Request forProposals#16-16-16
Nameof Proposal:WirelessAccessPoints,SwitchesCabling
Purpose:Toinstallcabling,switchesandaccesspointstoallschoolstomakethecampuses100%wireless.
TheMoss PointSchoolDistrictdesirestopurchasecabling,switches,andwirelessaccesspointstomakeallschoolscampusesWi-Fiaccessible.
SelectionSchedule
QuestionsmustbesubmittedinwritingtoBrian llowfor24hoursfora response.
RFPReleased / WednesdayFebruary17,2016FinalDayforQuestions / FridayMarch 4,2016
MandatoryBidder’s Conference / February25and 26,20169 A.M.
ResponseDeadline –Bids Close / WednesdayApril 6,2016 9 A.M.
BidOpening / WednesdayApril 6,2016
Evaluationof RFP / MondayApril 11,2016
SubmitProposalto:
Moss Point School District
4924 Church Street
Moss Point, MS 39563
Note: Pleasesubmit(1) oneoriginaland (1)onecopyofRFP.NofaxedoremailsRFPSwillbe acknowledgedorallowed.PleaseencloseRFPproposalinasealed envelopewiththevendorsreturnaddress,RFPNumberandtitle ofproposal. Mail orhanddeliverto thesubmit proposaladdresslisted above.
RFPSpecificResponseRequirements
Bidders mustsubmita descriptionoftheir company’sexperience,qualifications,andthetechnical certificationsofthepersonnelresponsibleforcompletionof theproject. Thisshould be nomorethanonepage.
Biddersmustsubmitthenamesandcontactinformationforthree customerswhocan providespecific referencesforthe installationofbuilding-wideWi-FiinstallationsofMerakiorequivalenthardwareand infrastructure.
CRITERIAFORSELECTION
MPSDwillutilizethefollowing criteria(based asthebasis fortheproposalevaluationsand selection).
Factor / WeightPrice of theE-RateELIGIBLEgoods andservices / 25%
Price ofOthercosts / 10%
PriorexperiencewiththeDistrict / 20%
PersonnelqualificationsProfessionalism / 10%
Managementcapability/TechnologySolutionSOW / 5%
Companyprovidesall services(nosub-contractors) / 10%
PreferencetoEnergysavingscompliance / 10%
PreferencetoMississippibasedcompanies / 10%
Total / 100%
CONTRACTTERMS
Theinitialtermofthe contracttermwillbeginJuly1,2016 andendSeptember30,2017.Contractshould provideforextensionstoalignwithservicedeliverydeadlineextensionapprovalsgrantedbytheUniversalServiceAdministrativeCompany(USAC). InitiationofthecontractisdependentonE-Ratefunding;inthe eventE-Ratedoesnotfundtheprojectthenthecontract willbenullandvoid. Thedistrictreservesthe righttowaivetheERATEfundingrequirement.
BIDSUBMISSION-EXCELSPREADSHEETTEMPLATEREQUIRED
Vendorsshall use theExcel spreadsheetprovided aspartof thisRFPtocompletetheirresponse.All columns definedinthe spreadsheet mustbecompleted. Zero(0)shouldbeenteredinanycolumnforwhichthereis no cost. Vendorsmayaddcolumnsiftheydeemitnecessarytoprovideaccuratecostinformation.
Vendorsmayaddrowsifthere isanadditionalitemneeded forthesuggestedsolution.Nocolumnsorrows maybedeleted. Any rowsor columnsadded shouldbehighlightedandexplained withsupportingdocumentation.
BiddersmustprovidetheE-rateeligibleportion (0%-100%)ofallitems.Biddersmustreadandunderstand theFCCE-RateEligibleServicesListforFY2016- bytheserviceprovider.
Vendors mustincludeaprintedcopyofthe completedExcelspreadsheetwiththeirproposalresponse. Vendors mustincludeONEelectroniccopy in.xlscompatibleformatonmedia.
Referencestobrandnames,modelnumbers,orother descriptionsaremadetoestablisharequiredlevelof qualityandfunctionalcapabilitiesandarenotintendedtoexcludeothermanufacturers.Comparableproducts ofothermanufacturerswillbeconsideredifproofofcomparability,equivalence,andcompatibilityis containedintheproposal.Vendors,ifproposingotherthanspecified,aretoclearlyidentifythemanufacturerandthe modelnumber and mustprovide written,complete justificationastohowtheproduct complieswith allspecifications outlinedwithinthisRFPandhowtheproductintegrateswithexistingdevicesaswellas thecompletelistofmanufacturerpublishedspecificationsrelatedtotherequestedproducts.Itshallbe theresponsibilityofthebidderstofurnishdescriptiveliteraturewiththeirproposalsuchthatspecifications,catalogpages,brochuresor otherdatawillprovideanadequatebasisforverifyingthequalityandfunctional capabilitiesoftheproductoffered.Failuretoprovidethisdatawillbe consideredvalidjustificationforrejection oftheproposal.
Unlessotherwise specified,vendorsshallprovideeverythingrequiredtomakethedevices,software,appliances,installation,etc.100%operational.
E-RATECOMPLIANCE
Itisexpectedthatthe awardedserviceprovidershallbeincompliancewithrulesandregulationsoftheUniversalServicesSupportMechanismforSchools andLibraries (“E-RateProgram”) administeredbythe UniversalServiceAdministrativeCompany(USAC).AllchargesforservicesprovidedduringtheperiodJuly1,2016through June30, 2017forrecurringservicesorJuly1,2016throughSeptember30,2017fornon- recurringservicesshouldbebilledandinvoicedtoboththeDistrictand SLD following USAC’sinvoicing proceduresforE-ratefundingyear2016.
TheServiceProvideris responsibleforprovidingavalidSPIN(ServiceProviderIdentificationNumber)atthetimethebidissubmitted.See:
TheserviceproviderisresponsibleforprovidinganFCCRegistrationNumber withtheirproposalandevidenceofbeingingreenlightstatus.See:
DISQUALIFICATION:
AnypotentialbidderfoundtobeinRed-LightStatuswillbedisqualifiedfromparticipationinthebidding processandwillbeconsiderednon-responsive.
FAILURETOPROVIDEAVALIDSERVICEPROVIDERIDENTIFICATIONNUMBER(SPIN)andFCCREGISTRATIONNUMBERWILLRESULTINDISQUALIFICATIONOFBIDAWARDSFORE-RATEELIGIBLEGOODSANDSERVICES.
AftertheFCCForm471including fundingrequestsassociatedwiththe awardedserviceprovider’sSPIN isfiled bytheDistrictforFY2016,theawardedserviceprovidermustfileaServiceProviderAnnualCertificationForm(SPAC-Form473)forE-Ratefundingyear2016.
AllServiceProviderswillberesponsibleforprocuringtheapprovedE-ratediscountamountfromUSACusingtheServiceProviderInvoicing(“SPI”-Form474)methodunlessotherwisedirectedby theDistrict. TheDistrictmay utilizethereimbursement(Form472)methodatitssoleoption.
IntheeventofquestionsduringtheE-Rateprogramintegrityassurance(PIA)reviewprocess,thesuccessful serviceproviderisexpectedtoreplywithin3businessdaystoquestions associated withtheirproposal.
TheServiceProvidershallsendcopiesofALLformsandinvoicessubmittedtoUSACtotheDistrictfortheirrecords.
Theawardedserviceprovider(s)mustagreetoretainallrelevantdocumentationrelatedto theE-ratefundingrequestsassociatedwiththeirSPINforaperiod ofatleastTENyearsafterthelastdayofservicedelivered. Furthermore,theawardedserviceprovidermustcertifythattheywillretainalldocumentsnecessaryto demonstratecompliancewiththestatuteandCommissionrulesregardingtheapplicationfor,receiptof,and delivery ofservicesreceivingschoolsandlibrariesdiscounts,and thatiftheDistrictisaudited,theserviceproviderwillmakesuchrecordsavailabletotheDistrict. Allawardedserviceprovidersacknowledgethatthey maybeauditedpursuanttoparticipationintheschoolsandlibrariesprogram.
Referencestobrandnames,modelnumbers,orother descriptionsaremadetoestablisharequiredlevelof qualityandfunctional capabilitiesandarenotintendedtoexcludeothermanufacturers.Comparableproducts ofothermanufacturerswillbeconsideredifproofofcomparability,equivalence,andcompatibilityis containedintheproposal.Vendors,ifproposingotherthanspecified,aretoclearlyidentifythemanufacturerandthemodelnumber and mustprovide written,complete justificationastohowtheproduct complieswith allspecifications outlinedwithinthisRFPandhowtheproductintegrateswithexistingdevicesaswellas thecompletelistofmanufacturerpublishedspecificationsrelatedtotherequestedproducts.Itshallbe theresponsibilityofthebidderstofurnishdescriptiveliteraturewiththeirproposalsuchthatspecifications,catalogpages,brochuresor otherdatawillprovideanadequatebasisforverifyingthequalityandfunctional capabilitiesoftheproductoffered.Failuretoprovidethisdatawillbe consideredvalidjustificationforrejection oftheproposal.
Unlessotherwise specified,vendorsshallprovideeverythingrequiredtomakethedevices,software,appliances,installation,etc.100%operational. This includesbutisnotlimited topatchcables, connectors,dongles,mountinghardware,etc.
Duetothecomplexityand theamountofknowledgerequiredforsuccessfulplacementandconfiguration,MPSDisseeking acomplete“turnkey” solution thatcoversequipmentacquisition, installation, configuration,
andknowledgetransfer.
Therewillbearequiredonsitebidder’s conference intheMPSD Board Room located in the Carl Ely Building 4924 Church Street, Moss Point, MS 39563. Failuretoattendtheconferencemayresultin rejectionoftheproposal.
InstallationRequirements
- TheselectedvendormustbeabletomeetonsitewiththeMPSDITstaffto completeascheduleandscopeofworkbeforeinstallationscanbegin.Vendorwillcoordinate withMPSDtoschedule deploymentsof hardwareinsuchawayastominimizetheimpactonnetworkusers.
- Vendorwilldeliverall equipmenttothe MPSDFixedAssetdepartmenttohaveassettagsaffixedif necessary.MPSD willcoordinatewiththe vendortoschedule thedeliveryandinstallation. Vendorsare
expected topickupdevicesfromtheMPSDFixedAssetswarehousefordeliverytoschoollocationsas scheduled.
- Vendor willremoveanddisposeofallpackagingandmiscellaneousmaterialsleftoverfromany part oftheinstallationandplacealltrashinanidentifiedon-sitedumpsterortaken bythevendortoanoff-sitelocation. MPSDpersonnelwillnotdisposeofanypackingmaterials.
- Alladditionalcables,connectors,screws,labor,miscellaneousplugparts,modules,etc.neededtomakethewirelessaccess points100% operationalshouldbeincludedintheinstallationcostandprovidedbythevendor.Anycosts notoutlinedinthevendorproposedbudgetthatmay berequired forthesuccessful completionoftheinstallationofthedevicesareassumedtobeprovidedby thevendorandatnocost to MPSD.
- Allcablingtomaketheaccesspoints100%operationalshallbeprovidedaspart oftheproject.Cablingshouldbecompletedbycertifiedtechnicians andmeetallANSI/TIA/EIA-568-Bstandards.Suitablewiring
raceways,panduit,conduitandmoldingstoachieveafinishedinstallationappearancemustbeused.All additionalconnectors,screws,labor,panduit,conduit,ties,hangers,jacks,cables,parts,modules,etc. neededtomakethecablesconnectingthe wirelessaccesspointstothedesignatedswitchand/orpatch panelinordertomaketheaccess points100%operationalshouldbeincludedintheinstallationcost and providedbythevendor.Anycostsnotoutlinedinthevendorproposedbudgetthatmayberequiredforthesuccessfulcompletion of theinstallationofthedevicesareassumedtobeprovidedbythevendorand at no cost toMPSD.
- Hardwareinventorywillbeprovidedto MPSDbythevendorincludingbutnotlimitedtodevicemodel number,serialnumber,MPSDassettagnumber,MACaddress,andlocation.
- Vendorwillinstalland mountallswitch componentsinthedesignatedrackateachlocation.Thevendorwillprovideallrequiredrackmountinghardwareneededforinstallationandmounting.
- Vendorwill coordinatewithMPSDITstaff toinstallandconfigureallsoftware,appliances, andanyotherapplicationsrequiredtomaketheWi-Fidevices 100%operational.Thevendor willprovideknowledgetransfertoMPSDIT stafftodemonstratefunctionalityofalldevices andmonitoringsystems.
TechnicalRequirementsandItemDescriptions
MPSDdesirestopurchasenetworkswitches/routersforallMDFandIDFclosets, wirelessaccesspoints and cablingtoprovide campuswide Wi-FiinallMPSDschools. MPSDdesirestopurchaseallcablingand hardwarerequiredforthesuccessfulcompletionoftheprojectfromasingleprovider.
MPSD currently hasanCisco switcheswithCiscoAccessPointsanditisimportanttothedistricttomaintainthefunctionalityof thisexistinginfrastructure. All accesspoints,switches,softwareorhardwareproposedthatdifferfromthespecifieditemsmustbecompatibleand equivalenttotheexistinginfrastructureandmustbe100%functionalwiththeexistingnetwork.
Aspart oftheinstallation,vendorsshallincludeanyandallSFPs,cables,brackets,mounts,etc.tomakeeach switchandmodule100%operational.Anycostsnotincludedintheinstallationrequiredforthesuccessful installationofthedevicesareassumedtobe providedbythevendorandatno costtoMPSD.
MPSDseekstomaximizetechnologyinfrastructureenergysavingsthroughtheupgradingofthecurrentInternetInfrastructureSystem. Respondentsareencouragedto advocate the installationand implementationofimprovementsprovidingthegreatestpossible energyandoperations/maintenancesavings. Essentialservicesandimprovementssoughtarethosethat will reduce energyconsumptionintheCustomer'sfacilitiesrelatedtonetworkandimprovementstoWi-Fi/Internetbasedcommunications/technologysystems.
Specificationsfordevicesortheirequivalentareasfollows:
Thedescriptionbelowreferstohow thecontrollermustworkwiththeaccesspointsandswitches.
- Solutionmustbecompatible with ourexistingMerakicloudarchitecture.
- Solutioncannot includeany"on-premise"managementappliances,servers,orvirtualmachines.
- The wirelesssystemmustsupportastatefulapplication-layerfirewallthatcanidentify,classify,and prioritizeapplicationsusinglayer7 intelligence. Applicationsshouldbe abletobetrafficshaped as well to ensurethatrecreationalapplications(likePandora,Spotify, etc.)donotconsumealloftheavailable bandwidth.
- Thewirelesssystemmustincludeintuitivemulti-sitescalability andmanagement.Mustbeableto deploymultiplesitesrapidlyandmonitor,manageandtroubleshootallsitesfromasingleweb-based interface.This includesbeing ableto"clone" configurationsofdevicesautomatically, andeasilyre-assign assetstoothernetworkareasasneeded. Thismustbe100%GUIbased,andno Command-Line(CLI) programmingforanyfeaturesispermitted.
- The wirelesssystemmustsupporttheabilitytofingerprintclientdevicetypes(i.e.iPad, Android,iPhone,Windows,etc)andapplysecurity settingstothosedevices,withouttheneedforadditionalappliancesor
licenses.Forexample:iPadsontheStudent SSIDmayhaveaccess to only thewebandareratelimitedto512 kbps, andnopeertopeertrafficisallowed.
- Thewirelesssystemmusthavecommonlymanagedproducts(WLAN,SecurityAppliances,AccessSwitches,IntegratedMDM)thatallowforend-to-enddeployment,monitoring,andtroubleshootingfromsingle paneofglass,andseamlessexpansionbeyondthewirelessnetworkalone.
- Thewirelesssystemmustsupport BonjourgatewayservicestoallowAirplay,printing,iTunesandotherBonjour-basedservicestoflowseamlesslyacrossthewirelessnetwork.
- The wirelesssystemmustsupportintegration withGoogleMaps,withtheabilitytouploadacustomfloorplanandoverlayitonthemap.
- The wirelesssystemmustsupporttheabilitytoeasilyreplicateand cloneconfigurationsacrossmultiple
differentsitesusingasingleclick.Ideally,aconfiguration couldbechangedonceandthenreplicatedacross multiplesites.
- The wirelesssystemmustsupporttheabilitytotakeapacketcapturedirectlyfromthemanagementinterface.Thispacket captureshouldbeabletofilterbasedon client,IPaddress,and MACaddress.
- Thewirelesssystemmustsupporttheabilitytoprovidedeepapplicationvisibilityintoalloftheapplicationsthatareusedon thewirelessnetwork,including hostnamevisibilitytoviewtheindividual URLs ofalloftheapplications. Thisinformationshould beexportableand downloadableonapernetworkandperSSIDbasis.
- The wirelesssystemshouldhavebuiltinguestaccessandnotrequireanyadditionalappliancesorlicensesforguestusers.
- The wirelesssystemmusthaveawaytoopencases withsupportandmonitortheirstatusdirectlyfromthemanagementconsole.
- Thewirelesssystemmustincludeataggingfunctiontoprovideeasysearch-abilityacrossournetwork,devicetypes, anduserswithsearch"tagging"functionality.
- The wirelesssystemmustsupporttheabilitytosendsummary reportstocertainadministrators onadaily, weeklyand monthlybasis. Thesesummaryreportsshouldshowinformationliketopusers,top applications,bandwidthconsumedperday, etc. Thesesummary reportsshouldbeabletobe sentona perschoolbasis,oraggregated formultipleschoolsusingataggingmechanism. Forexample,oneadministratormaywanttoseesummaryreport informationforallelementaryschoolsinaggregateeveryweek.
- Solutionmustincludeazero-cost,fullyintegrated,MobileDeviceManagementplatformcapableof managingAppleiOS,Android,Windows,andMacOSXdevicesallfromthesame commonmanagementinterfaceastheWLAN,AccessSwitching,andSecurityApplianceproducts. MDMfunctionalitymust requirenolocalhardware,software,orvirtualmachineappliancetooperate,andmust be 100%Cloud basedformanagement, with theabilitytoassign policiesviathemanagementinterfacetodifferentusers,networks,anddevicetypesbasedonpreferences.
- Examplesof attributesincludeVLANs,firewallrules, andsplashpages.Mustbeabletoeasilyprioritizeand/orthrottle specificapplicationsor application type. Group policiesmustbeuniversallyapplicableto allnetworkcomponents(accesspoints,switches,andsecurityappliances).
- Thewirelesssystemmustbe PCICompliant.Built-inPaymentCardIndustry(PCI)DSSLevel1Certified compliancereportingandremediationwizardrequired.
- Solutionmustproviderichlayer7applicationvisibility andcontrol,withafullheuristics-drivenengine(Not TCP/UDPPortBased)forclassification(e.g.Skype,BitTorrent,webtraffic)andshapingofthattraffic.
- Solutionmustincludefullyintegrated client,device,and OSvisibility,withabilitytoassignpoliciesviathemanagementinterfacetodifferentusers,networks,anddevicetypesbasedonpreferences. Group policies mustbeuniversallyapplicabletoall accesspoints andswitches. Managementinterfacemustbe100%GUIbased, andnoCommand-Line(CLI)programmingforanyfeatureispermitted.
- SolutionmustintegratewithexistingCisco PrimeInfrastructuremanagementtool.
- Mustmaintaincommonmanagement,inventory,andhistoricallogginginterfaceofexistingnetworksystemsand newcloud basedsystems.
- Minimize anyconflictsbetweenexistingandnewwirelesssystems,andpreventany lossofcoverageoroperationswiththeexistingwirelessnetwork.
- Wirelesssystemmust havebuilt-inredundancyandreliability.Solution mustbe abletoprovide a 99.99%servicelevelagreement,leveraginggloballyredundantclouddatacenters.
- The wirelesssystemmustincludeafreeofcharge,MobileManagementapplication.Thisapplication mustbe supportedonbothApple iOSand Android mobileoperatingsystems. Thissinglemobile applicationmust beabletodothefollowing:
- Monitorwireless,switching,andsecurityinfrastructure
- Seeallwireless,switching,andsecurityinfrastructurenetworkstatusandusageviaeasytoreadgraphs andtables
- Receivepushnotificationsforanynetworkoutages
- Scanaccesspointbarcodestofacilitateaddingthemto thenetwork
- Utilizethe mobiledevice'scamera tophotographanddocumentaccesspointmountinglocations
- Pinpointaccess pointlocationusingGlobalPositioningSystem(GPS)
- Verifydevice andclientconnectivityusinglive toolslikePing,Traceroute,etc.
- Remotelyrebootdeviceswithouton-sitestaffintervention
- QuicklydeploygrouppoliciestoclientsthatcontrolL3/L7firewalling,traffic-shaping,and contentfiltering
- Providethecapabilitytoeasilyblockclientsfromthenetwork
- BebothPINcodeandPasswordsecurable
- ProvideeasyaccesstoSupportCasemanagement
- Beabletoread deviceeventlogsremotely
- ShowindividualclientApplicationUsagehistory(example -YouTube,Instagram,Facebook, etc.)
CiscoMerakiMR32CloudManagedAccessPointcompatibleandequivalent–MR32-HW Quantity=211(locationsarelistedonlaterpages)
Thequantityofaccesspointsneedediscalculatedusingthesquarefootage,classroomcounts,andbuilding
design.Thesolutionproposedshouldincludeoneaccesspointineveryclassroom,andshouldprovide coverageineverycommon area,administrative area,andinstructionalspacein eachbuilding. Portable classroomsareincluded. Accesspointsandnetworkdesignshouldbedesignedandinstalledwithenoughaccessandcapacitytosupport1:1technologyinitiativesateachlocationwithastudentdensityof25devicesperAPin eachclassroomand80-100devicesineachcommonarea.
Accesstobuildingdrawings showingnetwork MDF andIDFswillbe providedatthe mandatorybidder’s conference. Therewillbenoscheduledwalkthroughsateachlocation;however,vendorsmayvisiteach location attheirconvenience. Ifavendorneeds/wantsaccessinsideeachMDF/IDF,thevendorcancontactthe Districtandbegivenatimeto meetITpersonnel attheschoollocation. Thetimescheduledwillbeatthediscretionandconvenienceofthedistrict.
SpecificationsforMR32
CiscoMerakiMR32 orcompatibleandequivalent802.11acaccesspointmustincludestatefulfirewalls,teleworkerVPN,full-timeintrusion androguescanning,NetworkAccessControl, adultcontentfiltering,and WPA2-Enterprise/802.1Xintegration.SolutionmustincludecloudarchitecturethatisfullyintegratedwiththesamecloudswitchmanagementasourexistingMerakiinfrastructureandremovetheneedforanycontrollers orhardware/softwareoverlaymanagement.
- 100/1000Base-TEthernet(RJ45)with48VDC802.3at/802.3afPoE
- 3x3 Multipleinput,multiple output(MIMO)withthreespatialstreams.
20,40,and80MHz(802.11ac)20and 40MHzchannels(802.11n)
- Maximalratio combining(MRC)
- Beamforming
- Packetaggregation
- VLANtagging(802.1Q)
- Cyclicshiftdiversity(CSD)support
- WirelessQualityofService(WMM/802.11e)
- Real-timeWIPSwithforensics
- GuestIsolation
- SupportforfastLayer2roaming
- Layer3 roaming
- Solutionmustincludebuilt-inPCIcompliancewizard andremediationtool,andprovidesecuremanagementaccesswithpasswordrestrictionsandtwo-factorauthenticationvia SMS
- APmustincludeathird(non-clientserving)radiodedicatedtocontinuouslyandautomaticallymonitoringsurroundingstomaximize Wi-Fiperformance. This thirdradiowillmeasure channelutilization,signal strength,throughput,signalsfrom3rdpartyaccesspoints,non-Wi-Fiinterference,andautomatically optimizeWi-Fiperformance ofindividualaccesspoints andmaximizesystem-wideperformance
- Lifetimehardwarewarrantyandadvancereplacement
LicensefortheMerakiMR32CloudManagedAccessPointwhichincludescloudservices,softwareupgradesandsupportfor5 years. - LIC-MR34-5YR
Quantity=211(locationsarelistedonlaterpages)MPSDalsodesirespricingonanalternateAccessPoint
Alternate–CiscoMerakiMR32CloudManagedAccessPointCompatibleandequivalent –MR32-HW LicensefortheMerakiMR32CloudManagedAccessPointwhichincludescloudservices,softwareupgradesandsupportfor5 years. - LIC-MR32-5YR
Quantity=211 (locationsarelistedonlaterpages)
MerakiMS320CloudManaged48PortGigE720WPoE/PoE+-MS320-48FP-HW compatibleandequivalentQuantity=8 (locationsarelistedonlaterpages)
Solutionmustincludecloudarchitecture thatisfullyintegrated withthesamecloud wirelessmanagementand existingCiscoprimeinfrastructureandremovestheneedfor anycontrollersorhardware/softwareoverlaymanagement.
Vendormustincludeintheinstallationcostsallmodules,transceivers,cables,connectors,etc.neededtomakeeachdevice100%operational. Anycostsnotincludedinthevendorproposedbudgetthatmaybe requiredforthesuccessfulcompletionoftheinstallationofthedevicesareassumedtobeprovidedbythe vendor andat nocostto MPSD.
Interfaces
- 48×10/100/1000BASE-TEthernet(RJ45)withauto-MDIXcrossover
- 48VDC802.3af/802.3atPower-over-Ethernet(PoE/PoE+)ontheMS320-48Pmodels,availableonallports (maximumof30WperportforPoE+)
- 4×SFP+10GigabitEthernetinterfaces for uplink
- Autonegotiationandcrossoverdetection
Ethernetswitchingcapabilities
- 802.1pQualityofServiceprioritization
- 802.1QVLANtaggingandQ-in-QVLANstackingwith 4096addressable tags
- 802.1DSpanningTreeProtocol(RSTP,STP)
- 802.1abLinkLayerDiscoveryProtocol(LLDP)
- 802.3adlinkaggregationwithupto8portsper aggregate
- Broadcaststormcontrol
- IGMPsnoopingfor multicastfiltering
- MACforwardingtableentries:8,000
Security
- Integratedtwo-factorauthentication
- Role-basedadministration
- Corporatewidepasswordpolicyenforcement
- IEEE802.1Xport-basedsecurity
- Performance
- Non-blockingfabric
- 176Gpbsnon-blockingswitchingcapacity
- 2.5microsecondlatency
PoweroverEthernet(PoEmodels):
- 802.3af(PoE)15.4W perportand802/.3at(PoE+)25.5Wperport
- MS320-48LPmaximumPoEoutput:370W
- MS320-48FPmaximumPoE output:720W
- PoEavailableonallportssimultaneously
- Pre-standardPoE:supportspre-standardPoEdevices
Management
- Managedviathe cloudusingtheMerakidashboardorequivalent
- IntegratedwithMerakiwireless,routing,andfirewallmanagementorequivalent
- No-touchremotedeployment(nostagingneeded)
- Detailedhistoricalper-port andper-clientusagestatistics
- DHCPandhostnamefingerprinting
- SNMPv2c
- Seamlessover-the-webfirmwareupgrades
Lifetimehardwarewarrantywithadvancedreplacementincluded.
MerakiMS320EnterpriseLicense–compatibleandequivalent–LIC-MS320-48FP-5YRQuantity=8 (locationsarelistedonlaterpages)
License fortheMerakiMS320 CloudManaged48PortGigE720WPoE/PoE+switch whichincludescloud services,softwareupgrades and supportfor5years.
Cisco4321IntegratedSwitch/Router–ISR4321-V/K9Quantity=3
MPSDdesirestodeliverrouting, mobility,security,computeandstorageinasinglebundlebyusingISR4000
Pricemustincludealllicenses,powersupply,memory,modulesand1year warranty
CiscoMerakiMX100SecurityAppliance–MX100-HW Quantity=2 (locationsarelistedonlaterpages)
Vendormustincludeintheinstallationcostsallmodules,transceivers,cables,connectors,etc.neededtomakeeachdevice100%operational. Anycosts notincludedinthevendorproposedbudgetthatmaybe requiredforthesuccessfulcompletionoftheinstallationofthedevicesareassumedtobeprovidedbythe vendor andat nocostto MPSD.
NetworkandSecurityServices
- Statefulfirewall,1:1NAT,DHCP,DMZ,staticrouting
- Identity-basedpolicies
- AutoVPN™self-configuringsite-to-siteVPN
- ClientVPN(IPsec)
- Useranddevicequarantine
- VLANsupportandDHCPservices
AdvancedSecurityServices
- Contentfiltering(WebrootBrightCloudCIPA-compliantURLdatabase)
- Websearchfiltering(includingGoogleandBingSafeSearch)
- YouTubeforSchools
- Intrusionprevention(SourceFire Snortbased)
- Antivirusandantiphishingfiltering(KasperskySafeStreamIIengine)
- RequiresAdvancedSecurityLicense
WANPerformanceManagement
- Webcaching
- WANlinkaggregation
- Applicationlevel(Layer7)trafficanalysisandshaping
- AutomaticLayer3failover(includingVPNconnections)
- WAN uplinkselectionbased ontraffictype
- Note: webcachingis notavailableonMX60orMX60Wmodels
WANOptimization
- Byte-levelcaching(1TBcapacity)
- Universaldatastorewithdataredundancyelimination
- TCPtransport compressionandoptimization
- Protocoloptimization(CIFS,HTTP,FTP)
MonitoringandManagement
- Webbasedmanagementandconfiguration
- Throughput,connectivitymonitoringand alerts
- Networkassetdiscoveryanduseridentification
- Built-innetwork-widereporting,monitoringandalerts
- Centralizedpolicymanagement
- Real-timediagnosticandtroubleshootingoverthe web
- Automaticfirmwareupgradesandsecuritypatches
- Searchablenetwork-wideeventlogs
Interfaces
- 2×GbE(WAN)
- 8× GbE
- 2× SFP
- USB:1×USB2.0for3G/4Gfailover(supporteddevices)
Performance
- Statefulfirewallthroughput: 500Mbps
- VPNthroughput:250Mbps
- WANoptimizationstorage:1TB
- Recommendedformedium-sizedbranches(upto500users)
CiscoMerakiMX400SecurityAppliance–MX400-HW Quantity=1(locationsarelistedonlaterpages)
Vendormustincludeintheinstallationcostsallmodules,transceivers,cables,connectors,etc.neededtomakeeachdevice100%operational. Anycostsnotincludedinthevendorproposedbudgetthatmaybe requiredforthesuccessfulcompletionoftheinstallationofthedevicesareassumedtobeprovidedbythe vendor andat nocostto MPSD.
NetworkandSecurityServices
- Statefulfirewall,1:1NAT,DHCP,DMZ,staticrouting
- Identity-basedpolicies
- AutoVPN™self-configuringsite-to-siteVPN
- ClientVPN(IPsec)
- Useranddevicequarantine
- VLANsupportandDHCPservices
AdvancedSecurityServices
- Contentfiltering(iBossCIPA-compliantURLdatabase)
- Websearchfiltering(includingGoogleandBingSafeSearch)
- YouTubeforSchools
- Intrusionprevention(SourceFire Snortbased)
- Antivirusandantiphishingfiltering(Sophos)
- RequiresAdvancedSecurityLicense
WANPerformanceManagement
- Webcaching
- WANlinkaggregation
- Applicationlevel(Layer7)trafficanalysisandshaping
- AutomaticLayer3failover(includingVPNconnections)
- WAN uplinkselectionbased ontraffictype
- Note: webcachingis notavailableonMX60orMX60Wmodels
WANOptimization
- Byte-levelcaching(1TBcapacity)
- Universaldatastorewithdataredundancyelimination
- TCPtransport compressionandoptimization
- Protocoloptimization(CIFS,HTTP,FTP)
MonitoringandManagement
- Webbasedmanagementandconfiguration
- Throughput,connectivitymonitoringand alerts
- Networkassetdiscoveryanduseridentification
- Built-innetwork-widereporting,monitoringandalerts
- Centralizedpolicymanagement
- Real-timediagnosticandtroubleshootingovertheweb
- Automaticfirmwareupgradesandsecuritypatches
- Searchablenetwork-wideeventlogs
Interfaces
- 2×GbE(WAN)
- 8× GbE
- 8 × GbE (SFP)
- 4×10GbE(SFP+)
- USB:1×USB2.0for3G/4Gfailover(supporteddevices)
- Performance
Performance
- Statefulfirewallthroughput:1,000Mbps
- VPNthroughput:325Mbps
- WANoptimizationstorage:1TB
- Recommendedforlargecampus/datacenters(upto2,000users)
MerakiMX100AdvancedSecuritycompatibleandequivalent -LIC-MX100-SEC-5YRQuantity=2 (locationsarelistedonlaterpages)
LicensefortheMerakiMX100orequivalentsecurityappliancewhich includescloudservices,softwareupgrades andsupport for5years.
MerakiMX400AdvancedSecuritycompatibleandequivalent -LIC-MX400-SEC-5YRQuantity=1(locationsarelistedonlaterpages)
LicensefortheMerakiMX400orequivalentsecurityappliancewhich includescloudservices,softwareupgrades andsupport for5years.
MerakiMS420-24CloudManagedAggregationSwitchcompatibleandequivalent–MS420-24-HW Quantity–3(locationsarelistedonlaterpages)
Interfaces
- 24 ×10GbESFP+/SFP
- 1×10/100/1000RJ45managementport
Ethernetswitchingcapabilities
- 802.1pQualityofServiceprioritization
- 802.1QVLANtaggingandQ-in-QVLANstackingwith 4096addressable tags
- 802.1DSpanningTreeProtocol(RSTP,STP)
- 802.1abLinkLayerDiscoveryProtocol(LLDP)
- 802.3adlinkaggregationwithupto8portsper aggregate
- Broadcaststormcontrol
- IGMPsnoopingfor multicastfiltering
Layer3capabilities
- Dynamicrouting(OSPFv2)
- Staticrouting
- DHCPRelay
- DHCPServer
- Warmspareredundancy(VRRP)
- DHCPFailover
Security
- Integratedtwo-factorauthentication
- Role-basedadministration
- Corporatewidepasswordpolicyenforcement
- IEEE802.1Xport-basedsecurity
Performance
- Non-blockingfabric
- 480Gbpsswitchingcapacity
- HardwareMounting
- Rack-mountablewith includedrackmounthardware
- Front-to-backairflow
- Field-replaceable,hot-swappablepowersupplies
- Field-replaceable,hot-swappablefans
Management
- Managedviathe cloudusing theMerakidashboard
- IntegratedwithMerakiwireless,securityappliance,anddevicemanagement
- No-touchremotedeployment(nostagingneeded)
- Detailedhistoricalper-portandper-clientusagestatistics
- DHCPandhostnamefingerprinting
- SNMPDallowsintegrationwith3rd-partynetworkmanagementsolutions
- Seamlessover-the-webfirmwareupgrades
MerakiMerakiMS420-24EnterpriseLicenseforMS420-24CloudManagedAggregationSwitchcompatible andequivalent–LIC-MS420-24-5YR
Quantity–3(locationsarelistedonlaterpages)
LicensefortheMerakiMS420-24switchorequivalentappliancewhich includescloudservices,softwareupgrades andsupport for5years.
NetworkCabling(Drops)–HardwareandInstallationQuantity=211(locationsarelistedonlaterpages)
Allinstallationandmaterialchargesassociated withtheinstallationofnetworkcablingtomakeaccesspoints 100% operationalshouldbeincluded. Alladditionalconnectors,screws,labor,panduit,conduit,ties,hangers,jacks,cables,parts,modules, etc.needed tomakethecablesconnectingthewirelessaccesspointsto thedesignatedswitchand/orpatchpanelinordertomaketheaccesspoints100%operationalshouldbeincludedintheinstallationcostandprovidedbythevendor. Patch panels andpatchcablesshouldbeincludedwhen/ifnecessary. Anycosts notoutlinedinthevendorproposedbudgetthatmayberequiredforthesuccessfulcompletion oftheinstallationofthedevicesareassumedtobeprovidedbythevendorandatno cost toMPSD.
- AllworkmustbeperformedinaccordancewithANSI/TIA/EIA-568-Bstandards.
- All cables shouldbeblue.
- All cableshallbeCAT‐6EPOEratedcableterminatedto industrycertified RJ‐45s jackat each specified outlooklocation.
- Anyareathatdoesnot haveadropceilingwillrequirea wallmountbracket orothermountingoption if required.Suitablewiringraceways,panduit,conduitandmoldingstoachieveafinishedinstallation appearanceshallbeused.
- Cablingmustbeneatlyrun.Cablesmaynot liedirectlyonceilingtilesoronoverheadlights.Theymust besuspendedusingJhooks wherenecessary. O-rings and cabletiewrapsarenotacceptable.
- Alldropsneededfor thisprojectshallbenew.Dropsmayexist inaschoolclose toanew AP location,butthat connection shallnotbere-used.
- All cableconnectionsmustbeidentifiableatbothends.
- Allcablesmustbetestedandcertified.Hardcopyor testingresultsandcertificationshallbeprovidedelectronically.
NetworkCabling(MDFtoIDF)–HardwareandInstallationQuantity=Approx:3(locationsarelistedonlaterpages)
- All cableruns betweenMDFsandIDFsmustbeSingleModeFiber
- Somelocationsalready haveMultiModefromMDF toIDF–thiswillbediscussedindetailed atbidder’s conference.
APCSmart-UPSorAPCSmart-UPScompatibleforDataRacks Quantity–3 (locationsarelistedonlaterpages)
- MPSDdesirestopurchaseUPS’toprovideaminimum of15minutesfortheMDFateachschool.
- Alldevicesmustberack-mountable.
- Alldevicesmustplugintostandard120Voutlets.
Respectfullysubmitted,
COMPANY
ADDRESS
PHONE
FAX
E-MAILADDRESS
SIGNED
WRITEOUT
SIGNATURE
TITLE
DATE
CIRCLETHEOPERATINGSTATUSOFYOURBUSINESSASINDICATEDBELOW: MINORITY OWNEDWOMAN OWNED NON-MINORITY
School Name / Description of Item Requested - Item Specified by the Vendor Should Be Equivalent and Compatible to the Item Described Below / Part Number / Qty / Make/Mfr / Model / Part Number / Description / Unit Cost $ / Extended Cost $ / Installation Cost $ / 1 Yr. Maint Cost $ / Total Cost $ / Erate Eligible % / Erate Ineligible %Escatawapa Upper Elementary / Cisco Meraki MR34 Cloud Managed Access Point / MR34-HW / 55
Meraki MR Enterprise License / LIC-ENT-5YR / 55
Alternate AP: Cisco Meraki MR32 Cloud Managed Access Point / MR32-HW / Alternate: 55
Alternate AP: Meraki MR Enterprise License / LIC-ENT-5YR / Alternate: 55
Meraki MS320 Cloud Managed 48 Port GigE 720W PoE / PoE+ / MS320-48FP-HW / 2
Meraki MS320 - 48FP Enterprise License / LIC-MS320-48FP - 5YR / 2
Meraki MX100 Security Appliance / MX100-HW / 1
Meraki MX100 Advanced Security / LIC-MX100-SEC-5YR / 1
Stacking Cable / MA-CBL-TA-1M / 3
IDF Closet 1GE Uplink Modules / MA-SFP-1GB-SX / 2
IDF Closet 10GE Uplink Modules / MA-SFP-1GB-LX10 / 2
UPS in MDF Closet / APC SMART-UPS FOR DATA RACKS / 1
Rack / EQUIPMENT RACK / 0
Cisco 4321 Integrated Switch/Router / ISR4321-V/K9 / 1
Network Cabling (Drops) - Installation / All installation charges associated with the installation of network cabling to make APS 100% operational. Cat 6A - all parts including cable, jacks, ties, hangers, etc. panduit, etc. to make APS 100% operational / 1
Network Cabling (MDF to IDF) - Installation / All installation charges associated with the installation of single mode fiber from each MDF to IDF closet. All parts including fiber, jacks, ties, hangers, etc. to make switches 100% operational. Every MDF has fiber coming in from AT&T. / 1
Installation and configuration of Switches and UPSs / All installation charges associated with the installation of network devices and UPSs / 1
KREOLE PRIMARY / Cisco Meraki MR34 Cloud Managed Access Point / MR34-HW / 53
Meraki MR Enterprise License / LIC-ENT-5YR / 53
Alternate AP: Cisco Meraki MR32 Cloud Managed Access Point / MR32-HW / Alternate: 53
Alternate AP: Meraki MR Enterprise License / LIC-ENT-5YR / Alternate: 53
Meraki MS320 Cloud Managed 48 Port GigE 720W PoE / PoE+ / MS320-48FP-HW / 2
Meraki MS320 - 48FP Enterprise License / LIC-MS320-48FP - 5YR / 2
Meraki MX100 Security Appliance / MX100-HW / 1
Meraki MX100 Advanced Security / LIC-MX100-SEC-5YR / 1
Stacking Cable / MA-CBL-TA-1M / 2
IDF Closet 1GE Uplink Modules / MA-SFP-1GB-SX / 2
IDF Closet 10GE Uplink Modules / MA-SFP-1GB-LX10 / 2
Rack / EQUIPMENT RACK / 0
Cisco 4321 Integrated Switch/Router / ISR4321-V/K9 / 1
Network Cabling (Drops) - Installation / All installation charges associated with the installation of network cabling to make APS 100% operational. Cat 6A - all parts including cable, jacks, ties, hangers, etc. panduit, etc. to make APS 100% operational / 1
Network Cabling (MDF to IDF) - Installation / All installation charges associated with the installation of single mode fiber from each MDF to IDF closet. All parts including fiber, jacks, ties, hangers, etc. to make switches 100% operational. Every MDF has fiber coming in from AT&T. / 1
Installation and configuration of Switches and UPSs / All installation charges associated with the installation of network devices and UPSs / 1
MOSS POINT HIGH SCHOOL / Cisco Meraki MR34 Cloud Managed Access Point / MR34-HW / 78
Meraki MR Enterprise License / LIC-ENT-5YR / 78
Alternate AP: Cisco Meraki MR32 Cloud Managed Access Point / MR32-HW / Alternate: 78
Alternate AP: Meraki MR Enterprise License / LIC-ENT-5YR / Alternate: 78
Meraki MS320 Cloud Managed 48 Port GigE 720W PoE / PoE+ / MS320-48FP-HW / 10
Meraki MS320 - 48FP Enterprise License / LIC-MS320-48FP - 5YR / 10
Meraki MX400 Security Appliance / MX400-HW / 1
Meraki MX400 Advanced Security / LIC-MX400-SEC-5YR / 1
Meraki MS420 Cloud Managed 24 P / MS420-24-HW / 1
Meraki MS420-24 Enterprise License / LIC-MS420-24-5YR / 1
Stacking Cable / MA-CBL-TA-1M / 6
IDF Closet 1GE Uplink Modules / MA-SFP-1GB-SX / 6
IDF Closet 10GE Uplink Modules / MA-SFP-1GB-LX10 / 6
UPS in MDF Closet / APC SMART-UPS FOR DATA RACKS / 1
Rack / EQUIPMENT RACK / 2
Cisco Wireless Bridge with bracket and power supply / 1530 / 2
Cisco 4321 Integrated Switch/Router / ISR4321-V/K9 / 1
Network Cabling (Drops) - Installation / All installation charges associated with the installation of network cabling to make APS 100% operational. Cat 6A - all parts including cable, jacks, ties, hangers, etc. panduit, etc. to make APS 100% operational / 1
Meraki MX10+A37:H540 Security Appliance / Network Cabling (MDF to IDF) - Installation / All installation charges associated with the installation of single mode fiber from each MDF to IDF closet. All parts including fiber, jacks, ties, hangers, etc. to make switches 100% operational. Every MDF has fiber coming in from AT&T. / 1
ExtendedCost
$ / Installation Cost $ / 1Yr.Maint Cost $ / Total Cost $ / Erate Eligible% / Erate Ineligible%