## 2.0 NETWORK SYSTEM INFRASTRUCTURE

### 2.1 OVERVIEW

OUSD’s data communications network should be able to support a combination of LAN electronics and transports including:    Gigabit switches aggregated back to a switch installed in a centralized location on each campus.

The gigabit network design will utilize a star topology with fiber links back to the core switch at each campus.  This network design will allow all multiple access points to be aggregated into a 10-gig distribution switch located in each MDF/IDF.

The 10-Gigabit Ethernet solution must provide scalability, complete compatibility, and be easily integrated into OUSD’s future wide area networks fabric.  This upgrade must be seamless in its migration to higher bandwidth requirements and comply fully with current 802.3ae standards.  With the implementation of the 10-Gigabit backbone Technology Services expects a significant increase in performance over its existing networks.

### 2.2 CABLING AND NETWORK INFRASTRUCTURE

Technology Services requires a star network topology design.  The backbone cabling shall extend from the Main Distribution Frame (MDF), to each of the MDF/IDF/SMALL IDF.  All singlemode fiber optic terminations will be home runs back to the MDF.

### 2.3 ENTERPRISE NETWORK ARCHITECTURE

Technology Services requires enterprise network equipment to implement a Layer 2 & 3 IP network service over an Ethernet switching fabric, which will encompass the core, distribution, and local access components of OUSD’s network architecture.

To the maximum extent that market offerings make it feasible, Technology Services shall acquire network products adhering to industry supported standards and specifications from recognized standards-making bodies, such as the IEEE Project 802 and the IETF.  The standards specified below are those deemed appropriate by Technology Services to meet its requirements.

The bandwidth of switched segments, in the OUSD network; 10 Gb/s segments will be deployed, as Technology Services requirements dictate, which will constitute the entire backbone, core network, and some special user distribution and local access segments.  Switched segments to network end-stations, switches, and routers will be full duplex.

OUSD will run various Internet transport protocols, including Transmission Control Protocol (TCP), User Datagram Protocol (UDP), and others as robust implementations become available and requirements warrant.

Although Technology Services expects to continue to run IPv4 for the near to intermediate future, it is expected that a transition to IPv6 will be implemented at an appropriate point, perhaps motivated by such features as authentication, Quality of Service (QoS) priorities, and L3 address space expansion.

Endpoints will be organized logically into VLANs.  Inter-VLAN communication will be provided by L3 routing functions.

It is Technology Services’ objective to provide an Integrated Services IP packet network to support both traditional loss-sensitive/delay-tolerant flows (e.g. DNS queries) and loss-tolerant/delay-sensitive real-time flows (e.g. playback video streaming applications).

Each edge switch shall be fully layer 3 compliant.

Edge switches may be stackable or chassis based.  All edge switches shall be connected via home run fiber to the Main Distribution Frame.

### 2.4 SWITCHED ARCHITECTURE CHARACTERISTICS

Technology Services requires a network with Ethernet MAC-frame-switched architecture, with the exception of L3 packet switching for inter-VLAN operations and routing to external destinations.  Contractors shall:

- Provide conceptual drawings of the configurations called for.
- Provide a description of how end-to-end connectivity is provided for all required protocols, and include all switches and router protocols used to provide connectivity (i.e. Spanning Tree, OSPF, EIGRP, etc.).
- Describe what differentiates your product from your competition.
- Network & Component Characteristics.  Technology Services desire the following characteristics for the network and its components:

<details>
  <summary>Click to expand</summary>

- Gigabit Technical Specifications:
  - All Gigabit Ethernet switches must support Layer 3 switching for IP.
  - All Gigabit Ethernet switches must have redundant switching fabrics.
  - All Core Gigabit Ethernet switches must have at least a 40G switching fabric.
  - All switches must support Policy and Port based VLANs.
  - All Layer 3 implementations should be standards-based.  No proprietary protocols or pre-standard protocols should be used to implement routing.
  - Gigabit Ethernet switches must be able to use and understand OSPF, EIGRP, PIM, DVMRP or RIP II for routing purposes.
  - Gigabit Ethernet switches should support at least 20,000 MAC and routing table entries.
  - Gigabit Ethernet switches must support 802.1d Spanning Tree as well as multiple spanning tree groups.
  - Gigabit Ethernet switches must support 802.1Q VLAN tagging.
  - Gigabit Ethernet switches must support conversation steering/port mirroring to allow packet monitoring.
  - All devices should support management via local console access as well as remote network protocols such as Telnet, SSH or SNMP.
  - All switch ports used to terminate drops for telephone handsets, clocks, bells and speakers must support Power-Over-Ethernet (POE).
  - Virtual LAN Architecture (L3 Inter-VLAN Operations)
  - Client utilizes VLAN functionally to segment video/audio applications (i.e., teleconferencing) traffic from the rest of the network. Technology Services requires standards-based VLANs for the logical organization of all end-stations within its enterprise network.

</details>

<br>

VLANs should be defined by network equipment in accordance with IEEE P802.1Q/D10.  L2 switching operations should conform to specifications in IEEE P802.1Q/D10 and IEEE 802.1D/D16.

Technology Services requires high-speed, highly efficient L2 switches and L3 routers to implement an enterprise-wide configuration of Ethernet switching fabrics and an L3 switching hierarchy.

Technology Services requires an IP network service supporting real-time flow (e.g. video-streaming) applications in both unicast and multicast configurations.

Technology Services requires an IP network service providing QoS assurances for both traditional data and multimedia network service applications.  This requirement has two distinct parts: Classes of Service (CoS) and end-to-end Quality of Service (QoS) provision by resource reservation.

#### CURRENT STANDARDS

Equivalents must match the specifications of our current standards  

- Juniper EX4100*, 48-port POE IP BASE Switch with dual power supplies – MDF and IDF with 5-year 8x5xNBD support, 10 GB LR SPF+ transceivers in minimum of 2 slots plus an    Advanced Feature License (stacking cables must be provided as needed for installation)
- Juniper EX4650* switch – MDF only with 5-year 8x5xNBD support 10 GB LR SPF+ modules in all slots plus an Advanced Feature License
- Juniper AP34* (Wifi 6E) with 7 years subscription for indoor workspaces and classrooms. Use Juniper AP63* (Wifi 6) for outdoor and industrial locations, such as kitchens and warehouses. Juniper AP45* (Wifi 6E) for high destination indoor locations like auditoriums. 
- Cisco 8851 IP phones for office spaces, Cisco 7841 IP phones for classroom spaces with wall mount option and a minimum of a 5-year CUWL license.
- B40-MB50 Multi-Band Antenna, The B40-MB50 Multi-Band Antenna shall be routed in a dedicated ½” minimum EMT conduit.  The antenna shall be exterior wall mounted at roof level.

\*Substitution to newer models will likely be required.  Consult with the OUSD Technology Services Department for current models.

### 2.5 POWER PROTECTION

Technology Services requires suitable Uninterruptable Power Supply (UPS) systems in all MDF data closets to insure continuous operation of all routers, POE switches and backbone switches in the event of a power failure. UPS in each closet with capacity to run all network equipment for 4 hours

Technology Services requires line conditioners in all IDF data closets to provide regulated voltage to networking equipment greater than or equal to a 3840 joules (Tripplite ISOBAR12ULTRA).

UPS systems shall be, APC Smart-UPS X 3000VA Rack/Tower LCD 100-127V, product number SMX3000LVNC with network card or updated APC model with equivalent specifications

### 2.6 NETWORK SECURITY

Technology Services requires one integrated scheme of network service user authentication and authorization for access to specific applications and data resources.  This scheme should be based upon appropriate (see below) standards, as initial product implementations become available.

VLAN Authentication and Authorization requires an authentication facility, which must be provided and authenticates an end-user by personal identification or a device by MAC address or receiving L2 switch port address for operation within one or more specific VLANs.  In addition, authorization controls must be provided to determine which applications and data resources an end-user or her workstation will be able to access.  Specify how the Equipment will make that possible.

### 2.7 SYSTEMS TESTING AND ACCEPTANCE

The vendor is asked to submit an acceptance plan as part of their response.  A minimum acceptable plan will include testing of LAN and Wide Area Network access to the targeted applications for each device.