INDIAN INSTITUTE OF TECHNOLOGY BOMBAY MATERIALS MANAGEMENT DIVISION : (+91 22) (DR)

Transcription

1 Item CORE SWITCH: 24 Ports Item Description 1)General requirements: Switch- modular operating system, non-blocking wire speed performance. Switch solution-capable of providing complete redundancy by using another switch. Redundant switches- the capability to work as a single logical switch in Active-Active mode. 2)Hardware and interface requirements: Switch - 24-port 1/10G SFP+ interface (SFP should be unpopulated); scalable to support 32 SFP+ ports in future,accessories for active-active deployment(connectivity with 40G full duplex pipe),switch minimum performance of 250 Mpps for line rate performance,switch - a minimum switching capacity of 800 Gbps. 3)Layer 2 Switching : Minimum MAC addresses 20,000 or above,jumbo frames upto 9216 bytes no. of VLANs 4000 & above,arp Entries - 15,000 or above,port-based VLAN,MAC-based VLAN, VLAN tagging 802.1Q,LLDP,Support for foll. IEEE standards: 802.1D,802.1w, 802.1s, 802.3ad, 802.1Q,Switch-support MAC address notification to monitor the MAC addresses that are learned by,aged out or removed from the switch. 4)Layer 3 Features: switch-support 50K IPv4 and 50K IPv6 routing entries,switchsupport 10K Multicast entries,switch-support InterVLAN routing within the device,switch-support foll. IPv4 and IPv6 Routing features in hardware,static Routes from day 1 OSPF Routed access, RIP v1,v2 from day 1 support for OSPFv3, BGP, VRF-lite, Policy Based Routing, PIM, PIM-SSM with license upgrade Support for IPv4 - IPv6 dual stack configuration Switch-support IPv6 ICMPv6, Neighbor Discovery Duplicate Address Detection, Anycast Address, IPv6 over IPv4 GRE Tunnels, Standard Access Control Lists, DNS Lookups over an Ipv6, Secure Shell SSH support over IPv6 Transport, Static Routing, RIP for IPv6 (RIPng), OSPF for IPv6,(OSPFv3). 5)System Management and Administration: proposed switch-support In-Service OS upgrade mechanism with

2 Access Switches: 24 Ports a minimal disruption of traffic thru upgrade process in HAconfiguration,Switch-SNMPv2 and SNMPv3,switch - support automatic application of QoS settings when a device is connected to the switch port,switch-support Multiple Privilege Levels to allow different sets of users to have access to specified commands,switch-support monitor events and take informational,corrective, or an action when the monitored events occur or when a threshold is reached,switch-support Secure Shell (SSH),Switch-support Netflow, S-Flow,J-Flow Switchsupport comprehensive flow visibility for Layer 2 (MAC, VLAN), Layer 4 (TCP, UDP flags) traffic,switch Should support measure, report, and reduce energy consumption across your entire infrastructure. 6)Security features: Switch should support AAA using RADIUS or TACACS,Storm control mechanism,shuould support IP Source guard, Dynamic ARP inspection,support for 802.1x with accounting, port security and multiple authentication, MAC authentication bypass, Per-user ACL,Should support VLAN, Port ACLs Should support control plane policing for DOS protection,support for MLD snooping, IGMP snooping Support for Unicast Reverse Path Forwarding check in Hardware. 7)High Availability: Core switch should be set-up with Non-Stop forwarding in HA configuration,switch-redundant Power supplies, redundant Fans from day 1 1)General Requirements: Should have 24*10/100/1000 ports + 4 *10 gigabit ethernet SFP (2*10GE for uplinks + 2 ports for stacking ); SFP should be unpopulated Switching Capacity: 125 Gbps Forwading Capacity : 95 Mpps IPV6 Compliance 2)Port Standards & Functions: IEEE BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE- T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3x Flow Control, IEEE ad LACP, IEEE 802.1D (STP, GARP and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication Auto-negotiation Number of Ports - 24GE ports and atleast 4*10G SFP+ ports (including stacking ports)

3 Should support stacking for up-to 8 switches. 3)Layer 2 Switching: 802.1d STP, MSTP, RSTP "Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 32 groups Up to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad LAG" "Support for up to 4096 VLANs simultaneously Port-based and 802.1Q tag-based VLANs MAC-based VLAN Management VLAN Protected Port, with multiple uplinks Guest VLAN Unauthenticated VLAN Protocol-based VLAN Dynamic VLAN assignment via Radius server along with 802.1x client authentication" Support for Voice VLAN, MVR Should support Q-in-Q Support for Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) to enable automatic propagation and configuration of VLANs in a bridged domain. IGMP V1/2/3 snooping, IGMP querier MAC address 4)Layer 3: "Support for Wirespeed routing of IPv4 and IPv6 packets,should support Up to 2K static routes and up to 256 IPv4 and 128 IPv6 interfaces" Support for Routing Information Protocol version 2 Support for VRRP, Support For OSPF. 5)Security: IEEE 802.1X, SSH, SSL STP BPDU guard, Root Guard, IP Source Guard, DHCP Snooping, Dynamic ARP inspection, Port Binding, Port Security, DoS attack protection Storm control Support for Drop or rate limiting based on source and destination MAC, VLAN ID or IP address, protocol, port, DSCP/IP precedence, TCP/ User Datagram Protocol (UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, Internet Group Management Protocol (IGMP) packets, TCP flag

4 Access Switches: 48 Ports 6)IPv6: Dual Stack,IPv6 security: "RA guard ND inspection DHCPv6 guard Neighbor binding table (Snooping and static entries) Neighbor binding integrity check" Support for following IPv6 applications: Web/SSL, Telnet Server/SSH, Ping, Traceroute, SNTP, TFTP, SNMP, RADIUS, Syslog, DNS client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, TACACS. 7)Management: Support for 4 RMON groups Port and VLAN mirroring Should support Simplified configuration of QoS and security capabilities Should support zero touch deployment. Should be able to automatically apply QoS and Security on the ports after discovery through LLDP-MED Should be EEE compliant (802.3az) Should support LLDP-MED. 8)Certification: UL (UL 60950), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A 1)General Requirements: Should have: 48 10/100/1000 ports + 4 *10 gigabit ethernet SFP (2*10GE for uplinks + 2 ports for stacking ) SFP should be unpopulated Switching Capacity: 175 Gbps Forwading Capacity : 130 Mpps IPV6 Compliance 2)Port Standards & Functions : IEEE BASE-T Ethernet, IEEE 802.3u 100BASE-TX Fast Ethernet, IEEE 802.3ab 1000BASE- T Gigabit Ethernet, IEEE 802.3ad Link Aggregation Control Protocol, IEEE 802.3z Gigabit Ethernet, IEEE 802.3x Flow Control, IEEE ad LACP, IEEE 802.1D (STP, GARP and GVRP), IEEE 802.1Q/p VLAN, IEEE 802.1w Rapid STP, IEEE 802.1s Multiple STP, IEEE 802.1X Port Access Authentication Auto-negotiation Number of Ports - 48GE ports and atleast 4*10G SFP+ ports (including stacking ports) Should support stacking for up-to 8 switches. 3)Layer 2 Switching:

5 802.1d STP, MSTP, RSTP "Support for IEEE 802.3ad Link Aggregation Control Protocol (LACP) Up to 32 groupsup to 8 ports per group with 16 candidate ports for each (dynamic) 802.3ad LAG" "Support for up to 4096 VLANs simultaneously Port-based and 802.1Q tag-based VLANs MAC-based VLAN Management VLAN Protected Port, with multiple uplinks Guest VLAN Unauthenticated VLAN Protocol-based VLAN Dynamic VLAN assignment via Radius server along with 802.1x client authentication" Support for Voice VLAN, MVR Should support Q-in-Q Support for Generic VLAN Registration Protocol (GVRP) and Generic Attribute Registration Protocol (GARP) to enable automatic propagation and configuration of VLANs in a bridged domain. IGMP V1/2/3 snooping, IGMP querier MAC address. 4)Layer 3: "Support for Wirespeed routing of IPv4 and IPv6 packets Should support Up to 2K static routes and up to 256 IPv4 and 128 Ipv6 interfaces" Support for Routing Information Protocol version 2 Support for VRRP, Support for OSPF 5)Security: IEEE 802.1X, SSH, SSL STP BPDU guard, Root Guard, IP Source Guard, DHCP Snooping, Dynamic ARP inspection, Port Binding, Port Security, DoS attack protection Storm control Support for Drop or rate limiting based on source and destination MAC, VLAN ID or IP address, protocol, port, DSCP/IP precedence, TCP/ User Datagram Protocol (UDP) source and destination ports, 802.1p priority, Ethernet type, Internet Control Message Protocol (ICMP) packets, Internet Group Management Protocol (IGMP) packets, TCP flag 6)IPv6:Dual Stack, IPv6 security: "RA guard ND inspection DHCPv6 guard

6 10GBASE-SR SFP Module Intra-rack connection 10GBASE-LR SFP Module Warranty for Core Switch Warranty for 24 port access switch Warranty for 48 port access switch Fiber patch cord 3 metres Neighbor binding table (Snooping and static entries) Neighbor binding integrity check"support for following IPv6 applications: Web/SSL, Telnet Server/SSH, Ping, Traceroute, SNTP, TFTP, SNMP, RADIUS, Syslog, DNS client, DHCP Client, DHCP Autoconfig, IPv6 DHCP Relay, TACACS. 7)Management: Support for 4 RMON groups Port and VLAN mirroring Should support Simplified configuration of QoS and security capabilities Should support zero touch deployment. Should be able to automatically apply QoS and Security on the ports after discovery through LLDP-MED Should be EEE compliant (802.3az) Should support LLDP-MED. 8)Certification: UL (UL 60950), CSA (CSA 22.2), CE mark, FCC Part 15 (CFR 47) Class A 10GBASE-SR SFP Module (for OM3 fiber): should support both the Core & Access switches being quoted, both from a technical as well as the switch warranty perspectives. Cable (of the total 30 cables, 20*1Meter & 10*3 Metter)and other hardware required for stacking/interconnecting a switch with another switch within a rack, with at least 10 Gb interconnection speed. If switch does not already include specialized stacking interfaces, in addition to cable, include other required hardware such as 2 x 10G SFP 10GBASE-LR SFP Module should support both the Core & Access switches being quoted, both from a technical as well as the switch warranty perspectives. NBD Warranty for 5 years NBD Warranty for 5 years NBD Warranty for 5 years Fiber patch cord 3 metres compatible with SFP modules of core & access switch 8 port Gigabit switch 8 port Gigabit switch Unmanaged

7