Campus Core Network Intro
Southend Borough Council’s New Network has to be World Class and have a design life expectancy of at least 10 years. The Core of the network must be
resilient and have redundancy built in. Initially the Core must be able to perform all the necessary tasks that SBC require as well as having expansion
capability for near, medium and long term future use. The Core will be the centre of a Hybrid Cloud System and must have the appropriate flexibility to
deliver this. One of the main requirements of this network is that it is a working on a converged architecture design.
Campus Core Network Requirements
Ref
Area
Requirement
Importance/
Weighting
CAMPUS_CORE_01
Management
Mandatory
CAMPUS_CORE_02
Network
Performance
CAMPUS_CORE_03
Scalability and
Interface
Performance
Chassis
Performance
High
Availability
Advanced
Access
Network
Management
Services
Network Core should be managed using 1 IP address (Core
Virtualization)
All uplinks from access should forward traffic (no spanning tree
blocked ports). Sub-second network convergence and no need
for First Hop Redundancy Protocols at the Core.
Modular platform that supports 10G/40G (now) and 100G
(future). 10G uplinks from the access to the Core need to be
deployed.
Chassis performance needs to scale up to 11.4 Tbps and 880G
per slot for future upgrades
Active/Standby Dual Supervisor support. Active/Active dualchassis forwarding support i.e. “Core Virtualization”.
The Core platform needs to support management of access
switches as remote line cards for future deployments.
The Core platform needs to support special modules to support
additional services (Wireless, Deep Packet
Inspection/Application Visibility, Firewall).
Support of 40G to 10G Adaptor.
Mandatory
Support of traffic inspection that takes into account every packet
in a flow providing application visibility.
Mandatory
CAMPUS_CORE_04
CAMPUS_CORE_05
CAMPUS_CORE_06
CAMPUS_CORE_07
CAMPUS_CORE_08
CAMPUS_CORE_09
Flexible
Adoption of
40G Ethernet
Traffic
Monitoring/C
Mandatory
Mandatory
Mandatory
Mandatory
Mandatory
Mandatory
Supplier Solution
Ref
CAMPUS_CORE_10
Area
apacity
Planning/Visi
bility
Online
Diagnostics
Requirement
The switch platform proposed should be able to test and verify
its hardware functionality while the switch is connected to a live
network.
Importance/
Weighting
Supplier Solution
Mandatory
Campus Access Network (Switching)
To ensure that SBC and its staff can function at the required levels the Civic Centre is to have new fibres run to each floor allowing for a minimum of a 10
Megabit backbone across the LAN. The equipment used must allow for current requirements and future expansion such as higher speed to the desktop
and Wave II wireless. The switching must not produce any inherent delays in the overall network. The whole network must be manageable as a” single
pain of glass”
Campus Access Network (Switching)
Ref
Area
Requirement
Importance/
Weighting
ACCESS_SWITCHING_01
Deployme
nt
Mandatory
ACCESS_SWITCHING_02
Interface
Downlinks
ACCESS_SWITCHING_03
Interface
Uplinks
Platform proposed should be able to support stacking and
allow to mix different types of interfaces within a stack
(copper, fibre and different downlink/uplink speeds)
1G downlink copper interfaces required for this deployment.
In addition to that the switching family proposed needs to
support also fibre downlinks (1G,10G) and 2.5G, 5G copper
interfaces (for future mixed stack deployments). These
interfaces can be supported by other models of the same
switch family,
Uplinks should be modular and 2x10G to the Campus Core.
Lower and Higher speed uplinks need to be listed for the
Mandatory
Mandatory
Supplier Solution
Ref
ACCESS_SWITCHING_04
ACCESS_SWITCHING_05
ACCESS_SWITCHING_06
ACCESS_SWITCHING_07
ACCESS_SWITCHING_08
ACCESS_SWITCHING_09
ACCESS_SWITCHING_10
Area
High
Availabilit
y (Power)
Traffic
Monitorin
g/Capacity
Planning/
Visibility
Power
Over
Ethernet
HW
Performan
ce & OS
Wireless
Stack
Managem
ent, High
Availabilit
y,
Convergen
ce &
Backplane
Performan
ce
Online
Diagnostic
s
Requirement
switching family proposed (for future mixed stack
deployments)
Redundant Power supply support and power should also be
able to be shared across stack members
Importance/
Weighting
Mandatory
Traffic inspection that takes into account every packet in a flow
providing L2-L7 visibility is required. Also native Wireshark
support on the switching platform proposed is required for
additional traffic inspection and troubleshooting.
Mandatory
PoE is required (15W) for the deployment. Support for 30W or
60W PoE is required for the switching family proposed (for
future mixed stack deployments).
Multicore CPU and Modern/Modular Operating System that
supports hosted applications and separate memory allocation
for each process.
The access platform should support integrated wireless
controller function and RFID tag tracking. Application visibility
for wireless traffic should be achieved by using Deep Packet
Inspection technology in addition to technologies such as
Netflow.
Plug & Play stack member removals and additions. Very fast
stack convergence upon stack main unit failure (few
milliseconds). Stack performance in terms of bandwidth needs
to be provided and explained.
Mandatory
The switch platform proposed should be able to test and verify
its hardware functionality while the switch is connected to a live
network.
Mandatory
Mandatory
Mandatory
Mandatory
Supplier Solution
Campus Access Network (Wireless) Intro
All areas of the Civic Centre must have a coherent wireless solution that can be centrally managed and able to use the latest technology and AC Wave 11
when available.
Campus Access Network (Wireless) Requirements
Ref
Area
Requirement
Importance/
Weighting
ACCESS_WIRELESS_01
Deployment
Mandatory
ACCESS_WIRELESS_02
Controller
Performanc
e
Access Point
The solution needs to be controller based on-premise and support
802.11ac standard.
The controller needs to support minimum the following specs;
20Gbps throughput full duplex, up to 1500 access points, up to
20,000 clients and 4096 VLANs.
Modular Access Point platform to support 802.11ac and 802.11ac
Wave 2. Any additional modules supported need to be mentioned
and what functionality they support.
The controller deployment needs to support high availability and
seamless operation upon failure.
ACCESS_WIRELESS_03
ACCESS_WIRELESS_04
High
Availability
Sub-second access point and client failover for uninterrupted
application availability. Redundant 1 Gigabit Ethernet or 10 Gigabit
Ethernet connectivity
Solid-state device-based storage - no moving parts. Redundant, hotswappable power supply with no incremental system downtime.
Enhanced system uptime with fast system restarts.
Mandatory
Mandatory
Mandatory
Supplier Solution
Ref
Area
Requirement
Importance/
Weighting
ACCESS_WIRELESS_05
Application visibility for wireless traffic should be using Deep
Packet Inspection technology for additional granularity. Support for
Mandatory
ACCESS_WIRELESS_09
Traffic
Monitoring/
Capacity
Planning/Vi
sibility
Interference
and Rogue
AP
protection
Mixed client
Environmen
t
Performanc
e
High
Density
Environment
Performance
& High
Performance
Video
Support
Analytics
ACCESS_WIRELESS_10
ACCESS_WIRELESS_11
Services
Management
ACCESS_WIRELESS_12
Miscellaneo
us Features
ACCESS_WIRELESS_06
ACCESS_WIRELESS_07
ACCESS_WIRELESS_08
marking, prioritizing, and blocking to conserve network bandwidth
and enhance security.
Hardware Based Wi-Fi interference and Rogue AP/ Denial-ofService detection should be supported. The wireless network needs
to be self-healing and self-optimizing.
Mandatory
Optimized system performance of mixed-client wireless networks
offering enhanced downlink throughput and improved uplink
communication providing a better user experience during web
browsing, email, and file downloads. No additional network
parameters needed – should be chipset feature.
Mandatory
Able to support robust performance in dense and variable client
environments with different applications (unified communications,
video, bidirectional traffic).
Mandatory
The wireless solution needs to support location analytics and RFID
tagging/tracking.
Bonjour and Chromecast support.
Mandatory
Simplified GUI wizard for quick setup and intuitive dashboards for
monitoring and troubleshooting. Compatibility with unified
wired/wireless network management tools.
Support for centralized, distributed, and mesh deployments.
Centralized control, management, and client troubleshooting.
Seamless client access in the event of a WAN link failure (local data
switching).
Highly secure guest access.
Efficient access point upgrade that optimizes the WAN link
utilization for downloading access point images.
Mandatory
Mandatory
Mandatory
Supplier Solution
Ref
Area
Requirement
Importance/
Weighting
Supplier Solution
Support for corporate wireless service for mobile and remote
workers with secure wired tunnels to indoor access points.
Data Centre Network Fabric
Southend Borough Council needs a Network Fabric which enables high speed connectivity from the end device to the servers and the cloud
Data Centre Network Fabric Requirements
Ref
Area
Requirement
Importance/
Weighting
DATA_CENTE
R_NETWORK_
01
Deployment
Mandatory
DATA_CENTE
R_NETWORK_
02
DATA_CENTE
R_NETWORK_
03
Performance
The Network Fabric needs to support 2-Tier Leaf and Spine
architecture (low latency, 10G/40G/100G, non-blocking). Scale Up
and Out architecture. Minimum interface scalability specs 192x
1/10G BASE-T ports or 572x 10GE fibre ports or 144x 40GE fibre
ports or 32x 100GE fibre ports for the Spine Tier. A controller
based solution managing the fabric policies, provisioning,
monitoring and troubleshooting is required (application centric
deployment).
The Data Center Spine Tier needs to be a very high performance
platform (15Tbps switching capacity full duplex). The Spine Tier
switching family proposed needs to scale up to 60 Tbps (future).
The Network Fabric should support VXLAN and have a control
plane that automates its provisioning. In addition to that it should
be able to track VM mobility and changes to the VM configuration
(seamless VM mobility within the Network Fabric).
Automated Installation of SW Images and Configuration Files
needs to be supported.
DATA_CENTE
R_NETWORK_
04
Network
Microsegmentation
& VM Mobility
Patching/SW
Upgrades
Mandatory
Mandatory
Mandatory
Supplier Solution
Ref
Area
Requirement
Importance/
Weighting
DATA_CENTE
R_NETWORK_
05
Power Efficiency
Mandatory
DATA_CENTE
R_NETWORK_
06
DATA_CENTE
R_NETWORK_
07
DATA_CENTE
R_NETWORK_
08
Flexible Transition
from 10G to 40G
DATA_CENTE
R_NETWORK_
09
Management
The system proposed needs to be power efficient and certified (for
example 80 Plus Platinum Certification). The Spine Tier should
have a design without a mid-plane to optimize front-to-back
airflow and reduce power consumption.
Flexible transition from 10G DC Access to 40G DC Access without
changing existing 10G cabling i.e. support for 40G interfaces
converted to 10G.
The Network Fabric should be fully programmable (Open APIs,
Python, REST, Chef, Puppet, XMPP). Openstack and Linux
Containers need to be supported.
Modern and Modular operating system to support MultiCore
CPUs, MultiThreading, Process Survavibility, Stateful Failover – the
latter for the Spine Tier switching platform. The Switch OS should
able to be patched without any interruption in switch operations.
Network Fabric/Switch management through remote procedure
calls (RPCs), JavaScript Object Notation (JSON), or XML over an
HTTP or HTTPS infrastructure. CLI, scripting (Python) and GUI
should be supported on any controller which is part of the
Network Fabric.
DATA_CENTE
R _10
High Availability
Programmability/Aut
omation/Orchestrati
on
Operating System
Very high MTBF that exceeds 1 million hours for the Spine Tier
switching platform. Bidirectional Forwarding Detection (BFD) and
Routing Protocol Stateful Restart. Online diagnostics need to be
supported.
DATA_CENTE
R_NETWORK_
11
Timestamping and
Event Logging
DATA_CENTE
R_NETWORK_
12
Control Plane
Security
Precision Time Protocol (IEEE 1588 Standard) to provide nanosecond accuracy to facilitate precise timestamping for log/event
correlation, compliance and digital forensics is required.
Protection from L2 broadcast “storms” and control plane policing
Mandatory
Mandatory
Mandatory
Mandatory
Supplier Solution
Ref
Area
Requirement
is required.
DATA_CENTE
R_NETWORK_
13
DATA_CENTE
R _14
DATA_CENTE
R_NETWORK_
016
DATA_CENTE
R_NETWORK_
017
Openflow
Openflow 1.3 needs to be supported
Monitoring of traffic
flow SLAs
Network/Application
Provisioning
Platform should able to monitoring and evaluate the performance
of SLAs (voice, video, data traffic).
Data-model-based declarative provisioning using Applicationcentric network policies from a central point/controller.
Application
Monitoring &
Troubleshooting
DATA_CENTE
R _018
DATA_CENTE
R_NETWORK_
018
DATA_CENTE
R_NETWORK_
019
DATA_CENTE
R_NETWORK_
020
Hypervisor/Virtualiza
tion Support
L4-L7 Services
Embedded Healthscores for applications (latency, packet loss per
application/tenant) and ease of correlation when troubleshooting.
This should be done from a central point (controller) which also
allows fault, event and performance management.
The Network Fabric needs to be hypervisor agnostic.
Data Broker
Switching
Hardware Load
balancing
Seamless, programmable and automated integration of L4-L7
services into the Network Fabric.
Switching platforms should be able to monitor higher-volume and
business-critical traffic for efficient use of security, compliance,
and application performance monitoring tools.
Support for Hardware Based Load Balancing and Traffic Steering is
required.
Importance/
Weighting
Supplier Solution
Data Centre Network Interconnect Requirements
Ref
Area
Requirement
Importance/ Weighting
DATA_CENTER_INT
ERCONNECT_01
Deployment
Built-in 6x 1GE and 2 X 10 GE SFP based ports.
Mandatory
DATA_CENTER_
INTERCONNECT
_02
DATA_CENTER_
INTERCONNECT
_03
DATA_CENTER_
INTERCONNECT
_04
Performance
Pay as you grow performance 2.5, 5, 10, 20 Gbps.
Mandatory
Operating
System
Modern & Modular OS - Expanded container app
support support for future virtual applications and
services.
Mandatory
Services
High-performance security for crypto, firewall, and
Mandatory
Redundant power supply.
Network Address Translation (NAT) sessions. VPN
services support.
DATA_CENTER_
INTERCONNECT
_05
DATA_CENTER_
INTERCONNECT
_06
Application
Visibility
Netflow-based and DPI-based traffic inspection
Mandatory
(application visibility).
Data Center
Interconnect
Technologies
Support for VXLAN, LISP, VPLS and OTV.
Mandatory
Supplier Solution
Data Centre Servers Requirements
Ref
Area
Requirement
Importance/ Weighting
DATA_CENTER
_SERVERS_01
DATA_CENTER
_SERVERS _02
Deployment
Blade Server based architecture for virtualized and
non-virtualized environments.
Programmable, Automated and Policy based using
service templates/profiles via CLI, GUI and XML API –
Stateless compute and pool of resources approach.
Auto-discovery, Dynamic Pooling and Multiple Server
provisioning.
160 Servers in a management domain and
management of multiple geographically distributed
domains via a single pane of glass should be
supported. Blade and Rack server mix in a
management domain is required to be supported.
Server pre-provisioning is required to support flexible
upgrades, new deployments and failure scenarios.
Built-in architecture resiliency/redundancy required.
Blade failover support.
The Server I/O should be virtualized, consolidated and
integrated with the physical network to provide VM
visibility. High IOPS are required. VXLAN and ease of
workload mobility is required (virtual and non-virtual).
Other required supported features; RDMA over
Converged Ethernet (RoCE), Performance-optimization
applications such as Virtual Machine Queue (VMQ),
Intel Data Plane Development Kit (DPDK), and
Netflow.
Mandatory
Management/Provisi
oning
Mandatory
DATA_CENTER
_SERVERS _03
Management
Scalability &
Flexibility
Mandatory
DATA_CENTER
_SERVERS _04
High Availability &
Architecture
Flexibility
DATA_CENTER
_SERVERS _05
Server I/O
DATA_CENTER
_SERVERS _06
DATA_CENTER
_SERVERS _07
DATA_CENTER
Hypervisor &
Operating System
Security (access)
Hypervisor and OS agnostic solution.
Mandatory
Role-based access is required.
Mandatory
Cabling Convergence
Single Cable for LAN/SAN traffic should be
Mandatory
Mandatory
Mandatory
Supplier Solution
Ref
_SERVERS _08
DATA_CENTER
_SERVERS _09
DATA_CENTER
_SERVERS _10
Area
Blade
HDD/SSD/CPU/Me
mory
Storage
Requirement
supported.
Each server blade should equipped with the appropriate
type of memory/cpu/disks to enable an Enterprise
Class/IoT capable Datacenter for Southend Borough
Council.
Southend Borough Council will need in excess of
60TByte of fast storage which must be expandable and
in excess of 80TByte of slower storage for backups.
The storage has to be resilient
Importance/ Weighting
Mandatory
Mandatory
Supplier Solution
Data Centre Security Requirements
Ref
Area
Requirement
Importance/ Weighting
DATA_CENTER_
SECURITY_01
Deployment
Mandatory
DATA_CENTER_
SECURITY _02
Performance
DATA_CENTER_
SECURITY _03
Physical Appliance
Management
Partitioning
High Availability
High performance security solution using Next
Generation FW and IPS - modular physical appliance(s)
for North to South traffic. Virtual appliance(s) should
also provide security for the virtualized workloads
(East to West traffic).
The physical appliance needs to scale up to 640 Gbps
by device grouping techniques.
The virtual appliance should scale up and out by
software upgrades or spinning new virtual appliances.
The physical appliance needs to be “virtualized” i.e.
partitioned in “virtual” appliances for management
purposes.
Active/Active and Active/Standby deployments
support is required for the physical appliance
proposed.
The security solution needs to support advanced
security features URL Fitering, Application Visibility,
Anti-Malware and Threat Detection/Protection.
Remote Access VPN, Web-based or without the need
of client application, client-based and network-tonetwork VPN are required to be supported.
Seamless integration of the security solution proposed
into the network fabric proposed to facilitate
programmable/automated deployment (mainly for
VM layer security).
DATA_CENTER_
SECURITY _04
DATA_CENTER_
SECURITY _05
Advanced Security
DATA_CENTER_
SECURITY _06
VPN Support
DATA_CENTER
_SECURITY _07
Integration with
Network Fabric
Mandatory
Mandatory
Mandatory
Mandatory
Mandatory
Mandatory
Supplier Solution
Data Centre – Hybrid Cloud Intro
SBC require an agnostic Hybrid Cloud Solution allowing them to access resources across any available platform and mix between private and public
cloud offerings.
Data Centre – Hybrid Cloud Requirements
Ref
Area
Requirement
Importance/ Weighting
DATA_CENTE
R_HYBRID_CL
OUD_01
Deployment
Mandatory
DATA_CENTE
R_HYBRID_CL
OUD _02
Security
DATA_CENTE
R_HYBRID_CL
OUD _03
Management
DATA_CENTE
R_HYBRID_CL
OUD _04
Flexibility
DATA_CENTE
R_HYBRID_CL
OUD _05
DATA_CENTE
Traffic Visibility &
Control
Hypervisor and Cloud Provider Agnostic Hybrid Cloud
Solution i.e. Consistent architecture across
heterogeneous environments – any hypervisor to any
cloud. Freedom to to place workloads across
heterogeneous Clouds.
Security policies need to be extended from the Private
Cloud to the Public Cloud. Secure communications
between private and public cloud and between VMs in
the public cloud. Role Based Access using existing
security practices to protect access to cloud workloads
is required. Traffic needs to be encrypted between
Private and Public Clouds and within Cloud Provider.
Single point of cloud connection management
(eliminate Shadow IT) and unified workload
management across clouds. Policy-based
deployment/governance in the cloud.
Workload portability – Image conversion and VM
migration. Bidirectional Workload mobility and VM
Lifecycle Management across private and public
clouds
Control and visibility of traffic within the public cloud
and between VMs is required (using technologies such
as Netflow or SPAN).
Northbound APIs to allow easy integration with
Integration with
Mandatory
Mandatory
Mandatory
Mandatory
Mandatory
Supplier Solution
Ref
Area
Requirement
R_HYBRID_CL
OUD _06
additional
management tools
additional management tools in order to offer
additional services is required.
Importance/ Weighting
Supplier Solution
Campus Network Management Requirements
Ref
Area
Requirement
Importance/ Weighting
CAMPUS_NETWORK_
MANAGEMENT_01
Manageme
nt &
Deployment
Options
Single Pane of Glass for Wired/Wireless Network.
Mandatory
CAMPUS_NETWORK_
MANAGEMENT _02
CAMPUS_NETWORK_
MANAGEMENT _03
Network
Lifecycle
Application
Visibility
Mandatory
CAMPUS_NETWORK_
MANAGEMENT _04
Network
Maps &
Network
Device
Groups
Provisioning
/Configurati
on
Network Device Lifecycle Management, end-of-life
and security incident reports.
Application, granular traffic flow visibility. Top devices,
clients and applications by traffic volume need to be
reported as well as how much bandwidth they
consume.
Network Topology, Wireless heat maps and logical
device grouping need to be supported.
Template Based Configuration. Validated design
Mandatory
CAMPUS_NETWORK_
MANAGEMENT _05
Network discovery, inventory, configuration, monitoring,
troubleshooting, reporting, and administration. Intuitive
GUI and Dashboard/Dashlets. Best practices for
configurations/deployments integrated with the tool.
Virtual machine or appliance deployment options.
configuration templates support to enable quick and
easy device and service deployment. Packaging of
individual templates into larger, reusable, configurations
built for more consistent and quicker network designs.
Role Based Access and flexible authentication,
authorization, and accounting (AAA) services should
allow for local, RADIUS, TACACS+, and single sign-on
options.
Mandatory
Mandatory
CAMPUS_NETWORK_
MANAGEMENT _06
Security
Mandatory
CAMPUS_NETWORK_
MANAGEMENT _07
Reports,
Events and
Alarms
List all the different types of reports and alarms
supported by the network management tool. Explain
how the alarms work. Dashboards, Troubleshooting
and Alarms should be centralized.
Mandatory
CAMPUS_NETWORK_
Monitoring
Monitoring policy creation support. Monitoring policies
Mandatory
Supplier Solution
Ref
Area
CAMPUS_NETWORK_
MANAGEMENT _12
CAMPUS_NETWORK_
MANAGEMENT _13
Importance/ Weighting
should be activated or deactivated through an intuitive
workflow and push changes to devices without
disrupting service
MANAGEMENT _08
CAMPUS_NETWORK_
MANAGEMENT _09
CAMPUS_NETWORK_
MANAGEMENT _10
CAMPUS_NETWORK_
MANAGEMENT _11
Requirement
Operations
Licensing portability is required. Option for High
Availability needs to be supported.
Mandatory
3rd Party and
API Support
Network
Access
Control
Integration
Location
Analytics
Integration
Wireless
Security
3rd Party Devices and RESTful APIs should be
supported.
Mandatory
Integration with Network Access Control physical or
virtual appliances must be supported.
Mandatory
Integration with location analytics engines/physical or
virtual appliances to provide location-based tracking
services for discovered endpoints.
Automated detection of the switch port that a Rogue AP
is connected.
Supplier Solution
Network Access Control Requirements
Ref
Area
Requirement
Importance/ Weighting
NETWORK_ACCESS
_CONTROL_01
Deployment
Mandatory
NETWORK_ACCESS
_CONTROL_02
Network Access
Minimum required deployment needs to have
AAA, Guest Management, Link Encryption
(MACSec), Network Access Microsegmentation
using tags, API Support is required. Appliance or
VM options – Web based/GUI management.
Option for centralized and distributed
deployment.
Policy Based/Software Defined/Context-Aware
Network Access taking into account the user role,
end-device type, time, location and end-device
configuration. All policies need to be managed
from a central point of management across
different parts of the network
(wired/wireless/VPN). Integration with Active
Directory/LDAP required. Real time policy
provisioning.
NETWORK_ACCESS
_CONTROL_03
End-Point Discovery
The network needs to be able to discover endpoints automatically (iPhones, Android devices
etc.) and present them in a GUI. Built-in and
custom device profiles need to be supported.
Mandatory
NETWORK_ACCESS
_CONTROL_04
End-Point
Assessment
Mandatory
NETWORK_ACCESS
_CONTROL_05
End-Point Policy
Enforcement
NETWORK_ACCESS
_CONTROL_06
Authentication
The network needs to be able assess the
configuration/OS version/patches of end-points
(iPhones, Android devices etc.). Misconfigured
devices need to be reported.
The network needs to be able to enforce policies
to end-points (iPhones, Android devices etc.)
based on their configuration and compliance
rules. Actions such as blacklist, whitelist, remote
wipe and integration with MDM are required.
The GUI of the NAC solution needs to show user
authentications as they happen (live
authentication). Drill-down capability for
Mandatory
Mandatory
Mandatory
Supplier Solution
Ref
Area
NETWORK_ACCESS
_CONTROL_07
Reports, Monitoring
& Troubleshooting
NETWORK_ACCESS
_CONTROL_08
Guest Access
NETWORK_ACCESS
_CONTROL_09
NETWORK_ACCESS
_CONTROL_10
Network Access
Microsegmentation
Network Wide
Context Sharing
NETWORK_ACCESS
_CONTROL_11
Integration with
NMS
NETWORK_ACCESS
_CONTROL_12
PKI & Certificates
Requirement
additional info per authentication.
Extensive reports on authentication, devices,
users etc. which can be also customized. Real
time monitoring and ease of troubleshooting.
Different Guest Access types need to be
supported. Hotspot, Self Service, Self Service
Sponsor Approved, Sponsored. Customizable
Guest Portals and Bring-Your-Own-Device
(BYOD) support.
Network Microsegmentation beyond VLANs and
IP Subnet using numbered tags.
Support for multivendor, cross-platform network
system collaboration among parts of the IT
infrastructure such as security monitoring and
detection systems, network policy platforms, asset
and configuration management, identity and
access management platforms, and virtually any
other IT operations platform.
The Network Access Control solution needs to
fully integrate with the Network Management
System proposed.
PKI & Certificate support is required.
Importance/ Weighting
Mandatory
Mandatory
Mandatory
Mandatory
Mandatory
Mandatory
Supplier Solution
Converged Infrastructure Management Requirements
Ref
Area
Requirement
Importance/ Weighting
CAMPUS_CO
RE_01
Management
Mandatory
CAMPUS_CO
RE_02
Orchestration/Autom
ation
CAMPUS_CO
RE_03
CAMPUS_CO
RE_04
Virtualization
Single Point of management for Data Center Network,
Compute, Storage. Management of virtual and nonvirtual (bare-metal) workloads in a multitenant Data
Center environment.
Model-Based Orchestration and Policy based
automation of provisioning and de-provisioning of
data center resources (compute, networking, storage)
using automated workflows. Built-in and custom
workflow support – create once and use as needed.
Bare-metal and virtual.
Hypervisor Agnostic Solution
Infrastructure
Discovery
The infrastructure should be discovered automatically
and the physical and logical relations stored in a
database as well as represented on an infrastructure
map.
Mandatory
CAMPUS_CO
RE_05
Infrastructure
Change Tracking
The solution should detect and reflects changes and
movements within infrastructure that could impede
workflow completion and notify the IT staff. Resource
pooling should prevent changes to one group from
adversely affecting other groups.
Mandatory
CAMPUS_CO
RE_06
CAMPUS_CO
RE_07
3rd Party Support
Support for 3rd party elements should be listed and
briefly explained.
Support of REST API, Windows Powershell, Java API,
Inventory and Reports
Mandatory
Programmability &
Development
Mandatory
Mandatory
Mandatory
Supplier Solution
Service Catalogue Intro
SBC’s applications will be provided our Customers based on a service catalogue specifying technical requirements, availability requirements, and
resource requirements. It will also identify Business Continuity requirements per individual application.
Service Catalogue/Portal Requirements
Ref
Area
Requirement
Importance/ Weighting
SERVICE_CAT
ALOGUE_01
Ordering &
Automation
Mandatory
SERVICE_CAT
ALOGUE _02
SERVICE_CAT
ALOGUE _03
SERVICE_CAT
ALOGUE _04
Control
Self-service on-demand, automated and simple to use
ordering portal. Shop and order data center and IT
workplace services quickly just by clicking through a
menu. Unified menu of services that appear in
categories. Coverage for an extremely diverse range of
services including data center infrastructure resources,
cloud applications, platform application or general
business services such as BYOD or device services.
Policy-based controls and approvals.
Dashboards to quickly establish user entitlements and
role-based access to services
Lifecycle management and tracking throughout the
service existence. Track open orders or access order
history.
Financial and demand management with pricing, quota,
and lease management established at the time of
service order
Use built-in analytics on current active services to
complete lifecycle operations such as maintain or
upgrade services.
Mandatory
Administrator
Interface
Service Lifecycle
SERVICE_CAT
ALOGUE _05
Billing
SERVICE_CAT
ALOGUE _06
Maintainance &
Upgrades
Mandatory
Mandatory
Mandatory
Mandatory
Supplier Solution
WAN Network Intro
Southend will be building a new dark fibre infrastructure and this equipment will be used to enable the WAN.
WAN Network Requirements (Core/Aggregation)
Ref
Area
Requirement
Importance/ Weighting
WAN_CORE_
01
Deployment
Mandatory
WAN_CORE_
02
WAN_CORE_
03
Chassis Performance
Modular platform with 1G/10G/40G. Four integrated
10G SFP+ ports. 2 Module slots required. MPLS &
Carrier Ethernet Services support is required.
120 Gbps chassis performance
Power
Redundant AC/DC power supplies
Mandatory
WAN_CORE_
04
WAN_CORE_
05
WAN_CORE_
06
WAN_CORE_
07
Operating System
Modern Carrier Class Modular Operating System – GUI
support, process restartability.
GPS stratum-1 input, Building Integrated Timing Supply
Mandatory
WAN_CORE_
08
WAN_CORE_
09
Clock Sync and
Timing
Compliance
Transport/VPN
Services & QoS
High Availability
SDN Based MPLS
Mandatory
Mandatory
(BITS) ports, IEEE 1588 hardware-based support
NEBS, ETSI, EMC and list Immunity and Safety
standards
Mandatory
L2VPN, L3VPN, Layer 2 and Layer 3 multicast; IP over ,
Ethernet operations, administration, and maintenance
(EOAM) and MPLS OAM, Layer 2 and Layer 3 access
control lists (ACLs), hierarchical quality of service
(HQoS)
Control Plane and Routing High Availability. Support for
MPLS TE-FRR.
Mandatory
Segment Routing support is required.
Mandatory
Mandatory
Supplier Solution
WAN Network Requirements (Remote Sites/CPE)
Ref
Area
Requirement
Importance/ Weighting
WAN_ACCESS
_01
WAN_ACCESS
_02
WAN_ACCESS
_03
WAN_ACCESS
_04
WAN_ACCESS
_05
WAN_ACCESS
_06
WAN_ACCESS
_07
WAN_ACCESS
_08
WAN_ACCESS
_09
Deployment
Two dual-purpose (10/100/1000 and SFP) ports, two
SFP uplinks. Triple play services (ETTH/ETTB) support.
Mandatory
Chassis Performance
Carrier Ethernet support and UNI/ENI/NNI interfaces.
Mandatory
Power
AC/DC Power Supply.
Mandatory
Operating System &
Management
Software
CLI, Web Interface/GUI
Mandatory
Different Levels of Software Image support for
functionality flexibility
NEBS, MEF 9 & 14
Mandatory
ACLs, IEEE 802.1x, Configuration File Security
Mandatory
Quality of Service
Advanced QoS and Rate Limiting
Mandatory
Denial of Service
Security
Control Plane Security, L2 Broadcast storm contain, port
security, per VLAN MAC learning
Mandatory
Compliance,
Certifications
Network Security
Mandatory
Supplier Solution