Survey
* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project
* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project
A & E SPECIFICATIONS THLK-S2-WB, THLK-H2-RB STANDARD CAPACITY AND HIGH CAPACITY HARDWARE VIRTUAL PRIVATE NETWORK TRANSMISSION SYSTEM PART 1 – GENERAL The intent of this document is to specify the minimum criteria for the design, supply, installation, and commissioning of the KBC Network’s Standard Capacity and High Capacity ThruLink units. 1.01 SUMMARY A. ThruLink is a hardware Virtual Private Network (VPN) device that enables secure communications to be established over any standard, public or private IP network using AES, Blowfish or Camellia encryption up to 256 bit. ThruLink is a tunneling device that constantly monitors the parameters of the communications channel to ensure optimization of the available bandwidth. It performs behind firewalls, NAT devices and will not affect TTL, UPnP, VLAN information, broadcast, multicast or any other traffic. By enabling secure communications to be set up over public networks eg. the internet, ThruLink can eliminate the need for leased lines. The system is designed to be configured by non-specialist personnel and for rapid deployment with minimal set up and maintenance free operation. 1.02 SECTION INCLUDES A. B. C. THLK-S2-WB ThruLink Standard Capacity – 2 RJ45 ports – Standalone THLK-S3-WB ThruLink Standard Capacity - 3 RJ45 ports - Standalone THLK-H2-RB ThruLink High Capacity – 2 RJ45 ports - 19” Rack Mount 1.03 REFERENCES A. B. C. D. E. 1.04 Conformity for Europe (CE) Federal Communications Commission (FCC) Australian Communications Authority (C-Tick) Restriction of Hazardous Substances (RoHS) Waste Electrical & Electronic Equipment (WEEE) DEFINITIONS A. B. C. No Substitutes: The exact make and model number identified in this specification shall be provided without exception. Or Equal: Any item may be substituted for the specified item provided that in every technical sense, the substituted item provides the same or better capability and functionality Or Approved Equal: A substitute for the specified item may be offered for approval by the Owner. The proposed substitution must, in every technical sense, provide the same or better capability and functionality as the specified item. Such requests for approval shall be submitted in accordance with the provisions of PART 1.06 – SUBMITTALS, and must be obtained within the time frames outlined. 00000 - 1 Section Title A & E SPECIFICATIONS 1.05 SYSTEM DESCRIPTION A. Performance Requirements: 1. 2. 3. 4. 5. 6. 7. 8. Provide a secure Virtual Private Network over a Wide Area Network (WAN) or Local Area Network (LAN) using AES-128, AES-192, AES-256, Blowfish-128, Blowfish-192, Blowfish-256, or Camellia-128, Camellia-192, Camellia-256, encryption. Monitor the parameters of the communications channel to optimize the bandwidth potential. Minimize path latency through any network. Provide isolation for ThruLink traffic from other network traffic. Perform from behind firewalls and NAT devices. Provide no impact on TTL, UPnP, VLAN information, broadcast, multicast or any other traffic. Possess the ability to be expanded as system requirements grow. Possess the ability to be updated over the network. 1.06 SUBMITTALS A. B. C. D. 1.07 General: Submittals shall be made in accordance with the Conditions of the Contract and Submittal Procedures Section. Shop Drawings and Schematics: Shall depict ThruLink in final proposed “as built” configuration. The following must be provided: 1. Connection diagrams for interfacing equipment. 2. List of connected equipment. 3. Locations for all major equipment components to be installed under this specification. Product Data: The following shall be provided: 1. Technical data sheets. 2. A complete set of instruction manuals. Quality Assurance Submittals: The following shall be submitted: 1. Test Report: The final test report shall indicate that every device was tested successfully in a system test. DELIVERY, STORAGE AND HANDLING A. B. C. D. General: Delivery, storage, and handling of ThruLink shall be in accordance with the manufacturer’s recommendations. Ordering: The manufacturer’s ordering instructions and lead-time requirements must be followed in order to avoid installation delays. Delivery: ThruLink shall be delivered in the manufacturer’s original, unopened, undamaged container with identification labels intact. Storage and Protection: ThruLink shall be stored and protected from exposure to harmful weather conditions and at the environmental conditions recommended by the manufacturer. 1.08 PROJECT/SITE CONDITIONS A. B. 1.09 Temperature Requirements: Standard ThruLink products shall operate in an environment with an ambient temperature range of –33˚C to +74˚ C without the assistance of fan-forced cooling. The High Capacity products shall operate in an environment with an ambient temperature range of +5°C to +35°C without the assistance of fan-forced cooling. Humidity Requirements: Products shall operate in an environment with relative humidity of 0% to 95% (non-condensing). WARRANTY A. Manufacturer shall warrant ThruLink products to be free from defects in material or workmanship for a period of at least two years. Maintenance releases for embedded software shall be supported for the full warranty period. 00000 - 2 Section Title A & E SPECIFICATIONS PART 2 – PRODUCTS 2.01 2.02 ACCEPTABLE MANUFACTURER A. KBC NETWORKS, 25691 Atlantic Ocean Drive, Suite B3, Lake Forest, CA 92630, USA. Telephone: +1-949-297-4930, Fax: +1-949-297-4933 Email: [email protected], Internet: www.kbcnetworks.com B. Substitutions: Not Permitted C. All modules shall be supplied from a single manufacturer SYSTEM PERFORMANCE A. The ThruLink products features/functions/specifications: 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19. 20. 21. 22. 23. 24. shall include, as a minimum, the following The system shall use tunneling technology to provide a secure Virtual Private Network over any standard public or private IP network. The system shall operate through fixed public, 3G, mobile, wireless and satellite networks. The system shall offer AES-128, AES-192, AES-256, Blowfish-128, Blowfish-192, Blowfish-256, Camellia-128, Camellia-192 and Camellia-256 encryption. The system shall provide monitoring of the communications channel to ensure optimization of the available bandwidth. Management of the unit shall be achieved via the Internet or SNMPv3. The system shall be scalable to allow network expansion as system requirements grow. The system shall perform from behind firewalls and NAT devices. The system shall not affect TTL, UPnP, VLAN information, broadcast, multicast or any other traffic. The Standard Capacity unit shall be available in a dual LAN port format to reduce the need for a switch when connecting two LAN devices. The system shall support the following protocols: IP, User Datagram Protocol (UDP), Transmission Control Protocol (TCP), Dynamic Host Control Protocol (DHCP), Dynamic Domain Name System (DDNS), Simple Network Management Protocol (SNMP) 3.0. The standard Capacity unit shall have a bandwidth of 80Mbps (unencrypted) and 30Mbps encrypted the High Capacity unit shall have a bandwidth of 650Mbps unencrypted and 400Mbps encrypted. System configuration of all parameters shall be accomplished via the Graphical User Interface (GUI). The system shall eliminate the requirement to make network changes. The system shall be optimized for constant video streaming. The system shall provide failover functionality for vital uptime requirements. The Standard Capacity unit shall be temperature hardened for unconditioned environments. The system shall provide diagnostic tools including network traffic monitoring, basic traceroute and ping function. The Standard Capacity unit shall provide two or three 10/100 RJ45 connectors, a serial DB9 connector, a jack socket for power input and shall have the ability to be powered by a Power Injection Module (PIM) via the WAN RJ45 port. The High Capacity unit shall provide two 10/100/1000 RJ45 connectors, a serial DB9 connector, an LCD display and an IEC power connector. Standard Capacity units shall be available in standalone configurations and High Capacity units in rack mount configurations. The system shall be able to be configured by non-specialist personnel and shall be designed for rapid deployment with minimal set up and maintenance free operation. The Standard Capacity unit shall have an operating temperature of -33°C to +74°C and an operating humidity of 0% to 95% (non- condensing). The High Capacity unit shall have an operating temperature of +5°C to +35°C, a nonoperating temperature of -40°C to +70°C and an operating humidity of 0% to 95% (non- condensing). The system radiated emission shall be compliant with FCC Part 15, Class A and EN55022 specifications. 00000 - 3 Section Title A & E SPECIFICATIONS 2.03 2.04 SIGNAL SPECIFICATIONS A. Ethernet Interface Specifications 1. Ethernet Compliance: IEEE 802.3, 802.3u, 802.3x 2. Interface: RJ45 Auto-MDI/MDI-X 3. Data Rate: 10/100 Mbps (Manual or auto-negotiate for the Standard Capacity unit and 10/100/1000 Mbps for the High Capacity Unit. 4. Operating Mode: Half or full-duplex 5. Network Protocols: Unicast/Multicast, UDP, TCP, IP, DHCP, DNS, SNMPv3 B. Bandwidth 1. Standard Capacity unit: 80Mbps unencrypted, 30Mbps encrypted High Capacity unit: 650Mbps unencrypted, 400Mbps encrypted. POWER SPECIFICATIONS A. B. C. D. 2.05 MECHANICAL SPECIFICATIONS A. B. 2.06 Standard Capacity: +12 Volts DC High Capacity: 100-240Volts AC Standard Capacity Current draw <300 mA @ 12 VDC High Capacity power: 250W Standard Capacity: 7.5 x 6.5 x 1.125 in. (190 x 165 x 29 mm.) High Capacity: 15.5 x 17.2 x 1.7 in. (394 x 437 x 44 mm.) ENVIRONMENTAL SPECIFICATIONS A. B. C. D. E. F. Standard Capacity Operating Temperature: -33°C to +74° C High Capacity Operating Temperature: +5°C to +35°C High Capacity Non-Operating Temperature: -40°C to +70° C Humidity: 0% to 95% (non condensing) Emissions: FCC Part 15, Class A Mean Time between Failure: >100,000 hours 00000 - 4 Section Title A & E SPECIFICATIONS PART 3 - EXECUTION 3.01 EXAMINATION A. B. C. 3.02 Inspect modules before installation to verify physical condition as well as inclusion of all peripheral materials Modules shall be free of any cosmetic defects or damage. Shipping box shall include the module, power supply (surface mount units) and operations manual. PREPARATION A. 3.03 Standard Capacity, Standalone Module (Surface Mount) 1. Shall be mounted on a properly prepared surface adequate for the size and weight of module. The placement of the unit shall allow provision for cable installation and maintenance as indicated on the approved detail drawings and in accordance with the installation manual. B. High Capacity, Rack Mount Module 1. Shall be installed in a standard EIA 19” (482.6 mm) rack or wall standoff bracket adequate for the size and weight of the High Capacity unit. The placement of the unit shall allow provision for cable installation and maintenance as indicated on the approved detail drawings and in compliance with the installation manual. INSTALLATION A. 3.04 General: The ThruLink products must be installed, configured, and tested in accordance with the manufacturer’s instructions. TESTING AND CERTIFICATION A. The Contractor shall demonstrate the functionality of ThruLink on completion of installation, documenting the result of all tests and providing these results to the Owner. ThruLink shall be tested in accordance with the following: 1. The Contractor shall conduct a complete inspection and test of all installed ThruLink equipment. This includes testing and verifying operation with connected equipment and network infrastructure. 2. The Contractor shall provide staff to test all devices and all operational features of the system for witness by the Owner’s representative and the Authority having jurisdiction. All testing must be witnessed by the Owner’s representative, prior to acceptance. END OF SECTION 00000 - 5 Section Title A & E SPECIFICATIONS Brief Specification The Hardware Virtual Private Network (VPN) units shall be KBC Networks models THLK-S2-WB (ThruLink, Standard Capacity, Standalone operation) THLK-S3-WB (ThruLink Standard Capacity, Standalone operation) and THLK-H2-RB (ThruLink, High Capacity, Rack Mount operation). The units shall be either standalone or rack mount (refer to contract drawings for mounting type). The system shall use tunneling technology to provide a secure Virtual Private Network over any standard public or private TCP/IP network. The system shall operate through fixed public, 3G, mobile, wireless and satellite networks. The system shall offer AES, Blowfish or Camellia encryption up to 256 bit. The system shall provide monitoring of the communications channel to ensure optimization of the available bandwidth. The management of the unit shall be achieved by the Internet, Telnet and SNMPv3.The system shall be scalable to allow network expansion as system requirements grow. The system shall perform from behind firewalls and NAT devices. The system shall not affect TTL, UpnP, VLAN information, broadcast, multicast or any other traffic. The Standard Capacity unit shall be available in a dual LAN port format to reduce the need for a switch when connecting two LAN devices. The system shall support the following protocols: IP, User Datagram Protocol (UDP), Transmission Control Protocol (TCP), Dynamic Host Control Protocol (DHCP), Dynamic Domain Name System (DDNS), Simple Network Management Protocol (SNMP) 3.0. The Standard Capacity unit shall have a bandwidth of 80Mbps (unencrypted) and 30Mbps encrypted the High Capacity unit shall have a bandwidth of 650Mbps unencrypted and 400Mbps encrypted. System configuration of all parameters shall be accomplished via the Grahical User Interface (GUI). The system shall eliminate the requirement to make network changes. The system shall be optimized for constant video streaming. The system shall provide failover functionality for vital uptime requirements. The Standard Capacity unit shall be temperature hardened for unconditioned environments. The system shall provide diagnostic tools including network traffic monitoring, basic traceroute and ping function. The High Capacity unit shall provide two 10/100/100 RJ45 connectors, an LCD display and an IEC mains power. The Standard Capacity unit shall provide two or three 10/100 RJ45 connectors, a serial DB9 connector, a jack socket for power input and shall have the ability to be powered by a Power Injection Module (PIM) via the WAN RJ45 port. The High Capacity unit shall provide two 10/100/1000 RJ45 connectors, a serial DB9 connector, an LCD display and an IEC power connector. The system shall be able to be configured by non-specialist personnel, shall be designed for rapid deployment with minimal set up and maintenance free operation. The Standard Capacity unit shall have an operating temperature of -33°C to +74°C and the High Capacity unit shall have an operating temperature of +5°C to +35°C and a non-operating temperature of -40°C to +70°C. They shall both have an operating humidity of 0% to 95% (non-condensing) and a MTBF of greater than 100,000 hours. The system radiated emission shall be compliant with FCC Part 15, Class A and EN55022 specifications. 00000 - 6 Section Title