Untitled - Jabatan Pendidikan Kolej Komuniti
Transcription
Untitled - Jabatan Pendidikan Kolej Komuniti
ICT INFRASTRUCTURE GENERAL DESIGN CONSIDERATION ICT INFRASTRUCTURE 1.0 EXECUTIVE SUMMARY The usage of ICT will be fully exploited in the teaching and learning environment as well as in the administration of the Community Colleges. The Community Colleges will have its Internet presence as soon as its ICT infrastructure is operational. The infrastructure must cover these aspects: i) A minimum of 15Mbps broadband line (wired and wireless). ii) Video conferencing facility for teaching and learning purpose. iii) Storing and viewing e-learning resources. iv) Storing, viewing, and updating students’ data record (Campus Management System). v) VOIP telephony. vi) Online notes and assignments management (Curriculum Information Document Online System). vii) Secure online tutorials, quizzes, tests and examination record implementation (Learning Management System). viii) Forum and virtual discussion room application to be recorded as contact hour between lecturers and students. ix) Government application management such as HRMIS, EG*Net, e-SPKB etc. x) CCTV IP for security surveillance. The Community Colleges will adapt a total campus network environment, providing Internet and on line access to all the administrative staff and students in the campus. The campus network will revolutionize the approach to teaching and learning of technical subjects. The backbone shall be able to deliver multimedia content to the end stations. Other usage will be in the administrative function, library, classrooms, laboratories, cyber room, hostel and the residential areas. The Community Colleges will adapt ICT culture in all of its activities. Its extensive intranet will ensure the availability of information at anytime, anywhere within the campus. End stations will be scattered strategically throughout the campus for the students to access their emails and information retrieval. Students graduating from this Community Colleges shall be knowledge workers, well versed in the usage of ICT as an essential part of their life. This brief is a guideline on how the Community Colleges and its ICT physical infrastructure to be established. It will provide the necessary idea and information on how the Community Colleges various departments are laid out, cabling structures, course delivery and type of activities carried out at specific areas. 2.0 OBJECTIVE To provide a project brief on the ICT infrastructure of Community Colleges of Ministry of Education Malaysia where Information Technology plays a major role in the teaching and learning environment as well in its operation and administration. 3.0 THE COLLEGE COMMUNITY NETWORK College Community consists of various departments. Within each department, there are specific ICT needs as well as common requirements. Physically, all departments can be pooled into a single area but their demarcation will be observable in a network environment where they are segregated in separate logical local area network. i) Wired Network Campus internal network must fully use fibre optic cable so that smooth and efficient access to data centre by staff, students and visitors is obtained. VLAN is used to separate access among staff, students and visitor where the 15Mbps line is distributed to the user’s access level. The LAN use Tier 2; Tier 1 for core and Tier 2 for edge. ii) Wireless Network Total campus wireless system must be applied. Signal must also cover surrounding area in appropriate distance in order to enable users’ access. Wireless access is supporting needs for wired network system. It is implemented in distributed structure. The structure has 1 wireless controller which connects access points via wired network node for users’ access 4.0 CABLING INFRASTRUCTURE Community College consists of various departments. Within each department there are specific ICT needs as well as common requirements. Physically all the departments can be pooled into a single area but their demarcation will be observable in a network environment where they are segregated in separate logical local area network. i) Structured Cabling System Structured cabling system is used to take care for both networking and telecommunication requirement. The facility will provide the communication medium for data, voice and video requirement for the campus. The cabling nodes will be constructed as per requirement in SOA. The node will be used for data connection to end devices such as servers, workstations, peripherals such as network printers and scanners, IP Telephony devices, security system devices such as card readers and CCTVs, and for Wireless infra such as Access Points and Bridges. The design is based on interchangeable data and voice port so as to maximize infrastructure utilization and minimize administration, maintenance and management cost. Future adds, moves, and changes are not limited to specific technology and know-how as the design is based on open system interconnectivity platform. Horizontal cabling connection shall use CAT 6 cable or latest and accessories. All cable work must follow ANSI/EIA/TIA-568A Standard. All cabling termination shall be Industrial best practice standard and should be in the same rack for network equipment. a) Horizontal Cabling Areas to be installed with cabling are shown in Table 1. All network cabling works will be terminated at the patch panels located in network switch racks. These switch racks must be installed in switch rooms located within the block or floor, or at strategic, easy to access areas with lockable network equipment racks. All network cabling in the computer areas, laboratories, workshops and library will be installed through under-floor trunking. b) Fiber Optic The network must be fully redundant to ensure minimal disruption to the network operation in case of fault at certain area and have no single point of failure. The telecommunication and data network infrastructure will be integrated into one system. All connections between switches shall be of single mode fibre optic. c) Ductings, conduits, trunkings These items need to take into account the nature of the cable whether it is fiber optic or copper. It also needs to take into account the size and number of the cables and nodes need to be laid out and installed in an area. Trunking and ducting specifications for indoor and outdoor usage need to be detailed out. Indoor data cabling will be via under floor trunking terminating at the server room or switching/wiring closet. Materials for these items can be metal or plastic depending upon point of deployment. Where there is a usage of 3-phase power supply, the trunking for the power supply and the network shall be at least 1 m apart. ii) Telecommunication System PABX Room The PABX room should be at ICT Unit. Proper and adequate trunking should be installed from telecommunication room to the server farm room to cater connectivity of IP Based Telecommunication. 5.0 PHYSICAL REQUIREMENT The ICT Center comprised of the following areas: Server Farm Room, PPSM and Technician Area, PABX Room, Maintenance Area, Store Room for ICT Equipment and Documentation And Staging Room. This ICT Center must be an easily accessed area due to the function of the center. Refer to ICT Centre Diagram as a guideline for the layout of the various areas. 5.1 Server Farm Room i) The Server Room will host all the network servers and networking equipment for the Community College. Main Server room should be fixed with full height walls. ii) Server farm room should be adjacent to PPSM and Technician Room for easy monitoring through half height tinted glass wall. iii) A room on its own have 400mm double-leaf door with minimum size of 2 meters. iv) Voice point. To be incorporated with falsed ceilings. All partitioning should be at ceiling height to minimize noise levels between rooms. v) Air-conditioning unit (min 2 units of 2HP split – capacity to be determined by actual requirement on-site with auto-start, autoswitching and auto-timer for alternate operation – operating 24 x 7 at 20o C ± 5%. vi) Raised floor with homogeneous tiles top (6”height) with underfloor metal trunking for easy maintenance, addition of new wiring and reconfiguration. vii) Smoke alarm and fire-fighting system suitable for electronic equipment installation (inergen / FM200/ FE13/ pyrogen or similar approved system) must be provided and installed at strategic location. No water based fire-fighting system running in or across the room. viii) Adequate 15A and 13A switch socket outlets should be provided. ix) Equipped with power surge protection relay. x) Dust-free finishes xi) Fire-rated door, wall and ceiling. xii) Should be provided with sufficient fluorescent lighting points. xiii) xiv) Should be equipped with minimum 5 data point (loose cabling) under raised floor. xv) Should have a separate Distribution Box for power distribution. Lighting and air-conditioning must come from a separate DB. xiv) To have minimum of 10 power points 10 circuits of 13A rating for each individual power points. All power points must be wall mounted. Labeling of power points with reference to the particular circuit is a must. Usage of extension wires and power socket adapters in the Server Farm Room is prohibited. xv) 5.2 The server room entrance should be installed with smart card access control lock/ door access system and ramp. The server room should be equipped with the following appliances: a) AD,DHCP Server b) DNS Server c) NMS Server d) Application Server e) File Server f) Anti-Virus Server g) Proxy Server h) Backup Server i) Remote Backup Server j) Unified Threat Management Appliance k) Wireless Controller l) Core Switch(Core 1 and 2) m) Managed Switches PPSM and Technician Room i) Workroom/office space for a PPSM and a technician. ii) Room/office space must be adjacent to the Server Farm Room to monitor servers. iii) To be equipped with one telephone line and 3 data points. iv) Approximate size 9 square meters 5.3 PABX Room i) To be equipped with 1 voice point and 2 data points ii) Proper and adequate trunking should be installed to the main server room to cater connectivity of IP Based Telecommunication. iii) Approximate size 5 square meters 5.4 Maintenance Area i) ii) 5.5 Documentation and Staging Room i) ii) iii) iv) 5.6 Space to store ICT spare parts To be equipped 2 power points (13 Amp) Approximate size 15 square meters Reception Area i) ii) 5.8 Space to store manuals, software, official and network documents. Area to configure new network equipment before being deployed to locations. Built in open rack and half height cabinet. Approximate size 15 square meters Store Room for ICT Equipment i) ii) iii) 5.7 To be equipped with one telephone line and 10 data points. Approximate size 20 square meters To receive report of ICT equipment to be maintained. Approximate size 9 square meters Power Requirement Power requirement here relates only to the ICT devices to be used in the Community Colleges. Power consumption estimates for the devices concern are as follows Servers Network Devices Multifunction hub switches Desktop/Tower PC Monitors Peripheral devices 1.5 1.0 3.0 0.5 0.3 0.3 kVA/unit kVA/unit kVA/unit kVA/unit kVA/unit kVA/unit When designing the laboratories and classrooms, the power requirement of the number of PC and devices in the particular room has to be accounted for. Small units of UPS/AVR will used with all the installed PC’s. As a general guideline, for every data nodes/points there will be 2 power points and there must not be more then 4 power points per 13 A circuit for an ordinary PC installation. The power points and data nodes installation on the wall will be 6 inches above the floor, and floor installation of power and data point will be housed in proper junction box with appropriate covers. Power and data cabling to various floor junction boxes will be housed in under floor trunking and those closed to the wall will be enclosed in plastic conduits. All power points for the servers, PCs and network equipment must come from dedicated DB. This DB will never be used for lighting or air-conditioning and must have its own surge protectors and proper earthing. 5.9 Fire Safety The server, switching and wiring room will have a fire retardation system based on a non-toxic fire retarding gas/chemical. The fire fighting system will suppress the fire hazard without damaging the electronic components in the area. Personnel working in the area will be alerted on the discharging of the fire retarding gas/chemical by visual and audio indicators. 5.10 Campus Lightning Protection The buildings where server farm, wiring area and computer laboratories are located shall be properly grounded with both active and passive lightning protection. The incoming power feed shall have protection against transients. 5.11 6.0 Campus security Campus area will be installed with additional adequate network points (cable or wireless) to cater surveillance IP based cameras in the following strategic areas: i) Computer lab area ii) Computer center iii) Staff/ Student parking area iv) Main entrance v) Library vi) Exam unit vii) Other strategic areas DOCUMENTATION Documentation to be provided to the Community College comprises of the following: i) Network topology and layout ii) Structured cabling system iii) Cabling warranty iv) Manuals v) Logical and actual diagram 7.0 8.0 SERVICES i) Engineering Services – all engineering and implementation work to complete the installation, testing and commissioning of the network infrastructure. This service should include all labor, engineering, and related services to ensure the workability of the system as planned. System configuration is to be done so that the networking infrastructure is ready for operations in terms of integrated communication throughout the system, user access and security, email system, IP surveillance, Internet communication, system security and protection, etc. On-site support service is for a minimum of three years from handover date. Contractor has to provide fulltime on-site support personnel i.e. Network Technician to assist the customer in the dayto-day running of the networking infrastructure in this new campus. ii) Miscellaneous – contractor has to ensure that all items and services (e.g. cable route, floor access box, raised floor, fire-fighting system, etc) are included in the costing to ensure the intended system is workable and operational upon handover with three years support services on site and three years product warranty (from principal) from handover date. All warranty period start immediately after system handover date. Provision has to be made for skills enhancement for the staff to operate the new facility. This shall include training on selected items and on-site/off-site system familiarization where applicable. CONCLUSION This brief is not meant to be exhaustive in determining all the facility needed for this community college. The brief will assist the Department of Community College Education, Ministry of Education (MOE) in providing the necessary scenario to an architect who will then consult the ICT Consultant and come up with a design which will reflect new community college as ICT ready. CAMPUS NETWORK PROPOSED COST FOR COMMUNITY COLLEGE BIL ITEM 1 NETWORK INFRASTRUCTURE Structure cabling System 2 NETWORK EQUIPMENT a. Core Switches b. End Switches c. Network Managenment System d. Wireless LAN System (Controller + Aps) 3 SERVER SYSTEM a. Servers come with Storage System and rack b. Installation c. Training 4 FIREWALL 5 DATA STORAGE SYSTEM 6 UNINTERUPTABLE POWER SUPPLY SYSTEM 7 SOFTWARE LICENCES a. Windows 2012 R2 Server MVL b. MS SQL Server 2012 Enterprise Edition per processor MVL c. Microsoft System Center 2012 R2 d. Antivirus i. Antivirus For Client/Workstation ii. Antivirus Management Server iv. Antivirus For File Server 8 PROFESSIONAL SERVICES a. All professional engineering & management to make system operational b. Complete System Documentation c. Operational Training d. 3 Years Warranty from completion date QUANTITY BRAND COST PER UNIT TOTAL TOTAL COST PROPOSED NODES FOR COMMUNITY COLLEGE NETWORK Description Nodes 1.0 COMMUNAL AREA 1.1 i ii iii iv v vi 1.2 1.2.1 i ii iii iv ADMINISTRATION Director's Room Assistant Executive Officer Administrative Staff's work area Conference Room General Office Waiting Area Printing Room 2 2 20 4 6 2 ACADEMIC AND LIFELONG LEARNING Engineering Skills Head of Department's room KJKK Academic Staff Work Area Meeting Room Quality Room 1 44 2 1 1.2.2 Further and Lifelong Education i Head Of Dept KJPSH ii Academic Staff Work Area 1 5 1.3 1.3.1 i ii iii iv 1 4 1 1 STUDENT AFFAIRS Assessment and Evaluation Unit Examination Officer Room Work Area Examination Records Room Counter / Waiting Area 1.3.2 Enrolment Unit i Enrolment Officer's Room ii Work Area 1 3 1.3.3 Counseling Unit i Counselor's Room ii Group Counseling & Discussion Room 1 2 1.3.4 Industrial Training Unit i Industrial Training Officer's Room ii Work Area 1 3 1.4 TUTORIAL ROOM / LECTURE HALL 1.4.1 Tutorial Room 6 1.4.2 Lecture Hall 1 1.5 1.5.1 1.5.2 1.5.3 1.5.4 2 11 2 2 RESOURCE CENTRE Counter Area Information Access Area / computer, e-learning Work Area / books maintenance General Waiting Area 1.6 SURAU 1.6.1 Resource Area 1 1.7 MAIN STORE 1.7.1 Storekeeper Room 2 1.8 MAINTENANCE UNIT 1.8.1 Technician Room 2 2.0 2.1 2.2 2.3 ICT INFRASTRUCTURE Technician Room and Working Area Staging And Documentacion Room Server Room 4 2 5 Sub-total 148 TELEPHONE LINE SYSTEM FOR COMMUNITY COLLEGE Bil 12 Post/ Location Pengetua Operator (PABX) Ketua JAbatan Kejuruteraan dan Kemahiran Ketua Jabatan Pendidikan Lanjutan dan Sepanjang Hayat Pegawai pengambilan Pelajar Pegawai Peperiksaan Pegawai Kauseling Pegawai Latihan Industri Pegawai Eksekutif Pegawai Siatem Maklumat Perpustakaan Kedai Koperasi Pentadbiran 13 Staff akademik dan bukan akademik C 14 Makmal / Bengkel C 15 16 Blok Pentadbiran Food Court -Gerai Blok Akademik Pondok Keselamatan D D 1 D C 1 2 3 4 5 6 7 8 9 10 11 17 18 Line Type EA A B Quantity 1 1 1 B 1 B B B B B B B B C. Fax 1 1 1 1 1 1 1 1 According to requirements According to requirements According to requirements 1 2 3 2 1 Notes: 1. EA- Fully unrestricted-direct local and truck call c/w executive telephone handset. 2. A- Fuly unrestricted –direct local and trunk call c/w standard telephone handset. 3. B- Semi unrestricted-direct local call via operator c/w standard telephone handset. 4. C-All external call through operator (only extension call) c/w standard telephone handset 5. D- Public phone (by Telekom Malaysia) 6. I – To be applied by tenant DETAIL SPACE REQUIREMENT No. Sub Area 2.1 Server Room Function To house servers and main network equipment Net Floor Area per Unit (m2) 20 Architecture Scope a. Floor Finishes Raised Floor b. Half Glass Panel M&E Scope a. 10 units Socket Outlet three phase and 5 unit socket outlet single phase b. Split Air Conditioned - 4 unit c. Ventilating Fan ICT Equipment a. Servers - 4 units b. Firewall c. Core Switch d. Network equipment rack e. UPS for the servers f. CD ROM storage system g. Data Storage System h. Network Tape Backup System Equipment (significant equipment only) Built –In Furniture (Including in the scope of work) Loose Furniture (Not included in the construction scope of work) 2.2 Technician Room Provide Management Working Area 25 a. Floor Finishes Tiles a. Socket outlet - 6 units 13A/240V Single phase a. Personal Computer'- 2 units a. Low Cabinets a.Computer Table and Chair b. Shelves Working Area Technician Area and Maintenance jobs 2.3 Staging and Store CD and Documentation manuals Room a. Floor Finishes Tiles 15 a. Floor Finishes Tiles b. Air Conditioned c. Extension Telephone Line a. Socket outlet - 10 units 13A/240V Single phase b. Air Conditioned a. Socket outlet - 5 units 13A/240V Single phase b. Air Conditioned b. Rak Fail Besi c. Rak/gerobok besi b. Scanner 1 unit c. Printers 1 unit a. Personal Computer'- 1 unit a. High Cabinets b. Shelves a. Workbench b. Stool a. Low Cabinets b. Shelves a.Computer Table and Chair b. Rak Fail Besi c. Rak/gerobok besi ACCOMODATION UNIT Description 1 2 3 4 ICT Centre Server Room PPSM And Technician Room Working And Maintainance Area Staging and Documentation Room Sub Total Capacity (Person) 0 2 4 0 ACCOMODATION REQUIREMENT Balance for Wall Net Total No Circulation Area Per Net of Area Unit Area Units (m2) (m2) Area % (m2) 1 1 1 1 28 15 20 15 28 15 20 15 0 0 0 0 0 0 78 Total Area (m2) East Cost / m2 (RM) Estimated Total Cost (RM) JADUAL SPESIFIKASI BAGI MEMBEKAL, MENGHANTAR, MEMASANG RANGKAIAN KAMPUS KE KOLEJ KOMUNITI KEMENTERIAN PENDIDIKAN TINGGI MALAYSIA KATEGORI RANGKAIAN KAMPUS KOD TENDER: KOD DOKUMEN: KOLEJ KOMUNITI PAKEJ KOD NO ITEM 1SRK SRK1 SPESIFIKASI KEMENTERIAN NETWORK INFRASTRUCTURE General i. Community College network system will consist of both structured cabling and centralized wireless network system. ii. All structured cabling system (SCS) must conform to; a. ANSI/EIA/TIA 668-B, 1 General SCS Requirements standards b. ANSI/EIA/TIA 668-B,2 Balanced Twisted Pair Cabling Components c. ANSI/EIA/TIA 668-B,2.1 (Category 6 Transmission Performance) d. ANSI/EIA/TIA 668-B,3 Optical Fiber Cabling Components e. ANSI/EIA/TIA 669-A Pathway & Spaces f. ANSI/EIA/TIA 607 Grounding & Bonding g. All standard relevant applicable local building guidelines and laws. h. All SCS components must be from same brand / manufacturer for uniformity and consistency iii. All wireless LAN system must conform to NEGARA ASAL JANAMA DAN NO MODEL SPESIFIKASI PENENDER a. ISO/IEC 9464-2-TSS & TP and ATC b. ISO/IEC 60950 c. EN 60950 iv. The alruotured cabling shall have warranty period of at least fifteen (15) years v. The wireless LAN network shall have warranty period of at least three (3) years vi. The vendor must commit to minimum of 3 years warranty of parts and labour after commissioning vii. The vendor shall provide complete documentation of the cabling system, wireless LAN, active networking system and server system upon commissioning. This documentation must include: a. Inventory of networking equipment b. Graphical representation of the cabling layout c. Must submit 1 x CD (burnt softcopy), 1x hardbound copy, 1x working copy viii. The vendor shall provide complete printed test results for the cabling systems and must be certified by manufacturer upon commissioning. Please also specify the type of approved cable tester to be used in this installation. ix. The vendor must Inspect and test all existing trunking and conduit’s. Existing good condition trunking and conduit’s shall be used for laying cables . Vendor shall provide external trunking and conduit’s for cabling where necessary. The vendor shall no hack the buildings and should install external drop down conduit’s for suitably identified node locations. x. Where applicable, the vendor must pull-out all existing copper and optical fiber cables where possible and make use the cable route where applicable. All structured cabling provide must be from face places and terminating the connections at the paloh panel, and wireless controller to access point as per xi. The power source for all network equipment must come from a dedloaled new 13AMP power outlet and must include surge protectors xii. The vendor must have proven track record in handling educational campus networking work. Please provide ells reference for at least two (2) project name, location, contact person and contact number for campus networking done within the last two years that has more than 300 UTP Cal. 6 nodes per ells with minimum 1,000 meters of optical fiber backbone and utilizing at least 10 end switches-all within one location xiii. The vendor must provide details of personal that have the necessary credenllas (certified status by principal) for the products being proposed. Please attach a complete resume for the personnel to be working for this project. xiv. Bidders shall submit a proposal for the campus network that fulfill at minimum the requirement below. Please state justifications where specification devices from requirement. A. Structured Cabling System General 1.1 Vertical cabling system that provides the main physical connectivity: a. Shall be fiber optic cable which support IEEE802.3z for both SX and LX. b. Shall be well protected, flexible, economic, reliable and easy to install and c. Shall be installed in proper trunking and conduit’s d. Shall be of the correct type suitable with connection required. Please describe this connection in diagram. e. Shall be terminated on fiber paloh panel at both ends using industry standard connectors e.g plullas with corresponding connectors. f. All optical fiber cabling must be linked from main switches to all workgroup switches locations within the campus. g. Must be designed with redundancy links from main switches to work group switches- please describe vendors proposal. 1.2 Horizontal wiring systems that extends the backbone to user work group locations: a. Min category 6-4 pairs UTP cable. Please specify quantity to be installed. b. Shall be neatly installed in proper cable route. c. Must be supplied with paloh cable at both ends (min 2m & 3m) d. Termination at user work area must be done using cal, 6 RJ45 Modular Jack come with proper sheltered Jack and faceplate and industrial strength label. This outlet Jack must be able to support multiuser telecommunication outlet application. 1.3 Patch panel system a. Must accommodate the number of ports needed b. Shall be based on RJ45 Paloh Panel, which compiles to IEA/TIA 568, TSB 40 with 24 x RJ45 sockets per panel c. Must be mounted on the 19" data equipment rack. d. Proper wiring management system to ensure good cable termination and arrangement of paloh cords. e. The patch cords must be factory made ( mln 2m at panel & 3m at user work area) f. Shall be installed nearly and properly g. Cable termination at patch shall be direct to face plates at user work areas 1.4 Workgroup location wiring system shall connect the patch panel at user work areas 1.5 Network equipment rack a. The unit must be able to accommodate all the equipment and panels to be installed to complete the installation with minimum 3Us available for expansion b. Shall be 19" CKD metal rack, rigidly constructed with anti-rust coating, two toned oven baked finish, and non-flammable metal material no less than 1.2 mm thick c. Shall be 19" CKD metal rack, rigidly constructed with anti-rust coating and non-flammable metal material no less than 1.2mm thick d. The width and height shall accommodate the intended usage with at least 800mm W x 800mm D e. The front door must be made of glass and lockable f. Shall be equipped with rack mount Uninterruptable Power Supply (UPS) g. Shall have minimum of 6 units of power point standard 3-pin plug and draw power from UPS h. Must come, with at least ventilations fan (2),adjustable stand with wheel and lock, side vertical cable management panel, and caged-nuts 1.6 Cabling System Documentation a. The vendor shall develop and submit for approval a labelling system for the structured cabling installation b. The labelling system shall clearly identify all components of the system racks, cables, panels and outlets c. The overall system documentation must come complete with SCS documentation. Vendor is to propose the minimum contents that will be included in the documentation B. Wireless LAN System 2.1 The wireless solution shall be centralized architecture with indoor and outdoor Access Point and centralized wireless controller system 2.2 The wireless equipment shall be WIFI Alliance Certified 2.3 The wireless solution shall be self -conained Integrated solution, not requiring 2.4 Communication of access point controller a. Shall not require reconfiguration of existing network equipment b. Shall apply industry standard tunneling protocol c. Shall have encrypted data and control channel d. Shall support secure connection IPSEC/VPN 2.5 Access Point a.Shall support 802.11 a/b/g/n/ac and 802.3af(power over Ethernet) b. Shall support auto-sensing 10/100/1000 Mbps LAN port c. Must come with complete mounting kiis, lockable / secure casing d. Must support minimum of 8 SSID's and BSSID's e.Must be capable of multi-function services including ata access, instruction detection, instruction prevention, location tracking, packet capture, RF monitoring f. Must provide versions of AP's that support internal and external antenna g.Must provide a broad family of external antenna that vendor will certify to meet FCC standards and will fully support h. Must b capable of serving multiple WIFI functions 2.6 Wireless Controller System a. Auto, update firmware and software b. Unified AP configuration centrally managed and maintained via the controller c. Must support dynamo load balancing d. Must support instruction Detection /Prevention System e. Must support authentication and encryption RADIUS, MAC, Machine, WPA, WPA2, WEP,TKIP,AES, LEAP, PEAP, EAP-TLS, EAP-TTLS,EAP-GTC f. Must support WebAuth/Captive Portal g. Must support SSID and VLAN access control h. Must support dynamic access rights i. Must support polices enforcement and blocking of pollcels violation j. Support interracial blocking and traffic redirection k. Support upstream and downstream packet tagging between AP to controller l. Support port / bandwidth prioritization m. Must support switching, routing, and spanning n. Support NAT,DHCP,QoS, SNIMP v3, SSH, SSL login o. Controller must be able to support at least 6 AP's per box and up to 100 users SRK2 NETWORK EQUIPMENT General I. The vendor shall propose the number of core switches needed for the Campus Network to have full resiliency II. The vendor must provide enough Gigabit Ethernet ports for all the end switches, serves and others network related related peripherals. A. Core switches 1.1 Characteristics The core switches shall have the forwarding characteristics a. Min of 30 Forwarding bandwidth b.Min 36 million packet per second forwarding rate base on 64-byte packet c. Minimum of 4 GBIC/SFP slot per switches d.Must be configured with the correct number of connectivity ports per switches with min 30% availability for expansion e. Provide sufficient Ethernet Interface which are: a. 10/100/1000 Mbps over copper b. 100/1000 Mbps and 10Gbps over fiber firmware combines standard with advanced features to deliver Policy Based QoS end-to-end that includes prioritization, bandwidth management, and VLAN switching and routing with BOTH minimum and maximum bandwidth assigned h. Allows Network Managers to use Policy-Based QoS to prioritize and allocate bandwidth to many different types of network traffic by port based, MAC based, IP based, and TCP/UDP session i. Management via local and remote (telnet) Cli, SNMP, RMON, and HTTP (Web GUI) j. Muet comply to Protocols and Standard I.IEEE 802.1x II. IEEE 802.1w III.IEEE 802.1s IV. IEEE 802.3x full duplex on 10BASE-T, 100BASE-TX and 1000BASE-T ports V. IEEE 802.1D Spanning-Tree Protocol VI.IEEE 802.1p CoS Prioritization VII. IEEE 802.1Q VLAN VIII IEEE 802.3ad IX. IEEE 802.3 10BASE-T specification X. IEEE 802.3u 100BASE-TX specification XI. IEEE 802.3ab 1000BASE-T specification XII. IEEE 802.3z 1000BASE-X specification XIII. ENTITY-MIB XIV. IF-MB XV. IGMP-MIB XVI. IPMROUTE-MIBL 2/3 INTERFACE MIB XVII. OSPF-MIB (RFC 1253) XVIII.PIM-MIB XIX.RFC 1213-MIB XX. RMON2-MIB XXI.SNIMPv2-MIB XXII. TCP-MIB XXIII.UDP-MIB k.provide syffolent 10/100/1000 RJ-45 port l. Provide suffolent 10/100/1000 Base SX or LX port m. All network equipment must be housed in network equipment rack n. All network equipment including accessories must come with 3 years comprehensive warranty. C. End Switches 1.1 General a. Ethernet based switch come with user and uplink ports in both copper and fiber connectivity option b. Autosensing 10/100 BASE-TX ports c. 1000BASE-SX, LX?LH SFP - based ports; LC fiber connectors d. Must have POE port for Wireless Access Point e. Min 8 Gbps Switching capacity f. Min 6 Mbps Wire speed forwarding rate g. Min 30 MB DRAM h. Min 16MB Flash Memory i. Configurable up to 8000 MAC address j. Support Ether channel k. configurable maximum transmission unit of up 9000 bytes, with a maximum Ethernet frame size of 9018 bytes for bridging on Gigabit Ethernet port and up to 1998 bytes for bridging of multiprotocol Label Switching lagged frames on 10/100 ports l. Per port status LEDs; Link Integrity, disable, activity, speed, full duplex installation m. Configured in 24 ports RJ45 with minimum two uplink 1000 BASE-x SFP ports (hot swappable via SX or LX or TXmodules) n. maximum suvcription ration of 5:1 o.Support QoS p. must comply to Protocols and Standards; I. IEEE 802.1x support II. IEEE 802.1w IV.IEEE 802.3x full duplex on 10BASE-T, 100BASE-TX, and V. IEEECos Prioritization VI.IEEE 802.1Q VLAN VII. IEEE802.3 10 BASE-T specification VIII. IEEE802.3u 100 BASE-TX specification IX. IEEE802.3ab 1000 BASE-T specification XI. IEEE802.3z 1000 BASE-X specification XII. 1000BASE-X (GBIC) XIII. 1000BASE-T (GBIC) XIV.1000BASE-SX XV. 1000 BASE-LX/LH q. Must comply to Management and Security i. RMON I and II standards ii. Web base GUI configuration and Management r. Regulatory Compliance i. EN55022 Class A ii. FCC part 15 Class A iii. CE Mark s. Operating Temperature (0 to 45 C) t. Must be configured with redundant link for high availability and be connected to core switch with minimum 1000Mbps u. Indicators for link status, link speed, full-duplex v. All networks equipment’s must be housed in network equipment rack w. All network equipment including accessories must come with 3 years comprehensive warranty D. Network management software i. Extensive device configuration and status monitoring for individual switches ii. Centralized Management and Configuration of switches connected as aggregate entities iii. multiple switched Virtual Lan (VLAN) creation and management v. Inventory Tool/Report - Controls the enterprise manager platform inventory of managed devices vii. Address management which maps users and device names to lower-layer information viii. Simple web console and server to configure policies ix. Network troubleshooting, automatic identify potential network problem and recommended course action x. Support all proposed network equipment xi. Qos Support features or Network Optimization xii. This software must be supplied with the necessary hardware and OS platform where applicable E. Training 1.1 Network Equipment Training a. Training for minimum 3 participants per college by certified professional on-site for a min of 5 working days b. The training is to incorporate all the operational skills required to ensure that the system maintenance and effectively be performed such as core switch and end switch installation and steps c. Vendor must propose the course contents in detail and the training schedule required d. vendors must provide printed courseware to participants. SRK3 SERVER General Equipment: 1.1 The servers are to be located in server farm room or a specified by the client 1.2 Each server must be installed with Virtualization Operating System Environment (or latest version/patches). Comes with service pack and option pack if applicable 1.3 All servers must at least have four network connections for high availability purposes, please describe the proposed connections 1.4 3 years on-side warranty and must be fully supported by manufactured services 1.5 Warranty includes 3 years parts, 3 year labour, 3 year on side support A. Server 1. Minimum Hardware Requirement; 1.1 CPU CPU: Minimum Six-Core Intel Xeon E5-2620, 15MB L3 Cache, 2.0GHz, 1333 MHz FSB, upgradeable to 2 processor 1.2 Chipset: Minimum Intel 5000X with 800 MHz Front Side bus 1.3 Memory: min 32GB (8 x4GB) PC3L-10600 CL9 ECC DDR3 1333Mhz up to 768GB 1.4 Network Adapter: Integrated 4 Gigabit Network Card with TOE 1.5 Total storage capacity ; 900 GB x 2 configured at RAID level 1, SAS hot-plug hard drives 1.6 Internal Storage: minimum 3 hot-pluggable HDD bays 1.8 Power supply : 2 (redundant) power supplies 1.9 DVD-ROM 1.10 I/O Ports: Two USB 2.0 and one DB-15 video on front. Four USB 2.0, one DB-15 video, one DB-9 serial, one RJ-45 systems management 1.11 Graphic system: Integrated ATI ES1000 controller with 16MB of SDRAM 1.12 2 PCI express slots: 3x (Pie 3.0x8) 1.13 Form factor: Rack type 2U height 1.14 Server must come with a complete documentation and user manuals, power cord and cable 1.15 Server must be able to perform and come with: a. NOS and application management b. Remote management - system monitoring, control and management c. Wake on Lan technology and LAN client control capabilities d. Auto alert management software e. RAID monitoring and administration features f. Intelligent Manageability: - Automatic Server Recovery - 2 (ASR-2) - Drive Parameter Tracking (with array controller) - dynamic Sector Repairing (with array controller) g. Installation and configuration guide 1.16 Security features : a. Power and password b. Setup Password c. diskette boot control d, Parallel and serial interface control e, Disk configuration look f, Power switch security 1.17 Power supply: 670 Walls, Power Factor Correction (PCF), Hot Plug to 240 VAC Rated Input, Voltage (Auto sensing), CE Mark Compliant 1.18 USB to RJ45 Adapter for KVM Connectivity. 1.19 Each server must come with Hypervisor Virtualization Operating System Environment or latest with latest patches and configured to function as per requirement by college B, Installation 1. Servers configuration and installation 1.1 The servers should be installed into appropriate server rack from same manufacturer complete with accessories for complete installation 1.2 The rack should be installed with the following : a. 17" TFT LOD panel and multi-channel display controller or equivalent device if necessary (KVM Switch with minimum 4 gang). b. One UPS unit able to support the servers power load for at least 10 min during power outage with auto shutdown c. Input Devices : Windows keyboard, mouse and pad 1.3 System configuration : a. Each server shall be installed with and configured to be functioning as per user requirement to complement existing servers functionally 2. All servers must come with the following : 2.1 Min, three years warranty period after commissioning. Technical support during Warranty period includes : a. Response Time : 4 hours b. Loaner unit : 1 Day c. Turnaround Time : 2 Days d. Telephone Support e. Parts (3 years) and maintenance 2.2 Complete documentation and user manuals, power cords and cables C. Training 1. System 1.1 Training for minimum 3 participants on site for a min of 3 days 1.2 The training is to incorporate all the operational skills required to ensure the system maintenance could effectively be performed such as : Network Operating setup, System administration-PC management from server level 1.3 Vendor must propose the course contents in detail and the training schedule required. 1.4 Vendor must provide printed courseware B, Installation 1. Servers configuration and installation 1.1 The servers should be installed into appropriate server rack from same manufacturer complete with accessories for complete installation 1.2 The rack should be installed with the following : a. 17" TFT LOD panel and multi-channel display controller or equivalent device if necessary (KVM Switch with minimum 10 gang). b. One UPS unit able to support the servers power load for at least 10 min during power outage with auto shutdown c. Input Devices : Windows keyboard, mouse and pad 1.3 System configuration : a. Each server shall be installed with and configured to be functioning as per user requirement to complement existing servers functionally 2. All servers must come with the following : 2.1 Min, three years warranty period after commissioning. Technical support during Warranty period includes : a. Response Time : 4 hours b. Loaner unit : 1 Day c. Turnaround Time : 2 Days d. Telephone Support e. Parts (3 years) and maintenance 2.2 Complete documentation and user manuals, power cords and cables C. Training 1. System 1.1 Training for minimum 3 participants on site for a min of 3 days 1.2 The training is to incorporate all the operational skills required to ensure the system maintenance could effectively be performed such as : Network Operating setup, System administration-PC management from server level 1.3 Vendor must propose the course contents in detail and the training schedule required. 1.4 Vendor must provide printed courseware SRK4 FIREWALL The firewall is to be located in the server farm room and shall be provided with a monitoring and management station. 1. The firewall must: 1.1 Allows internal users to security access the Internet via virtual IP 1.2 Denying unauthorized access to internal LAN from the internet 1.3 Able to perform port blocking 1.4 Integrated with the Windows 2012 Server Security 1.5 Packet filtering 1.6 Transparent proxies 1.7 Probe detection and blocking 1.8 Dynamic host blocking 1.9 Network address translation 1.10 Protects local network from outside intruders and limits access to the internal servers 1.11 Support remote Winsock 1.12 Hides internal network addresses on the internet 1.13 Warns administrators when an attacker is attempting to breach the system, Notification of attacks should be done with real-time messages, electronic mall, or others. 1.14 Logs and reports- provides information that helps to evaluate and detect potential security problems 1.15 Comprehensive logging and reporting provide pinpoint control of any device or service. 1.16 Flexible security policies makes it easy to taller the system to meet specific business needs 1.17 Spam blocker-Anti-spam service, blocking of unwanted e-malls 1.18 Web blocker- Blocks access to malicious Web content and manages user’s web surfing to increase productivity and decrease security links 1.19 Gateway Antivirus/Intrusion Prevention Service with anti-spyware Robust, signature-based protection at gateway that slops known viruses, spyware, Trojans, web-based exploits 1.20 Surf protection- Option to block users from accessing illegal web content 1.21 Content flittering- such as MP3 music download blocking, flittering for potentially dangerous executable files or blocking of annoying pop-up windows 1.22 Interactive, real-time monitoring and protection 1.23 LAN ports- Minimum four (4) 10/100/1000 Mbps auto-sensing, Auto Uplink RJ-45 ports 1.24 WAN ports- Minimum two (2) 10/100/1000 Mbps Ethernet RJ-45 ports with auto fall-over and load balancing. 1.25 Virus Checking 1.26 Transparency-Allows Internal users to access internet without facing hurdles or delays 1.27 Support IPsec 2. Hardware 2.1 Throughput : Minimum 100Mbps 2.2 Concurrent Session : Minimum 200 000 sessions 3. Protocol Support 3.1 Network : IP routing, TCP/IP ,UDP, ICMP, PPPoE 3.2 IP Address : DHCP (client and server) 3.3 VPN/Security: IPsec (ESP, AH) MD5,SHA-1, DES, 3DES, IKE, PKI, Aes 4. The Firewall must come with the following: 4.1 Min. Three a. Response Time : 4 hours b. Duration of warranty and subscription: 3 years c. Telephone and others online medium support 4.2 Complete documentation and user manuals, power cords and cables 4.3 Latest software to protect networking system 4.4 Expert technical support 4.5 Up-to-the-minute security warning broadcasts 4.6 Self-help resources such as training, certification and tutorial programs. 5. Software and Hardware Training 5.1 Training for minimum 3 participants on site for a min. of 1 day 5.2 The training is to incorporate all the operational skills required to ensure the system administrator to be able to install, configure and manage the firewall operation involved using the respective software 5.3 Vendor must purpose the course contents in detail and the training schedule required' SRK5 DATA STORAGE SERVER General Requirement: 1.1 The storage servers are to be located in server farm room or specified by the client 1.2 Provide Centralize data storage and sharing to Collage Community users and must support the integration of data flow in Windows environment 1.3 Warranty includes 3 years parts, 3 year labour, 3 year on site support A. Data Storage Server 1. Minimum Hardware Requirement; 1.1 2U modular disk system 1.2 Web-based GUI 1.2 4GB Cache per controller 1.3 Support for RAID 0,1,5,6 and 10 1.4 4 x 1Gbps iSCSI host interface 1.5 6 TB (600GB x 10) 2.5" SAS Drive 10K 1.7 Support Hypervisor Virtualization Operating System Environment 1.8 Form factor: Rack type 2U height SRK6 UNINTERUPPTIBLE POWER SUPPLY SYSTEM (UPS) Generals Requirement: 1.1 The UPS system required is to required power protection and backup during power outrage to the network devices and servers 1.2 The UPS must be able to support the proposed load factor of the equipment being proposed and have minimum 10 minutes backup time 1.3 Warranty includes 3 years parts, 3 year laboUr, 3 year on site support 1.4 Minimum Hardware Requirement 1.1. Min 2KVA power capacity 1.2 Able to monitor and manage servers 1.3 Provide lighting and surge protection 1.4 Rack-mount type SRK7 SOFTWARE General Requirement 1. All software installed must come with appropriate site Licenses. Min. software/licenses to be included: 1.1. Windows Server 2012 R2) MVL 1.2 MS SQL Server 2012 Enterprise Edition Full Pack + 10 CALs 1.3 MS System Center 2012 R2 1.4 Antivirus for Servers and Clients 1.4 Hypervisors Virtualization Operating System SRK8 ENGENEERING SERVICES 1. Bidder is to include all the necessary services to make proposed system functional at each of the identified campus 2. Bidder is to include 3 years on site product warranty as stated in each of the product category above. 3. Bidder is to provide the required training as stated above and also to propose additional training deem necessary operational capabilities for each campus 4. Bidder is to provide a complete system documentation for the proposed System. SIDANG REDAKSI PENAUNG PPj. KEHORMAT (PA) Dato' Amir bin Md Noor PENASIHAT En. Badarudin bin Kusni KETUA EDITOR Pn. Wan Nurul Hidayah binti Wan Mohamad Akil EDITOR En. Mohd Suhalil Bin Omar En. Firdaus bin Hassan PENYUSUNAN DATA En. Badarudin bin Kusni Pn. Wan Nurul Hidayah binti Wan Mohamad Akil En. Mohd Suhalil Bin Omar En. Firdaus bin Hassan