - generates AAA accounting records for management connections to the device. Native Window NT/Active Directory user authentication support (VPN only) Native SDI/RSA SecurID user authentication support (VPN only) Content and Service features support includes -: 1. 2. Should support Gateway level Antivirus, Antispam, Anttispyware, Webfitering, Mail filtering etc. Should support Zero-Downtime Software Upgrades Regulatory and Standards Compliance Safety -: UL 1950 Firewall , IPS , Content and Services features (Gateway Antivirus, Antispam, webfiltering) should be integrated on one appliance and should store database for webfiltering, IPS, Antivirus on box and should not query any third party or device. 5: Wireless Access Points 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. Frequency : 2.400-2.4835 GHZ ISM band Wireless operating range of atleast 70 meters indoor AP should have integrated antenna. Security features including MAC address filtering through Wireless LAN, port based authentication with RADIUS client Web based Network Management configuration Backward compatible with IEEE 802.11b Configurable to throughout of 54 Mbps/11 Mbps RF Technology : IEEE 802.11g + 802.11 i Should support Roaming when configured in Infrastructure of Extension basic set service mode Operating Channels : 3 Non-overlapping channels and 10 overlapping channels Extension Port : 10/100Base T Ethernet Access Point must support Infrastructure as well as Extension basic service set mode over Ethernet. Standard Bridging Capability 128, 64 and 0-bit WEP Encryption. MAC Filtering support for clients WPA security support Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 20 of 30 17. 18. 19. 20. 21. 22. 23. 24. 25. 26. (B) Full driver support for leading Operating systems. Auto sensing and switching. Static as well as dynamic IP addressing Warranty: 3 years on-site warranty. The Access Points should not interfere with each other hence configured at appropriate Channels Roaming from one wireless cell to another in the building should be possible without making any changes. The vendor shall provide all other equipment required to provide the integrated solution mentioned above. The vendor shall also provide testing of the site over high load. All Radio devices must comply to FCC regulations. The Access Points must be configured with Power Over Ethernet. PASSIVE COPPER COMPONENTS SPECIFICATION Cabling System and Component Specifications 1. Outdoor Fiber optic Cable Cable Type Fiber Type No. of cores Armor Cable Construction Type Attenuation @ 1300nm @850nm Tensile rating Maximum Crush Resistance Operating Temperature 3. 6-core, Multi Mode, armored Loose-tube, Gel filled Multi Mode, 50 / 125 microns OM3 6 Corrugated Steel Tape Armor BELLCORE GR 20 / IEC 794-1 <=0.6 db/KM <=2.4 dB/KM 1250N 3000 -20 Degree C to +70 Degree C SC Style Fiber Optic Pig Tails Fiber Optic Patch cord Attenuation Return Loss 3 UTP Cabling System Type Compliance LC/MTRJ/SC, MM <=0.3 dB >=20 dB Unshielded twisted pair cabling system, Certificate by Intertek (ETL) for the 4-Connectors Compliance Compliance Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 21 of 30 Networks Supported channel testing to the Cat 6 Cabling system as per the ANSI/TIA 568 C.2 & as well as the ISO 11801 standards up to 600 MHz. 10 / 100 Ethernet, 155 Mbps ATM, 1000 Mbps IEEE 802.3ab Ethernet, and proposed Cat 6 Gigabit Ethernet Approvals TIA / EIA 568-B.1 ETL Verified IEEE 802.3ab Zero-bit Error, ETL verified Warranty 25-year systems warranty; Warranty to cover Bandwidth of the specified and installed cabling system, and the installation costs Performance Attenuation, Pair-to-pair and PS NEXT, ELFEXT characteristics to and PSELFEXT, Return Loss, ACR and PS ACR for 4be provided along connector channel with bid 1. UTP Cable Type Material: Conductors Insulation Seperator Jacket Approvals Operating temperature Frequency tested up to Packing Delay Skew Impedance Performance characteristics to be provided along with bid ROHS Compliant 2. UTP JACKS Type Unshielded Twisted Pair, Category 6, TIA / EIA 568-C.2 & ISO/IEC 11801 Compliance 23 AWG solid bare copper Polyethylene Cross-member (+) fluted Spline. Flame Retardant PVC UL Listed ETL verified to TIA / EIA Cat 6 -20 Deg. C to +60 Deg. C 600 MHz Box of 305 meters 45ns MAX 100 Ohms + / - 15 ohms, 1 to 600 MHz. Attenuation, Pair-to-pair and PS NEXT, ELFEXT and PSELFEXT, Return Loss, ACR and PS ACR ROHS/ELV Compliant PCB based, Unshielded Twisted Pair, Category 6, TIA /EIA 568-C.2 and ISO/IEC 11801 Compliance Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 22 of 30 Modular Jack Wire terminal Accessories Housing 110 Blocks Jack contacts Wiring blocks 750 mating cycles 200 termination cycles Integrated bend-limiting strain-relief unit for cable entry Integrated hinged dust cover Support cable pair termination process on the jacks at 90 degree angle. Bidder should have a mechanism to maintain the quality of the termination ir-respective of the skill level of the termination staff. Polyphenylene oxide, 94V-0 rated. polycarbonate, 94V-0 rated Beryllium copper, plated with 1.27 mm [.000050] thick gold in localized area and 3.81 mm [.000150] minimum thick tin-lead in solder area over 1.27 mm [.000050] minimum thick nickel under plate Polycarbonate, 94V-0 rated Approvals (a) UL Listed / CSA Approved (b) ETL verified to TIA / EIA Cat 6 Performance Attenuation, NEXT, PS NEXT, FEXT and Return Characteristics to Loss be provided with bid ROHS Compliant ROHS/ELV Compliant 3. UTP JACK PANEL Type 24-port, Modular, PCB based, Unshielded Twisted Pair, Category 6, TIA / EIA 568-C.2 and ISO/IEC 11801 Ports 24 Port arrangement Configured as 6 Port Module with individually replaceable CAT-6 Jacks Circuit Front of each module shall be capable of Identification accepting 9 mm to 12 mm labels Port 9mm or 12mm Labels on each of 24-ports (to be Identification included in supply Modular Jack 750 mating cycles Wire terminal 200 termination cycles Accessories Integrated bend-limiting strain-relief unit for cable entry Materials Compliance Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 23 of 30 Housing Polyphenylene oxide, 94V-0 rated Wiring blocks Polycarbonate, 94V-0 rated Jack contacts Beryllium copper, plated with 1.27 mm [.000050] thick gold in localized area and 3.81 mm [.000150] minimum thick tin-lead in solder area over 1.27 mm [.000050] minimum thick nickel under plate Panel Black, powder coated steel Approvals UL listed / ETL Verified Termination Pattern TIA / EIA 568 A and B; ROHS Compliant 4. ROHS/ELV Compliant PATCH CORD Type Conductor Length Plug Protection Unshielded Twisted Pair, Category 6, TIA / EIA 568-C.2 & ISO/IEC 11801 24 AWG 7 / 32, stranded copper conductors 100 Ohm 4 feet, 7 feet, 10 feet Warranty Insulation Transparent Slim boot 25-year component Flame Retardant Polyethylene ROHS Compliant ROHS/ELV Compliant 5. Compliance FACE PLATE Type Material No. of ports Single Gang ABS / UL 94 V-0 One/Two ROHS Compliant ROHS/ELV Compliant Compliance NOTE: 1. The all passive components quoted should be of one make and compatible with each other and the active components so that the required certification can be provided with the OEM. 2. All the components in the CAT-6 system should be verified from ETL/UL (Third party) for the system performance. Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 24 of 30 Cabling Installation, Acceptance, Warranty and Documentation Specifications: Please confirm Compliance for complete set of Implementation Specifications. By writing “Yes” it will be assumed that the bidder confirms compliance with all the clauses and guidelines given here, unless deviations has been sought in writing against each/any guideline. 5.TECHNICAL TERMS & CONDITIONS & SPECIFICATIONS Terms and Conditions a) Performance of the on-site assembly, commissioning and startup of the equipment. Including the following: i. Installation, configuration and Satisfactory Customization of the parameters of the Layer3 Core Switch including the cost for the configuration and customization of the layer 3 Module or the Policy Module (where applicable); ii. Installation, Configuration and Satisfactory Customization of the parameters of the Layer 2 Access Switches. iii. Installation, Configuration and Satisfactory Customization of the parameters of the Firewall and other security products as per defined policies; b) Furnishing the detailed operation and maintenance manuals for each item of supply; c) The equipment offered for supply must be of the most recent series models incorporating the latest improvements in design the models should have been released on or after 2009.All make latest not at the end of life(obsolete) and be in satisfactory operations for minimum 6 months as on date of bid opening. d) All the type of Switches (Core, Distribution and Edge), Firewall, Wirelless access points should be of the same make/brand. e) Training of the Purchaser’s personal at the purchaser’s site in the installation and operation of the hardware, utilities and all contracted software f) Maintenance and repair of the equipment at each location during the warranty period including supply of all spares. This shall not relieve the supplier of any warranty obligations under this contract. g) On-site assembly, commissioning of the network. h) Critical Equipment and spares should be maintained at BPSMV or at vendor’s local office to ensure immediate rectification of critical failures. i) After complete system installation, vendor should arrange for softcopy of all configurations of all the equipments deployed by the vendor. j) Furnishing the documents with following details after successful implementation Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 25 of 30 of the structured Cabling System to be provided in both hard copy and soft copy in CD-ROM in standard format; 1 Detailed connectivity diagram; 2 Raceway/pathway diagram; 3 Cable and Fiber patching details; 4 Naming and labeling details; 5 Cable scanning and test results. NOTE: 1 2 All passive components quantities shown in the bid document are indicative and hence may vary as per actual requirements. The vendor will assess the exact distances for OFC and UTP cabling involved at the time of site survey before the submission of their bids. The final payment for cabling will made in accordance with their financial bids, hence vendors must quote for actual quantities of UTP and OFC cabling requirements in their bids. The vendor will configure the Layer 3 switches to provide isolation between different departments / sections based on VLAN technology. TECHNICAL SPECIFICATIONS General Scope of Work 1 Suitable solution to the campus wide network should be quoted. 2 Supply, Install the Network Switches, firewall etc., and associated equipments as per the solution 3 Supply, Install the cabling components and associated equipments as per the solution 4 Test connectivity end-to-end and commission the system for proper connectivity as a part of QA/QC and UAT procedures documentation of the system installed and commissioned. Provide the details of the VLAN and security policy to be implemented, and its implementation. Objectives: The new network should be reliable, scalable, robust, and manageable with a futuristic scope of expansion. Functional Requirements: 1. The network should continually add capacity in terms of users and bandwidth without any fundamental change in the architecture. 2. The network by no means should disrupt the previous operational network except for addition of users. 3. The network should handle changes without disrupting the user environment. 4. It should cater to hi-end design applications and for future educational engineering institute. Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 26 of 30 5. The network should have absolute security in terms of Internet, Wireless accesses and Intranet. Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 27 of 30 Installation Specifications Cables should be ducted and directly buried at a minimum depth of 1m above a bed of sand. The cable shall be covered by semi-circular concrete shells/bricks. Soil shall be filled up to a height of 250mm above the cable and covered with warning tape. The remaining height of the trench shall be filled back with extracted material from the trench. Cable bend radius should be as per the norms and cable markers should be provided every 100 meters or at bends which ever is less. In addition, each cable type shall be terminated as indicated below: 1 Cables shall be laid and terminated in accordance with the recommendations made in the TIA/EIA document, manufacturer’s recommendations and/or best industry practices. 2 Removal of Armored core at the termination enclosure/ shelf should not be more than the required length for terminations of Fiber cores. 3 Bend radius of the cable in the termination area shall not be less than 20 times the outside diameter of the cable. 4 Buffer Tubing should be used before the terminations or splicing at the enclosure end. 5 Cables shall be neatly clamped on the walls near the terminations boxes or shelves in the racks. 6 Each cable shall be clearly labeled at the enclosure end. Cables labeled within the shelf or wall mount enclosures, where the label is obscured from view shall not be acceptable. 7 Additional OFC of atleast 3m of length should be left at the enclosure end on both sides for future shifting of Rack/Wall enclosures. 8 It will be the responsibility of the vendor to take necessary permissions for Road digging and the roads should be concreted after the cabling has been done. It is advisable to carry the digging work during night hours. Documentation Specifications Please Confirm Compliance Yes / No The successful bidder shall after completion of the installation, submit a detailed documentation of the cable plant. The documentation shall cover, in the minimum, the following 1 As-built diagrams of the campus Network, with building and floor wise distribution of users and connectivity 2 Test results for UTP links 3 Consolidated BOM with manufacturer’s part Nos. and quantities used Warranty certificate from OEM supplier Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 28 of 30 Warranty Specifications: Please Confirm Compliance Yes / No BPSMV Haryana, seeks warranty for the installed cable plant from the OEM equipment supplier. Bidder shall ensure that the OEM norms for supply, installation, testing and documentation as specified by the OEM supplier shall be adhered to, provided those are in line with TIA / EIA standards and BPSMV, Haryana, requirement AND specifications. The warranty shall be provided by the OEM vendor to BPSMV, Haryana and shall not be administered in India for the authenticity of the process. It should be evaluated by an independent center which can’t be influenced by the in country people. The duration of the warranty shall be for a minimum of 20 years for the passive components, 03 years for the active components and shall cover the system performance, application assurance. A sample warranty certificate shall be provided by the bidder along with the bid. SECTION - IV 1. General Terms and Conditions 1.1 The prices should be FOR Bhagat Phool Singh Mahila Visjhwavidalya ,Khanpur Kalan Sonepat,Hayana. 1.2 The BPSMV will provide D certificate. The rate of applicable sales tax, octroi etc should be clearly mentioned. However, BPSMV is entitled to issue educational concession tax certificate also. 1.3 The BPSMV will not pay any advance. The payment terms should be mentioned clearly. 1.4 Warranty for each item in the system should be at least for 3 years from the date of commissioning. 1.5 The selected vendor will be required to furnish bank guarantee for 10% value of total order for a period of 3 years after installation and commissioning. 1.6 The BPSMV have if any problem in the network systems problem must be rectified with in 24 hours after submission of the complaint. 1.7 The validity of offer should be at least 60 days after opening the technical bid. 1.8 The order must be executed within the stipulated period. In case the vender is not able to bring the material within the stipulated period, and not install it successfully in the stipulated period a penalty @ 2% of the total fixed cost of the equipment will be levied on the vender. 1.9 Performance Security in the shape of bank guarantee should remain valid for a period of sixty days beyond the date of completion of all contractual obligations of the supplier including warranty obligations. 1.10Situations in which bid security will stand forfeited i.e. if a bidder withdraws its bid during the period of bid validity specified by bidder on the bid form, and in the case of successful bidder, if the bidder fails to sign the contract in accordance with clause of tender or fails to furnish performance security in accordance with the tender. 1.11The Resultant contract will be interpreted under Indian laws. 1.12Prices should be quoted in Indian Rupees. Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 29 of 30 1.13All the pages of the bid, except for printing literature shall be initialed by the person or persons signing the bid. Any erasures or overwriting shall be valid only if they are initiated by the person or persons signing the bid. 1.14Payment terms The payment will be released as per the following: 50% on successful delivery and physical inspection, 40% on successful installation and acceptance and 10% against Bank Guarantee of equivalent amount for warranty period. Tender Document for Network Connectivity at Bhagat Phool Singh Mahila University Sonepat Haryana : Page 30 of 30 ANNEXURE I INTERNET BPSMU LAN/WAN INTERFACE ROUTER FIREWALL CORE SWITCH SWITCH Or multiple interface Firewall with VLAN PROXY PROXY DNS ACAD WEB MAIL Global Pool in DMZ LAN WEB