Request forProposals#16-16-16

Nameof Proposal:WirelessAccessPoints,SwitchesCabling

Purpose:Toinstallcabling,switchesandaccesspointstoallschoolstomakethecampuses100%wireless.

TheMoss PointSchoolDistrictdesirestopurchasecabling,switches,andwirelessaccesspointstomakeallschoolscampusesWi-Fiaccessible.

SelectionSchedule

QuestionsmustbesubmittedinwritingtoBrian llowfor24hoursfora response.

RFPReleased / WednesdayFebruary17,2016
FinalDayforQuestions / FridayMarch 4,2016
MandatoryBidder’s Conference / February25and 26,20169 A.M.
ResponseDeadline –Bids Close / WednesdayApril 6,2016 9 A.M.
BidOpening / WednesdayApril 6,2016
Evaluationof RFP / MondayApril 11,2016

SubmitProposalto:

Moss Point School District

4924 Church Street

Moss Point, MS 39563

Note: Pleasesubmit(1) oneoriginaland (1)onecopyofRFP.NofaxedoremailsRFPSwillbe acknowledgedorallowed.PleaseencloseRFPproposalinasealed envelopewiththevendorsreturnaddress,RFPNumberandtitle ofproposal. Mail orhanddeliverto thesubmit proposaladdresslisted above.

RFPSpecificResponseRequirements

Bidders mustsubmita descriptionoftheir company’sexperience,qualifications,andthetechnical certificationsofthepersonnelresponsibleforcompletionof theproject. Thisshould be nomorethanonepage.

Biddersmustsubmitthenamesandcontactinformationforthree customerswhocan providespecific referencesforthe installationofbuilding-wideWi-FiinstallationsofMerakiorequivalenthardwareand infrastructure.

CRITERIAFORSELECTION

MPSDwillutilizethefollowing criteria(based asthebasis fortheproposalevaluationsand selection).

Factor / Weight
Price of theE-RateELIGIBLEgoods andservices / 25%
Price ofOthercosts / 10%
PriorexperiencewiththeDistrict / 20%
PersonnelqualificationsProfessionalism / 10%
Managementcapability/TechnologySolutionSOW / 5%
Companyprovidesall services(nosub-contractors) / 10%
PreferencetoEnergysavingscompliance / 10%
PreferencetoMississippibasedcompanies / 10%
Total / 100%

CONTRACTTERMS

Theinitialtermofthe contracttermwillbeginJuly1,2016 andendSeptember30,2017.Contractshould provideforextensionstoalignwithservicedeliverydeadlineextensionapprovalsgrantedbytheUniversalServiceAdministrativeCompany(USAC). InitiationofthecontractisdependentonE-Ratefunding;inthe eventE-Ratedoesnotfundtheprojectthenthecontract willbenullandvoid. Thedistrictreservesthe righttowaivetheERATEfundingrequirement.

BIDSUBMISSION-EXCELSPREADSHEETTEMPLATEREQUIRED

Vendorsshall use theExcel spreadsheetprovided aspartof thisRFPtocompletetheirresponse.All columns definedinthe spreadsheet mustbecompleted. Zero(0)shouldbeenteredinanycolumnforwhichthereis no cost. Vendorsmayaddcolumnsiftheydeemitnecessarytoprovideaccuratecostinformation.

Vendorsmayaddrowsifthere isanadditionalitemneeded forthesuggestedsolution.Nocolumnsorrows maybedeleted. Any rowsor columnsadded shouldbehighlightedandexplained withsupportingdocumentation.

BiddersmustprovidetheE-rateeligibleportion (0%-100%)ofallitems.Biddersmustreadandunderstand theFCCE-RateEligibleServicesListforFY2016- bytheserviceprovider.

Vendors mustincludeaprintedcopyofthe completedExcelspreadsheetwiththeirproposalresponse. Vendors mustincludeONEelectroniccopy in.xlscompatibleformatonmedia.

Referencestobrandnames,modelnumbers,orother descriptionsaremadetoestablisharequiredlevelof qualityandfunctionalcapabilitiesandarenotintendedtoexcludeothermanufacturers.Comparableproducts ofothermanufacturerswillbeconsideredifproofofcomparability,equivalence,andcompatibilityis containedintheproposal.Vendors,ifproposingotherthanspecified,aretoclearlyidentifythemanufacturerandthe modelnumber and mustprovide written,complete justificationastohowtheproduct complieswith allspecifications outlinedwithinthisRFPandhowtheproductintegrateswithexistingdevicesaswellas thecompletelistofmanufacturerpublishedspecificationsrelatedtotherequestedproducts.Itshallbe theresponsibilityofthebidderstofurnishdescriptiveliteraturewiththeirproposalsuchthatspecifications,catalogpages,brochuresor otherdatawillprovideanadequatebasisforverifyingthequalityandfunctional capabilitiesoftheproductoffered.Failuretoprovidethisdatawillbe consideredvalidjustificationforrejection oftheproposal.

Unlessotherwise specified,vendorsshallprovideeverythingrequiredtomakethedevices,software,appliances,installation,etc.100%operational.

E-RATECOMPLIANCE

Itisexpectedthatthe awardedserviceprovidershallbeincompliancewithrulesandregulationsoftheUniversalServicesSupportMechanismforSchools andLibraries (“E-RateProgram”) administeredbythe UniversalServiceAdministrativeCompany(USAC).AllchargesforservicesprovidedduringtheperiodJuly1,2016through June30, 2017forrecurringservicesorJuly1,2016throughSeptember30,2017fornon- recurringservicesshouldbebilledandinvoicedtoboththeDistrictand SLD following USAC’sinvoicing proceduresforE-ratefundingyear2016.

TheServiceProvideris responsibleforprovidingavalidSPIN(ServiceProviderIdentificationNumber)atthetimethebidissubmitted.See:

TheserviceproviderisresponsibleforprovidinganFCCRegistrationNumber withtheirproposalandevidenceofbeingingreenlightstatus.See:

DISQUALIFICATION:

AnypotentialbidderfoundtobeinRed-LightStatuswillbedisqualifiedfromparticipationinthebidding processandwillbeconsiderednon-responsive.

FAILURETOPROVIDEAVALIDSERVICEPROVIDERIDENTIFICATIONNUMBER(SPIN)andFCCREGISTRATIONNUMBERWILLRESULTINDISQUALIFICATIONOFBIDAWARDSFORE-RATEELIGIBLEGOODSANDSERVICES.

AftertheFCCForm471including fundingrequestsassociatedwiththe awardedserviceprovider’sSPIN isfiled bytheDistrictforFY2016,theawardedserviceprovidermustfileaServiceProviderAnnualCertificationForm(SPAC-Form473)forE-Ratefundingyear2016.

AllServiceProviderswillberesponsibleforprocuringtheapprovedE-ratediscountamountfromUSACusingtheServiceProviderInvoicing(“SPI”-Form474)methodunlessotherwisedirectedby theDistrict. TheDistrictmay utilizethereimbursement(Form472)methodatitssoleoption.

IntheeventofquestionsduringtheE-Rateprogramintegrityassurance(PIA)reviewprocess,thesuccessful serviceproviderisexpectedtoreplywithin3businessdaystoquestions associated withtheirproposal.

TheServiceProvidershallsendcopiesofALLformsandinvoicessubmittedtoUSACtotheDistrictfortheirrecords.

Theawardedserviceprovider(s)mustagreetoretainallrelevantdocumentationrelatedto theE-ratefundingrequestsassociatedwiththeirSPINforaperiod ofatleastTENyearsafterthelastdayofservicedelivered. Furthermore,theawardedserviceprovidermustcertifythattheywillretainalldocumentsnecessaryto demonstratecompliancewiththestatuteandCommissionrulesregardingtheapplicationfor,receiptof,and delivery ofservicesreceivingschoolsandlibrariesdiscounts,and thatiftheDistrictisaudited,theserviceproviderwillmakesuchrecordsavailabletotheDistrict. Allawardedserviceprovidersacknowledgethatthey maybeauditedpursuanttoparticipationintheschoolsandlibrariesprogram.

Referencestobrandnames,modelnumbers,orother descriptionsaremadetoestablisharequiredlevelof qualityandfunctional capabilitiesandarenotintendedtoexcludeothermanufacturers.Comparableproducts ofothermanufacturerswillbeconsideredifproofofcomparability,equivalence,andcompatibilityis containedintheproposal.Vendors,ifproposingotherthanspecified,aretoclearlyidentifythemanufacturerandthemodelnumber and mustprovide written,complete justificationastohowtheproduct complieswith allspecifications outlinedwithinthisRFPandhowtheproductintegrateswithexistingdevicesaswellas thecompletelistofmanufacturerpublishedspecificationsrelatedtotherequestedproducts.Itshallbe theresponsibilityofthebidderstofurnishdescriptiveliteraturewiththeirproposalsuchthatspecifications,catalogpages,brochuresor otherdatawillprovideanadequatebasisforverifyingthequalityandfunctional capabilitiesoftheproductoffered.Failuretoprovidethisdatawillbe consideredvalidjustificationforrejection oftheproposal.

Unlessotherwise specified,vendorsshallprovideeverythingrequiredtomakethedevices,software,appliances,installation,etc.100%operational. This includesbutisnotlimited topatchcables, connectors,dongles,mountinghardware,etc.

Duetothecomplexityand theamountofknowledgerequiredforsuccessfulplacementandconfiguration,MPSDisseeking acomplete“turnkey” solution thatcoversequipmentacquisition, installation, configuration,

andknowledgetransfer.

Therewillbearequiredonsitebidder’s conference intheMPSD Board Room located in the Carl Ely Building 4924 Church Street, Moss Point, MS 39563. Failuretoattendtheconferencemayresultin rejectionoftheproposal.

InstallationRequirements

  • TheselectedvendormustbeabletomeetonsitewiththeMPSDITstaffto completeascheduleandscopeofworkbeforeinstallationscanbegin.Vendorwillcoordinate withMPSDtoschedule deploymentsof hardwareinsuchawayastominimizetheimpactonnetworkusers.
  • Vendorwilldeliverall equipmenttothe MPSDFixedAssetdepartmenttohaveassettagsaffixedif necessary.MPSD willcoordinatewiththe vendortoschedule thedeliveryandinstallation. Vendorsare

expected topickupdevicesfromtheMPSDFixedAssetswarehousefordeliverytoschoollocationsas scheduled.

  • Vendor willremoveanddisposeofallpackagingandmiscellaneousmaterialsleftoverfromany part oftheinstallationandplacealltrashinanidentifiedon-sitedumpsterortaken bythevendortoanoff-sitelocation. MPSDpersonnelwillnotdisposeofanypackingmaterials.
  • Alladditionalcables,connectors,screws,labor,miscellaneousplugparts,modules,etc.neededtomakethewirelessaccess points100% operationalshouldbeincludedintheinstallationcostandprovidedbythevendor.Anycosts notoutlinedinthevendorproposedbudgetthatmay berequired forthesuccessful completionoftheinstallationofthedevicesareassumedtobeprovidedby thevendorandatnocost to MPSD.
  • Allcablingtomaketheaccesspoints100%operationalshallbeprovidedaspart oftheproject.Cablingshouldbecompletedbycertifiedtechnicians andmeetallANSI/TIA/EIA-568-Bstandards.Suitablewiring

raceways,panduit,conduitandmoldingstoachieveafinishedinstallationappearancemustbeused.All additionalconnectors,screws,labor,panduit,conduit,ties,hangers,jacks,cables,parts,modules,etc. neededtomakethecablesconnectingthe wirelessaccesspointstothedesignatedswitchand/orpatch panelinordertomaketheaccess points100%operationalshouldbeincludedintheinstallationcost and providedbythevendor.Anycostsnotoutlinedinthevendorproposedbudgetthatmayberequiredforthesuccessfulcompletion of theinstallationofthedevicesareassumedtobeprovidedbythevendorand at no cost toMPSD.

  • Hardwareinventorywillbeprovidedto MPSDbythevendorincludingbutnotlimitedtodevicemodel number,serialnumber,MPSDassettagnumber,MACaddress,andlocation.
  • Vendorwillinstalland mountallswitch componentsinthedesignatedrackateachlocation.Thevendorwillprovideallrequiredrackmountinghardwareneededforinstallationandmounting.
  • Vendorwill coordinatewithMPSDITstaff toinstallandconfigureallsoftware,appliances, andanyotherapplicationsrequiredtomaketheWi-Fidevices 100%operational.Thevendor willprovideknowledgetransfertoMPSDIT stafftodemonstratefunctionalityofalldevices andmonitoringsystems.

TechnicalRequirementsandItemDescriptions

MPSDdesirestopurchasenetworkswitches/routersforallMDFandIDFclosets, wirelessaccesspoints and cablingtoprovide campuswide Wi-FiinallMPSDschools. MPSDdesirestopurchaseallcablingand hardwarerequiredforthesuccessfulcompletionoftheprojectfromasingleprovider.

MPSD currently hasanCisco switcheswithCiscoAccessPointsanditisimportanttothedistricttomaintainthefunctionalityof thisexistinginfrastructure. All accesspoints,switches,softwareorhardwareproposedthatdifferfromthespecifieditemsmustbecompatibleand equivalenttotheexistinginfrastructureandmustbe100%functionalwiththeexistingnetwork.

Aspart oftheinstallation,vendorsshallincludeanyandallSFPs,cables,brackets,mounts,etc.tomakeeach switchandmodule100%operational.Anycostsnotincludedintheinstallationrequiredforthesuccessful installationofthedevicesareassumedtobe providedbythevendorandatno costtoMPSD.

MPSDseekstomaximizetechnologyinfrastructureenergysavingsthroughtheupgradingofthecurrentInternetInfrastructureSystem. Respondentsareencouragedto advocate the installationand implementationofimprovementsprovidingthegreatestpossible energyandoperations/maintenancesavings. Essentialservicesandimprovementssoughtarethosethat will reduce energyconsumptionintheCustomer'sfacilitiesrelatedtonetworkandimprovementstoWi-Fi/Internetbasedcommunications/technologysystems.

Specificationsfordevicesortheirequivalentareasfollows:

Thedescriptionbelowreferstohow thecontrollermustworkwiththeaccesspointsandswitches.

  • Solutionmustbecompatible with ourexistingMerakicloudarchitecture.
  • Solutioncannot includeany"on-premise"managementappliances,servers,orvirtualmachines.
  • The wirelesssystemmustsupportastatefulapplication-layerfirewallthatcanidentify,classify,and prioritizeapplicationsusinglayer7 intelligence. Applicationsshouldbe abletobetrafficshaped as well to ensurethatrecreationalapplications(likePandora,Spotify, etc.)donotconsumealloftheavailable bandwidth.
  • Thewirelesssystemmustincludeintuitivemulti-sitescalability andmanagement.Mustbeableto deploymultiplesitesrapidlyandmonitor,manageandtroubleshootallsitesfromasingleweb-based interface.This includesbeing ableto"clone" configurationsofdevicesautomatically, andeasilyre-assign assetstoothernetworkareasasneeded. Thismustbe100%GUIbased,andno Command-Line(CLI) programmingforanyfeaturesispermitted.
  • The wirelesssystemmustsupporttheabilitytofingerprintclientdevicetypes(i.e.iPad, Android,iPhone,Windows,etc)andapplysecurity settingstothosedevices,withouttheneedforadditionalappliancesor

licenses.Forexample:iPadsontheStudent SSIDmayhaveaccess to only thewebandareratelimitedto512 kbps, andnopeertopeertrafficisallowed.

  • Thewirelesssystemmusthavecommonlymanagedproducts(WLAN,SecurityAppliances,AccessSwitches,IntegratedMDM)thatallowforend-to-enddeployment,monitoring,andtroubleshootingfromsingle paneofglass,andseamlessexpansionbeyondthewirelessnetworkalone.
  • Thewirelesssystemmustsupport BonjourgatewayservicestoallowAirplay,printing,iTunesandotherBonjour-basedservicestoflowseamlesslyacrossthewirelessnetwork.
  • The wirelesssystemmustsupportintegration withGoogleMaps,withtheabilitytouploadacustomfloorplanandoverlayitonthemap.
  • The wirelesssystemmustsupporttheabilitytoeasilyreplicateand cloneconfigurationsacrossmultiple

differentsitesusingasingleclick.Ideally,aconfiguration couldbechangedonceandthenreplicatedacross multiplesites.

  • The wirelesssystemmustsupporttheabilitytotakeapacketcapturedirectlyfromthemanagementinterface.Thispacket captureshouldbeabletofilterbasedon client,IPaddress,and MACaddress.
  • Thewirelesssystemmustsupporttheabilitytoprovidedeepapplicationvisibilityintoalloftheapplicationsthatareusedon thewirelessnetwork,including hostnamevisibilitytoviewtheindividual URLs ofalloftheapplications. Thisinformationshould beexportableand downloadableonapernetworkandperSSIDbasis.
  • The wirelesssystemshouldhavebuiltinguestaccessandnotrequireanyadditionalappliancesorlicensesforguestusers.
  • The wirelesssystemmusthaveawaytoopencases withsupportandmonitortheirstatusdirectlyfromthemanagementconsole.
  • Thewirelesssystemmustincludeataggingfunctiontoprovideeasysearch-abilityacrossournetwork,devicetypes, anduserswithsearch"tagging"functionality.
  • The wirelesssystemmustsupporttheabilitytosendsummary reportstocertainadministrators onadaily, weeklyand monthlybasis. Thesesummaryreportsshouldshowinformationliketopusers,top applications,bandwidthconsumedperday, etc. Thesesummary reportsshouldbeabletobe sentona perschoolbasis,oraggregated formultipleschoolsusingataggingmechanism. Forexample,oneadministratormaywanttoseesummaryreport informationforallelementaryschoolsinaggregateeveryweek.
  • Solutionmustincludeazero-cost,fullyintegrated,MobileDeviceManagementplatformcapableof managingAppleiOS,Android,Windows,andMacOSXdevicesallfromthesame commonmanagementinterfaceastheWLAN,AccessSwitching,andSecurityApplianceproducts. MDMfunctionalitymust requirenolocalhardware,software,orvirtualmachineappliancetooperate,andmust be 100%Cloud basedformanagement, with theabilitytoassign policiesviathemanagementinterfacetodifferentusers,networks,anddevicetypesbasedonpreferences.
  • Examplesof attributesincludeVLANs,firewallrules, andsplashpages.Mustbeabletoeasilyprioritizeand/orthrottle specificapplicationsor application type. Group policiesmustbeuniversallyapplicableto allnetworkcomponents(accesspoints,switches,andsecurityappliances).
  • Thewirelesssystemmustbe PCICompliant.Built-inPaymentCardIndustry(PCI)DSSLevel1Certified compliancereportingandremediationwizardrequired.
  • Solutionmustproviderichlayer7applicationvisibility andcontrol,withafullheuristics-drivenengine(Not TCP/UDPPortBased)forclassification(e.g.Skype,BitTorrent,webtraffic)andshapingofthattraffic.
  • Solutionmustincludefullyintegrated client,device,and OSvisibility,withabilitytoassignpoliciesviathemanagementinterfacetodifferentusers,networks,anddevicetypesbasedonpreferences. Group policies mustbeuniversallyapplicabletoall accesspoints andswitches. Managementinterfacemustbe100%GUIbased, andnoCommand-Line(CLI)programmingforanyfeatureispermitted.
  • SolutionmustintegratewithexistingCisco PrimeInfrastructuremanagementtool.
  • Mustmaintaincommonmanagement,inventory,andhistoricallogginginterfaceofexistingnetworksystemsand newcloud basedsystems.
  • Minimize anyconflictsbetweenexistingandnewwirelesssystems,andpreventany lossofcoverageoroperationswiththeexistingwirelessnetwork.
  • Wirelesssystemmust havebuilt-inredundancyandreliability.Solution mustbe abletoprovide a 99.99%servicelevelagreement,leveraginggloballyredundantclouddatacenters.

  • The wirelesssystemmustincludeafreeofcharge,MobileManagementapplication.Thisapplication mustbe supportedonbothApple iOSand Android mobileoperatingsystems. Thissinglemobile applicationmust beabletodothefollowing:
  • Monitorwireless,switching,andsecurityinfrastructure
  • Seeallwireless,switching,andsecurityinfrastructurenetworkstatusandusageviaeasytoreadgraphs andtables
  • Receivepushnotificationsforanynetworkoutages
  • Scanaccesspointbarcodestofacilitateaddingthemto thenetwork
  • Utilizethe mobiledevice'scamera tophotographanddocumentaccesspointmountinglocations
  • Pinpointaccess pointlocationusingGlobalPositioningSystem(GPS)
  • Verifydevice andclientconnectivityusinglive toolslikePing,Traceroute,etc.
  • Remotelyrebootdeviceswithouton-sitestaffintervention
  • QuicklydeploygrouppoliciestoclientsthatcontrolL3/L7firewalling,traffic-shaping,and contentfiltering
  • Providethecapabilitytoeasilyblockclientsfromthenetwork
  • BebothPINcodeandPasswordsecurable
  • ProvideeasyaccesstoSupportCasemanagement
  • Beabletoread deviceeventlogsremotely
  • ShowindividualclientApplicationUsagehistory(example -YouTube,Instagram,Facebook, etc.)

CiscoMerakiMR32CloudManagedAccessPointcompatibleandequivalent–MR32-HW Quantity=211(locationsarelistedonlaterpages)

Thequantityofaccesspointsneedediscalculatedusingthesquarefootage,classroomcounts,andbuilding

design.Thesolutionproposedshouldincludeoneaccesspointineveryclassroom,andshouldprovide coverageineverycommon area,administrative area,andinstructionalspacein eachbuilding. Portable classroomsareincluded. Accesspointsandnetworkdesignshouldbedesignedandinstalledwithenoughaccessandcapacitytosupport1:1technologyinitiativesateachlocationwithastudentdensityof25devicesperAPin eachclassroomand80-100devicesineachcommonarea.

Accesstobuildingdrawings showingnetwork MDF andIDFswillbe providedatthe mandatorybidder’s conference. Therewillbenoscheduledwalkthroughsateachlocation;however,vendorsmayvisiteach location attheirconvenience. Ifavendorneeds/wantsaccessinsideeachMDF/IDF,thevendorcancontactthe Districtandbegivenatimeto meetITpersonnel attheschoollocation. Thetimescheduledwillbeatthediscretionandconvenienceofthedistrict.

SpecificationsforMR32

CiscoMerakiMR32 orcompatibleandequivalent802.11acaccesspointmustincludestatefulfirewalls,teleworkerVPN,full-timeintrusion androguescanning,NetworkAccessControl, adultcontentfiltering,and WPA2-Enterprise/802.1Xintegration.SolutionmustincludecloudarchitecturethatisfullyintegratedwiththesamecloudswitchmanagementasourexistingMerakiinfrastructureandremovetheneedforanycontrollers orhardware/softwareoverlaymanagement.

  • 100/1000Base-TEthernet(RJ45)with48VDC802.3at/802.3afPoE

  • 3x3 Multipleinput,multiple output(MIMO)withthreespatialstreams.

20,40,and80MHz(802.11ac)20and 40MHzchannels(802.11n)

  • Maximalratio combining(MRC)
  • Beamforming
  • Packetaggregation
  • VLANtagging(802.1Q)
  • Cyclicshiftdiversity(CSD)support
  • WirelessQualityofService(WMM/802.11e)
  • Real-timeWIPSwithforensics
  • GuestIsolation
  • SupportforfastLayer2roaming
  • Layer3 roaming
  • Solutionmustincludebuilt-inPCIcompliancewizard andremediationtool,andprovidesecuremanagementaccesswithpasswordrestrictionsandtwo-factorauthenticationvia SMS
  • APmustincludeathird(non-clientserving)radiodedicatedtocontinuouslyandautomaticallymonitoringsurroundingstomaximize Wi-Fiperformance. This thirdradiowillmeasure channelutilization,signal strength,throughput,signalsfrom3rdpartyaccesspoints,non-Wi-Fiinterference,andautomatically optimizeWi-Fiperformance ofindividualaccesspoints andmaximizesystem-wideperformance
  • Lifetimehardwarewarrantyandadvancereplacement

LicensefortheMerakiMR32CloudManagedAccessPointwhichincludescloudservices,softwareupgradesandsupportfor5 years. - LIC-MR34-5YR

Quantity=211(locationsarelistedonlaterpages)MPSDalsodesirespricingonanalternateAccessPoint

Alternate–CiscoMerakiMR32CloudManagedAccessPointCompatibleandequivalent –MR32-HW LicensefortheMerakiMR32CloudManagedAccessPointwhichincludescloudservices,softwareupgradesandsupportfor5 years. - LIC-MR32-5YR

Quantity=211 (locationsarelistedonlaterpages)

MerakiMS320CloudManaged48PortGigE720WPoE/PoE+-MS320-48FP-HW compatibleandequivalentQuantity=8 (locationsarelistedonlaterpages)

Solutionmustincludecloudarchitecture thatisfullyintegrated withthesamecloud wirelessmanagementand existingCiscoprimeinfrastructureandremovestheneedfor anycontrollersorhardware/softwareoverlaymanagement.

Vendormustincludeintheinstallationcostsallmodules,transceivers,cables,connectors,etc.neededtomakeeachdevice100%operational. Anycostsnotincludedinthevendorproposedbudgetthatmaybe requiredforthesuccessfulcompletionoftheinstallationofthedevicesareassumedtobeprovidedbythe vendor andat nocostto MPSD.

Interfaces

  • 48×10/100/1000BASE-TEthernet(RJ45)withauto-MDIXcrossover
  • 48VDC802.3af/802.3atPower-over-Ethernet(PoE/PoE+)ontheMS320-48Pmodels,availableonallports (maximumof30WperportforPoE+)
  • 4×SFP+10GigabitEthernetinterfaces for uplink
  • Autonegotiationandcrossoverdetection

Ethernetswitchingcapabilities

  • 802.1pQualityofServiceprioritization
  • 802.1QVLANtaggingandQ-in-QVLANstackingwith 4096addressable tags
  • 802.1DSpanningTreeProtocol(RSTP,STP)
  • 802.1abLinkLayerDiscoveryProtocol(LLDP)
  • 802.3adlinkaggregationwithupto8portsper aggregate
  • Broadcaststormcontrol
  • IGMPsnoopingfor multicastfiltering
  • MACforwardingtableentries:8,000

Security

  • Integratedtwo-factorauthentication
  • Role-basedadministration
  • Corporatewidepasswordpolicyenforcement
  • IEEE802.1Xport-basedsecurity
  • Performance
  • Non-blockingfabric
  • 176Gpbsnon-blockingswitchingcapacity
  • 2.5microsecondlatency

PoweroverEthernet(PoEmodels):

  • 802.3af(PoE)15.4W perportand802/.3at(PoE+)25.5Wperport
  • MS320-48LPmaximumPoEoutput:370W
  • MS320-48FPmaximumPoE output:720W
  • PoEavailableonallportssimultaneously
  • Pre-standardPoE:supportspre-standardPoEdevices

Management

  • Managedviathe cloudusingtheMerakidashboardorequivalent
  • IntegratedwithMerakiwireless,routing,andfirewallmanagementorequivalent
  • No-touchremotedeployment(nostagingneeded)
  • Detailedhistoricalper-port andper-clientusagestatistics
  • DHCPandhostnamefingerprinting

  • SNMPv2c
  • Seamlessover-the-webfirmwareupgrades

Lifetimehardwarewarrantywithadvancedreplacementincluded.

MerakiMS320EnterpriseLicense–compatibleandequivalent–LIC-MS320-48FP-5YRQuantity=8 (locationsarelistedonlaterpages)

License fortheMerakiMS320 CloudManaged48PortGigE720WPoE/PoE+switch whichincludescloud services,softwareupgrades and supportfor5years.

Cisco4321IntegratedSwitch/Router–ISR4321-V/K9Quantity=3

MPSDdesirestodeliverrouting, mobility,security,computeandstorageinasinglebundlebyusingISR4000

Pricemustincludealllicenses,powersupply,memory,modulesand1year warranty

CiscoMerakiMX100SecurityAppliance–MX100-HW Quantity=2 (locationsarelistedonlaterpages)

Vendormustincludeintheinstallationcostsallmodules,transceivers,cables,connectors,etc.neededtomakeeachdevice100%operational. Anycosts notincludedinthevendorproposedbudgetthatmaybe requiredforthesuccessfulcompletionoftheinstallationofthedevicesareassumedtobeprovidedbythe vendor andat nocostto MPSD.

NetworkandSecurityServices

  • Statefulfirewall,1:1NAT,DHCP,DMZ,staticrouting
  • Identity-basedpolicies
  • AutoVPN™self-configuringsite-to-siteVPN
  • ClientVPN(IPsec)
  • Useranddevicequarantine
  • VLANsupportandDHCPservices

AdvancedSecurityServices

  • Contentfiltering(WebrootBrightCloudCIPA-compliantURLdatabase)
  • Websearchfiltering(includingGoogleandBingSafeSearch)
  • YouTubeforSchools
  • Intrusionprevention(SourceFire Snortbased)
  • Antivirusandantiphishingfiltering(KasperskySafeStreamIIengine)
  • RequiresAdvancedSecurityLicense

WANPerformanceManagement

  • Webcaching
  • WANlinkaggregation
  • Applicationlevel(Layer7)trafficanalysisandshaping

  • AutomaticLayer3failover(includingVPNconnections)
  • WAN uplinkselectionbased ontraffictype
  • Note: webcachingis notavailableonMX60orMX60Wmodels

WANOptimization

  • Byte-levelcaching(1TBcapacity)
  • Universaldatastorewithdataredundancyelimination
  • TCPtransport compressionandoptimization
  • Protocoloptimization(CIFS,HTTP,FTP)

MonitoringandManagement

  • Webbasedmanagementandconfiguration
  • Throughput,connectivitymonitoringand alerts
  • Networkassetdiscoveryanduseridentification
  • Built-innetwork-widereporting,monitoringandalerts
  • Centralizedpolicymanagement
  • Real-timediagnosticandtroubleshootingoverthe web
  • Automaticfirmwareupgradesandsecuritypatches
  • Searchablenetwork-wideeventlogs

Interfaces

  • 2×GbE(WAN)
  • 8× GbE
  • 2× SFP
  • USB:1×USB2.0for3G/4Gfailover(supporteddevices)

Performance

  • Statefulfirewallthroughput: 500Mbps
  • VPNthroughput:250Mbps
  • WANoptimizationstorage:1TB
  • Recommendedformedium-sizedbranches(upto500users)

CiscoMerakiMX400SecurityAppliance–MX400-HW Quantity=1(locationsarelistedonlaterpages)

Vendormustincludeintheinstallationcostsallmodules,transceivers,cables,connectors,etc.neededtomakeeachdevice100%operational. Anycostsnotincludedinthevendorproposedbudgetthatmaybe requiredforthesuccessfulcompletionoftheinstallationofthedevicesareassumedtobeprovidedbythe vendor andat nocostto MPSD.

NetworkandSecurityServices

  • Statefulfirewall,1:1NAT,DHCP,DMZ,staticrouting

  • Identity-basedpolicies
  • AutoVPN™self-configuringsite-to-siteVPN
  • ClientVPN(IPsec)
  • Useranddevicequarantine
  • VLANsupportandDHCPservices

AdvancedSecurityServices

  • Contentfiltering(iBossCIPA-compliantURLdatabase)
  • Websearchfiltering(includingGoogleandBingSafeSearch)
  • YouTubeforSchools
  • Intrusionprevention(SourceFire Snortbased)
  • Antivirusandantiphishingfiltering(Sophos)
  • RequiresAdvancedSecurityLicense

WANPerformanceManagement

  • Webcaching
  • WANlinkaggregation
  • Applicationlevel(Layer7)trafficanalysisandshaping
  • AutomaticLayer3failover(includingVPNconnections)
  • WAN uplinkselectionbased ontraffictype
  • Note: webcachingis notavailableonMX60orMX60Wmodels

WANOptimization

  • Byte-levelcaching(1TBcapacity)
  • Universaldatastorewithdataredundancyelimination
  • TCPtransport compressionandoptimization
  • Protocoloptimization(CIFS,HTTP,FTP)

MonitoringandManagement

  • Webbasedmanagementandconfiguration
  • Throughput,connectivitymonitoringand alerts
  • Networkassetdiscoveryanduseridentification
  • Built-innetwork-widereporting,monitoringandalerts
  • Centralizedpolicymanagement
  • Real-timediagnosticandtroubleshootingovertheweb
  • Automaticfirmwareupgradesandsecuritypatches
  • Searchablenetwork-wideeventlogs

Interfaces

  • 2×GbE(WAN)
  • 8× GbE
  • 8 × GbE (SFP)
  • 4×10GbE(SFP+)
  • USB:1×USB2.0for3G/4Gfailover(supporteddevices)
  • Performance

Performance

  • Statefulfirewallthroughput:1,000Mbps
  • VPNthroughput:325Mbps
  • WANoptimizationstorage:1TB
  • Recommendedforlargecampus/datacenters(upto2,000users)

MerakiMX100AdvancedSecuritycompatibleandequivalent -LIC-MX100-SEC-5YRQuantity=2 (locationsarelistedonlaterpages)

LicensefortheMerakiMX100orequivalentsecurityappliancewhich includescloudservices,softwareupgrades andsupport for5years.

MerakiMX400AdvancedSecuritycompatibleandequivalent -LIC-MX400-SEC-5YRQuantity=1(locationsarelistedonlaterpages)

LicensefortheMerakiMX400orequivalentsecurityappliancewhich includescloudservices,softwareupgrades andsupport for5years.

MerakiMS420-24CloudManagedAggregationSwitchcompatibleandequivalent–MS420-24-HW Quantity–3(locationsarelistedonlaterpages)

Interfaces

  • 24 ×10GbESFP+/SFP
  • 1×10/100/1000RJ45managementport

Ethernetswitchingcapabilities

  • 802.1pQualityofServiceprioritization
  • 802.1QVLANtaggingandQ-in-QVLANstackingwith 4096addressable tags
  • 802.1DSpanningTreeProtocol(RSTP,STP)
  • 802.1abLinkLayerDiscoveryProtocol(LLDP)
  • 802.3adlinkaggregationwithupto8portsper aggregate
  • Broadcaststormcontrol
  • IGMPsnoopingfor multicastfiltering

Layer3capabilities

  • Dynamicrouting(OSPFv2)
  • Staticrouting
  • DHCPRelay
  • DHCPServer
  • Warmspareredundancy(VRRP)
  • DHCPFailover

Security

  • Integratedtwo-factorauthentication
  • Role-basedadministration
  • Corporatewidepasswordpolicyenforcement
  • IEEE802.1Xport-basedsecurity

Performance

  • Non-blockingfabric
  • 480Gbpsswitchingcapacity
  • HardwareMounting
  • Rack-mountablewith includedrackmounthardware
  • Front-to-backairflow
  • Field-replaceable,hot-swappablepowersupplies
  • Field-replaceable,hot-swappablefans

Management

  • Managedviathe cloudusing theMerakidashboard
  • IntegratedwithMerakiwireless,securityappliance,anddevicemanagement
  • No-touchremotedeployment(nostagingneeded)
  • Detailedhistoricalper-portandper-clientusagestatistics
  • DHCPandhostnamefingerprinting
  • SNMPDallowsintegrationwith3rd-partynetworkmanagementsolutions
  • Seamlessover-the-webfirmwareupgrades

MerakiMerakiMS420-24EnterpriseLicenseforMS420-24CloudManagedAggregationSwitchcompatible andequivalent–LIC-MS420-24-5YR

Quantity–3(locationsarelistedonlaterpages)

LicensefortheMerakiMS420-24switchorequivalentappliancewhich includescloudservices,softwareupgrades andsupport for5years.

NetworkCabling(Drops)–HardwareandInstallationQuantity=211(locationsarelistedonlaterpages)

Allinstallationandmaterialchargesassociated withtheinstallationofnetworkcablingtomakeaccesspoints 100% operationalshouldbeincluded. Alladditionalconnectors,screws,labor,panduit,conduit,ties,hangers,jacks,cables,parts,modules, etc.needed tomakethecablesconnectingthewirelessaccesspointsto thedesignatedswitchand/orpatchpanelinordertomaketheaccesspoints100%operationalshouldbeincludedintheinstallationcostandprovidedbythevendor. Patch panels andpatchcablesshouldbeincludedwhen/ifnecessary. Anycosts notoutlinedinthevendorproposedbudgetthatmayberequiredforthesuccessfulcompletion oftheinstallationofthedevicesareassumedtobeprovidedbythevendorandatno cost toMPSD.

  • AllworkmustbeperformedinaccordancewithANSI/TIA/EIA-568-Bstandards.

  • All cables shouldbeblue.
  • All cableshallbeCAT‐6EPOEratedcableterminatedto industrycertified RJ‐45s jackat each specified outlooklocation.
  • Anyareathatdoesnot haveadropceilingwillrequirea wallmountbracket orothermountingoption if required.Suitablewiringraceways,panduit,conduitandmoldingstoachieveafinishedinstallation appearanceshallbeused.
  • Cablingmustbeneatlyrun.Cablesmaynot liedirectlyonceilingtilesoronoverheadlights.Theymust besuspendedusingJhooks wherenecessary. O-rings and cabletiewrapsarenotacceptable.
  • Alldropsneededfor thisprojectshallbenew.Dropsmayexist inaschoolclose toanew AP location,butthat connection shallnotbere-used.
  • All cableconnectionsmustbeidentifiableatbothends.
  • Allcablesmustbetestedandcertified.Hardcopyor testingresultsandcertificationshallbeprovidedelectronically.

NetworkCabling(MDFtoIDF)–HardwareandInstallationQuantity=Approx:3(locationsarelistedonlaterpages)

  • All cableruns betweenMDFsandIDFsmustbeSingleModeFiber
  • Somelocationsalready haveMultiModefromMDF toIDF–thiswillbediscussedindetailed atbidder’s conference.

APCSmart-UPSorAPCSmart-UPScompatibleforDataRacks Quantity–3 (locationsarelistedonlaterpages)

  • MPSDdesirestopurchaseUPS’toprovideaminimum of15minutesfortheMDFateachschool.
  • Alldevicesmustberack-mountable.
  • Alldevicesmustplugintostandard120Voutlets.

Respectfullysubmitted,

COMPANY

ADDRESS

PHONE

FAX

E-MAILADDRESS

SIGNED

WRITEOUT

SIGNATURE

TITLE

DATE

CIRCLETHEOPERATINGSTATUSOFYOURBUSINESSASINDICATEDBELOW: MINORITY OWNEDWOMAN OWNED NON-MINORITY

School Name / Description of Item Requested - Item Specified by the Vendor Should Be Equivalent and Compatible to the Item Described Below / Part Number / Qty / Make/Mfr / Model / Part Number / Description / Unit Cost $ / Extended Cost $ / Installation Cost $ / 1 Yr. Maint Cost $ / Total Cost $ / Erate Eligible % / Erate Ineligible %
Escatawapa Upper Elementary / Cisco Meraki MR34 Cloud Managed Access Point / MR34-HW / 55
Meraki MR Enterprise License / LIC-ENT-5YR / 55
Alternate AP: Cisco Meraki MR32 Cloud Managed Access Point / MR32-HW / Alternate: 55
Alternate AP: Meraki MR Enterprise License / LIC-ENT-5YR / Alternate: 55
Meraki MS320 Cloud Managed 48 Port GigE 720W PoE / PoE+ / MS320-48FP-HW / 2
Meraki MS320 - 48FP Enterprise License / LIC-MS320-48FP - 5YR / 2
Meraki MX100 Security Appliance / MX100-HW / 1
Meraki MX100 Advanced Security / LIC-MX100-SEC-5YR / 1
Stacking Cable / MA-CBL-TA-1M / 3
IDF Closet 1GE Uplink Modules / MA-SFP-1GB-SX / 2
IDF Closet 10GE Uplink Modules / MA-SFP-1GB-LX10 / 2
UPS in MDF Closet / APC SMART-UPS FOR DATA RACKS / 1
Rack / EQUIPMENT RACK / 0
Cisco 4321 Integrated Switch/Router / ISR4321-V/K9 / 1
Network Cabling (Drops) - Installation / All installation charges associated with the installation of network cabling to make APS 100% operational. Cat 6A - all parts including cable, jacks, ties, hangers, etc. panduit, etc. to make APS 100% operational / 1
Network Cabling (MDF to IDF) - Installation / All installation charges associated with the installation of single mode fiber from each MDF to IDF closet. All parts including fiber, jacks, ties, hangers, etc. to make switches 100% operational. Every MDF has fiber coming in from AT&T. / 1
Installation and configuration of Switches and UPSs / All installation charges associated with the installation of network devices and UPSs / 1
KREOLE PRIMARY / Cisco Meraki MR34 Cloud Managed Access Point / MR34-HW / 53
Meraki MR Enterprise License / LIC-ENT-5YR / 53
Alternate AP: Cisco Meraki MR32 Cloud Managed Access Point / MR32-HW / Alternate: 53
Alternate AP: Meraki MR Enterprise License / LIC-ENT-5YR / Alternate: 53
Meraki MS320 Cloud Managed 48 Port GigE 720W PoE / PoE+ / MS320-48FP-HW / 2
Meraki MS320 - 48FP Enterprise License / LIC-MS320-48FP - 5YR / 2
Meraki MX100 Security Appliance / MX100-HW / 1
Meraki MX100 Advanced Security / LIC-MX100-SEC-5YR / 1
Stacking Cable / MA-CBL-TA-1M / 2
IDF Closet 1GE Uplink Modules / MA-SFP-1GB-SX / 2
IDF Closet 10GE Uplink Modules / MA-SFP-1GB-LX10 / 2
Rack / EQUIPMENT RACK / 0
Cisco 4321 Integrated Switch/Router / ISR4321-V/K9 / 1
Network Cabling (Drops) - Installation / All installation charges associated with the installation of network cabling to make APS 100% operational. Cat 6A - all parts including cable, jacks, ties, hangers, etc. panduit, etc. to make APS 100% operational / 1
Network Cabling (MDF to IDF) - Installation / All installation charges associated with the installation of single mode fiber from each MDF to IDF closet. All parts including fiber, jacks, ties, hangers, etc. to make switches 100% operational. Every MDF has fiber coming in from AT&T. / 1
Installation and configuration of Switches and UPSs / All installation charges associated with the installation of network devices and UPSs / 1
MOSS POINT HIGH SCHOOL / Cisco Meraki MR34 Cloud Managed Access Point / MR34-HW / 78
Meraki MR Enterprise License / LIC-ENT-5YR / 78
Alternate AP: Cisco Meraki MR32 Cloud Managed Access Point / MR32-HW / Alternate: 78
Alternate AP: Meraki MR Enterprise License / LIC-ENT-5YR / Alternate: 78
Meraki MS320 Cloud Managed 48 Port GigE 720W PoE / PoE+ / MS320-48FP-HW / 10
Meraki MS320 - 48FP Enterprise License / LIC-MS320-48FP - 5YR / 10
Meraki MX400 Security Appliance / MX400-HW / 1
Meraki MX400 Advanced Security / LIC-MX400-SEC-5YR / 1
Meraki MS420 Cloud Managed 24 P / MS420-24-HW / 1
Meraki MS420-24 Enterprise License / LIC-MS420-24-5YR / 1
Stacking Cable / MA-CBL-TA-1M / 6
IDF Closet 1GE Uplink Modules / MA-SFP-1GB-SX / 6
IDF Closet 10GE Uplink Modules / MA-SFP-1GB-LX10 / 6
UPS in MDF Closet / APC SMART-UPS FOR DATA RACKS / 1
Rack / EQUIPMENT RACK / 2
Cisco Wireless Bridge with bracket and power supply / 1530 / 2
Cisco 4321 Integrated Switch/Router / ISR4321-V/K9 / 1
Network Cabling (Drops) - Installation / All installation charges associated with the installation of network cabling to make APS 100% operational. Cat 6A - all parts including cable, jacks, ties, hangers, etc. panduit, etc. to make APS 100% operational / 1
Meraki MX10+A37:H540 Security Appliance / Network Cabling (MDF to IDF) - Installation / All installation charges associated with the installation of single mode fiber from each MDF to IDF closet. All parts including fiber, jacks, ties, hangers, etc. to make switches 100% operational. Every MDF has fiber coming in from AT&T. / 1
ExtendedCost
$ / Installation Cost $ / 1Yr.Maint Cost $ / Total Cost $ / Erate Eligible% / Erate Ineligible%