Tenders Are Invited For Delivery, Implementation And Configuration Of Backbone Switches As Well As Configuration Service And Implementation Of Hospital Network Segmentation

The Subject Of The Order Will Be Completed Within 180 Business Days, Counted From The Date Of Conclusion Of The Agreement, Divided Into The Following 3 Stages: A. Stage 1: 1) Inventory Of Structured Cabling And Existing Infrastructure Of Network Devices Owned By The Ordering Party, Including Critical Infrastructure (Servers, Disk Arrays, Edge Devices, Firewalls, Backbone Network Switches) And Access Infrastructure (Access Network Switches, Workstations, Other Connected Devices To The Lan). 2) Preparing Documentation Presenting The Current State Of The Physical Layer Of The It Network Along With A List Of Installation Locations And Connection To The Network Of Individual It Devices. 3) Designing A Network Segmentation Scheme Into Smaller Logical Networks (Vlans), Taking Into Account Network Requirements And Future Development Needs. The Project Must Assume Various Requirements Regarding Traffic Isolation, Security Policies And Access To Network Resources. This Work Must Be Carried Out In Consultation And With Guidelines.4) Designing Such A Number Of Virtual Networks To Separate Different Types Of Traffic, But Not Less Than:A) Employee Vlans (Reflecting The Organizational Structure)B) Vlans Part Gray) Vlans Part Whited) Vlans Wlane) Vlan Serverf) Vlan Managementg) Vlan Backup) Vlan Virtualizationi) Vlan Dmzj) Vlan Video Monitoringk) Vlan Medical Equipment) Vlan Laboratory M) Vlan San5) Connections Between Lan Switches Using Fiber Optic And Copper Connections.B. Stage 2: 1) Installation Of The Delivered Framework Switches In Two Locations Of The Ordering Party, Two Devices Working In A Stack. The Minimum Device Configuration Required Is: A. Registration Of Devices In The Manufacturers Systems; B. Updating The Switches Firmware To The Latest, Stable Version Provided By The Manufacturer; C. Creation Of Stacks Of Delivered Devices, D. Configuration Of Device Management Mechanisms (E.G. Ssh, Telnet, Snmp, Https); E. Configuration Of Physical Interfaces, Lacp Functionality;F. Routing Configuration. Configuration Of Security Policies, Qos, Stp Mechanisms And Their Security. Configuration Of Switches For Functioning In The Environment Of Separate Logical Networks - Preparation Of Interfaces;I. Integration Of Authorization With The Nacc System Owned By The Ordering Party. Stage 3:1) Reconfiguring The Current Nacview Solution To Implement The Designed Vlan Scheme And Configuring The Network Following The User Or Device In Such A Way That The User/Device Has Access To The Same Network Resources, Regardless Of The Physical Location Of The Network Connection;2 ) Reconfiguration Of 70 Switches To Adapt Them To The New Network Segmentation Scheme, Taking Into Account Vlans Following The User Or Device, And Ensuring Proper Operation Of The Entire Network And Communication With The Nacview Server3) Fortigate Configuration In Terms Of Virtual Lan Networks (Vlans), Defining Communication Rules Between Them And Wan/Dmz Network, Ensuring Safe And Effective Data Flow In The Entire Network Infrastructure4) Conducting Functional Tests, Including 802.1X Authorization Tests And Inter-Vlan Communication5) Connecting The Current Network Infrastructure To The New Lan Network6) Final Documentation Containing A Detailed Description Of The Configuration Made (In The Form Of Paper And Electronic), Including Switches, Utm, Nacview System. The Contractor Is Obliged To Prepare: A) Device Configuration (Or Configuration Descriptions In The Case Of Hardware Or Software That Does Not Enable Export Of The Configuration To A Text File Or Has A Distributed Configuration) B) Access Codes And Keys Licenses, If Any

Refer document

FileName	File Description
Global Tender Document	Tender Notice