Statement of Work (SOW) For the UPGRADE OF IAEA FLOORLANS (CONTRACT & BASIC SUPPLY AGREEMENT)

1. Scope Statement of Work (SOW) For the UPGRADE OF IAEA FLOORLANS (CONTRACT & BASIC SUPPLY AGREEMENT) 1.1 A 5 year contract with Managed Services for new network hardware from a CISCO Gold Certified Business Partner This is to establish a 5 year contract with a CISCO Gold Certified Business Partner to upgrade and maintain (45) with new CISCO hardware at the IAEA HQs and in the branch offices Seibersdorf and Monaco. The awarded business partner for this contract shall provide a package of Managed Services and shall include the following: 1) Planning the upgrade for all 2) Delivery of hardware/software 3) Installation Support and Training on new hardware 4) Capacity planning for network hardware in the (ports, memory/performance and Release upgrade of IOS as required) 5) A Service Level Agreement for reliability, performance, a fault tolerant connectivity and secured network (maintenance contract for the hardware and software 6) Documentation such as network charts and configuration management 7) Technology awareness Regular Presentation and Reports 1.2 A 5 year contract with a Basic Supply Agreement (BSA) for Network Capacity, Contingency & Recovery Services with a CISCO Gold Certified Business Partner (same as above) This is to request a BSA with a local CISCO Gold Certified Business Partner for a period of 5 years in order to provide the Agency with Network Capacity, Contingency and Continuity. This could be for: 1) Daily requirements based on a capacity plan 2) For Business continuity and Recovery Services 2. Major Objectives - Summary: 1) To establish a 5 year contract and Managed Services and a solid SLA with a CISCO Gold Certified Business Partner 2) To replace Nortel switches with new hardware from CISCO in all IAEA (at the end of the 7 year life-cycle) RFP 1498.2009 GM Page 1 of 13

3) To Standardize on a single vendor platform, the IAEA network hardware for a secured network with high performance and high availability, with a better Manageability and Operational end-to-end 4) To establish a BSA with a CISCO Gold Certified Business Partner for a period of 5 years to meet the IAEA business needs for Contingency & Continuity and Recovery Services for the IAEA network infrastructure 3. Applicable Documents/Background Information The Upgrade of the IAEA Network Core Backbone with new hardware with the latest technology from CISCO was completed in 2008. This installation has extended the value of the network throughout the entire IAEA IT-Infrastructure, and has provided an advanced technology for network switches in the core backbone with High Availability and High Performance. In 2009, new network hardware from CISCO is planned to be implemented for all centrally located servers and new installations, to replace Nortel with CISCO. The hardware has been purchased for these purposes earlier this year. The request for a Managed Service Contract is about to accomplish and to implement same technology and new hardware on all IAEA floors (). In order to do so, we will replace network hardware from Nortel (which has reached the end of its life cycle) and upgrade the entire IAEA network infrastructure with the new hardware from CISCO. This will protect the Agency s investment for new network hardware the next 5-7 years (the life cycle of hardware). This implementation is part of MTIT s Workplan 2009. For the decision to standardize on CISCO hardware in the network infrastructure pls. also see CONCLUSIONS OF THE 9 th IT COMMITTEE in 2008, held on Wednesday, 26 November 2008. Most documentation can be found in the INTERNET from IEEE Standard and CISCO home page for network switches http://www.cisco.com/en/us/products/hw/switches/index.html Catalyst 4500 modular based Ethernet chassis Industry Standard development. http://www.cisco.com/en/us/prod/collateral/switches/ps5718/ps4324/prod_presentati on0900aecd806f6316.pdf Current Austrian CISCO Gold Certified Business Partners, http://www.cisco.com/web/partners/tools/partnerlocator/mscp_ov.html 4. Firm requisites the contractor shall provide: 1) A 5 year contract with Managed Services and a business plan for replacing and upgrading the IAEA with new network hardware from CISCO. RFP 1498.2009 GM Page 2 of 13

This shall include technical planning, installation and maintenance of the network hardware and software 2) A BSA for a period of 5 years with a local CISCO Gold Certified Business Partner in order to provide Network Capacity, Contingency and Continuity Services. This shall cover the daily requirements based on a capacity plan and the Business requirements for Continuity and Recovery Services 3) OTC and the annual Costs of this contract 4) An SLA for the entire time-period (5 years) 5) The contractor shall provide the Agency with Technical planning for all buildings and location () for network connectivity, capacity, performance and access control to the Core Backbone a Standard setup for has been evaluated and implemented on two floors by MTIT in 2008 6) An Implementation Plan with weekly schedule and resources (staff) involved (full implementation shall not exceed 6 months) 7) Hands-on training in-house to IAEA staff on new hardware e.g. latest network technology and features in the switches to MTIT staff 8) Installation support with a standard set-up for switches, as defined by MTIT i.e. Configuring the IOS, setup the interfaces and routing, configuration of Access Control for Authentication and installation of layers 2-4 protection from attacks e.g. ARP, LAN, DHCP, MAC, DNS, Snooping and VLAN attacks 9). A business plan for contingency & capacity planning for one Floorlan port base; a base setup and a plan for expansion (details in the technical specs). 10) Business plan for a purchase-lease contract after 5 years and/or a plan to extend the contract for 5 more years negotiable. 11) Trade in agreement for Nortel hardware for each Nortel 470 switches and two Passport 8000 core backbone switches 5. SLA Maintenance contract shall include: 1) The contractor shall provide the Agency with Installation Support to replace Nortel switches with new Cisco hardware. This work has to be carried out in maintenance windows which are scheduled bi-weekly on Thursdays from 19:00 to 22:00 and on Saturdays from 08:00 to 20:00. The month September has a change freeze because of important Conferences taking place at the IAEA no interruption of services possible. Each installation shall require the contractor to provide with an acceptance paper; a standard list of check-points to review before the installation is handed over to the IAEA and considered to be operational. 2) The contractor shall provide network maintenance and repair of hardware, including the provision of new hardware (to replace the defective parts). RFP 1498.2009 GM Page 3 of 13

3) Stand-by spare parts and send-in and repair for defective hardware: There shall be spare parts available at the IAEA premises (two switches fully configured as standby ready for installation. Repair shall not take longer than 1 week. 4) 5x24 or 7x24 Service availability: All services under this contract shall be available to the IAEA on a 5 day, 24 hour basis (5x24); optional shall be offered as well, a 7 day, 24 hour basis (7x24) with send-in and repair. Technical support must be available within 1 hour response time if so required to analyze more complex problems. 5) Bi-Annual Service check of the current hardware and eventual upgrades necessary to be installed (new IOS or patches) shall be provided by the contractor. 6) Response-time to a service call shall be 2 hours or less from the time of the request to repair to the time of arrival in the VIC. 7) There shall be a bi-annual maintenance check arranged and done by the contractor to check the IOS, health check (error logs and statistics) 8) MTBF (Meantime Between Failures) shall be proposed by the contractor and guaranteed 6. Bill of Quantities One Time Costs (CONTRACT) The contractor is requested to provide with an OTC and running costs per year. The OTC shall include the initial costs to purchase the hardware and Managed Services including planning and full installation/setup of all switches and it s connectivity to the central backbone (CISCO 6500s). Basic Supply Agreement (BSA) For the BSA the contractor is requested to provide a service catalog which includes all the hardware, software and the installation of new devices thus needed to be installed as part of the capacity and continuity/recovery Service. Service Catalog The Contractor shall provide a CISCO Service Catalog for Network hardware and software for both, the Catalyst switches and routers family and the Network Security hardware/software with a bill for quantity as specified in the table below Hardware listed below is requested to be purchased (with OTCs) In addition a CISCO Service Catalog for network devices thus including devices below shall be provided by the contractor for BSA purposes Item Description Quantity RFP 1498.2009 GM Page 4 of 13

OTC One Time Costs (CONTRACT) 1 Supplying of switches Catalyst 4500s 40 1.1 WS-C4510 R Supervisory Card 5/6 10GE 40 X2-10GB-LX4 10GBASE-LX4 X2 Module 40 WS4548-GB- RJ45V PoE 802.3af 100/1000 Base 48 ports RJ45 40 WS4548-GB-RJ45 48-ports 100/1000 Base TRJ45r 200 PWR- C452800ACV 2800 ACV poer supply (Data and PoE) 80 GLC-LH-MM- SX SFPs/LC-SX fiber for gigabit connections to CBB 100 1.2 Supplying of Floorlan swicthes Catalyst 4503, 4506, 4507 are acceptable 10 1.3 Spare parts: Two set s requested BSA 1.1 Network Network Management Basic Supply Agreement (BSA) Service Catalog for BSA with Network Hardware and Software CISCO Catalyst 4500 Series CISCO Catalyst 6500 Series CISCO Catalyst 3750 Series CISCO Catalist 4948 Series CSICO Catalyst Routers Enterprise Network Management Products to Optimize Network and Application Perfromance CISCO 10GBASE X2 Modules Security ACS AIR-SC5.0-XP2K - PIDS Catalyst Integrated Security installation CISCO NAC Network Admission Control System Wireless AIR-WLC4404-100-K9 Wireless LAN Controller AIR-PWRINJ4 EK9-PR Cisco Access Points 1.2 Patch cables copper and fiber Copper CPC3312-07M003 Cat6e certified SYSTIMAX GS8E Gig Speed XL 3 meter 500 Fiber Certified SYSTIMAX LazrSPEED 550 SC/LC1 fiber patch 50/125, aquas, 3-7 meters 120 7. Requirements/Technical Specification RFP 1498.2009 GM Page 5 of 13

7.1. The CISCO switch hardware shall meet the following performance & throughput standards: Chassis: The Hardware description shall be based on Cisco Catalyst 4500-E Series; current IOS is 12.2.(40) SG 1) 802.3ab 1000Base-T ports for the devices 2) 802.3e 10 Gigabit Ethernet connection to the Core Backbone 3) 802.3z for 1000BASE-SX and 1000BASE-LX 4) As appropriate based on the amount of ports required 4506-E or 4510R-E shall be provided for each Floorlan as to the IAEA Standards 5) Supervisory Engine 5/6E for 1Gig or 10Gig uplink to the core backbone (start with 1 Gig, later upgrade to 10 Gig) 6) 2 Power supplies with 2800W ACV for redundancy and capacity 7) E-Chassis with up to 320Gbps backplane capacity 8) Number of supported 10/100/1000 Ethernet ports Standard 288 9) Max number of ports if so required/requested 384 7.2. Technical Requirements The System shall meet the following technical requirements: IEEE Compliance 1) 802.1q,ad for VLAN trunking and tagging 2) 802.1d,s VLAN Group Spanning Tree Protocol 3) 802.1w Rapid Spanning tree Protocol (RSTP 4) 802.3af for PoE (Power over Ethernet) 5) 802.1x for Security (access & authentication) 6) Layer 2-4 filtering for protection of network attacks 7) Layer2-4 Integrated QoS and traffic management layer2-4 to prioritize mission critical and time-sensitive traffic RFP 1498.2009 GM Page 6 of 13

7.3. Ports and interfaces: All shall be provided with CISCO 4510, 4506 or 4503 E series from 96 to 192 ports each which is the IAEA Standard for. Port based capacity planning for each Floorlan is requested, before the actual installation is carried out. Current ports available in the IAEA buildings would be approx: in the IAEA buildings local & remote Building Floolans Ports A Building floor A04 - A28 12 2160 B Building floor B04 B11 9 1580 F/G Buildings F-3 - F10 & G-3 G06 9 1436 Seibersdorf 5 512 Monaco 3 240 M-Building 11 528 T O T A L 49 6456 Capacity shall be + 20% + 1292 ports T O T A L 7748 1) 38 floors in the IAEA HQ Vienna avg 192 ports each; this shall increase to 240 2) 3 floors in Monaco avg 48 each 3) 5 floors in Seibersdorf avg 48 each 4) 11 floors in M-Building to 48 ports each 5) Current ports in total: 6456 6) For 2010 plus 20% capacity growth shall be 7748 ports 7) Copper Cable connectors and NICs are available and are according to the IAEA cable standards e.g. RJ-45 Cat6. 8) Fiber patch cables and GBIC for the 4500 switches are to be delivered as required 9) UPS for each Rack to accommodate the switch(s) is/are requested 8. Requirements for network integration: RFP 1498.2009 GM Page 7 of 13

1) Wireless support 2) All shall include wireless support integration to the current wireless topology is required e.g. ACS, Wireless CTL and into the overall network infrastructure (IP address management, VLANs, etc. 3) Backbone switch integration 4) All switches will have to be integrated into the current core backbone network technology e.g. by performance, by access control, IP VLANs and monitoring and control 5) Network Management & Control 6) To protect the current network management, full integration to monitoring tools is required. Eventually remote access for network support and maintenance shall be considered planned. 7) Client operation and security 8) The client OS shall match (to be compliant) with the network enhancements provided by the switches e.g. wireless, QoS, access control, multimedia settings for IP telephony etc. 10) Environmental Protection and Work Safety During the services performed at the IAEA s premises, the Contractor s staff shall observe all IAEA regulations regarding safety and security on-site. 11) Quality Assurance Acceptance testing The network hardware shall be factory tested prior to shipment. The System shall be manufactured, shipped and installed in accordance with the ISO 9000 quality assurance system or an equivalent quality assurance system. The Contractor shall document the compliance with this quality assurance system. The network hardware shall be manufactured and delivered in accordance with manufacturer s and Contractor s quality control system The System, prior to shipment, shall be tested for conformance of the System with manufacturer s performance specifications and the minimum requirements specified herein. The System, after installation, shall be tested by the Contractor together with the End-User to demonstrate that the performance meets the manufacturer s performance specifications and the minimum requirements specified herein as determined by the IAEA and the End-User. RFP 1498.2009 GM Page 8 of 13

The results of the testing of the System shall be documented by the Contractor in an acceptance protocol that shall be signed by the End-User. The IAEA staff will run some verification tests with the new hardware together with the contractor. Actual installation (replacement of old hardware) shall be carried out by the contractor. Standard procedure before installation: There will be several test-runs done OFFLINE in the development environment, before the network will be installed into the production environment. A quality check (health check) shall be carried out by the contractor on a yearly base (every 12 months) e.g. hardware and software Installation and Training: The contractor shall provide hands-on training about the new features of the network hardware for up to 4 network staff of the IAEA as a final step of an installation, before the network hardware is installed into production. This is intended as a check for the day-today operation and control of the new hardware 12) Marking The System shall have marking of the equipment name, model number and all safety markings in English language. 13) Packing The System, for the shipment by air to the End-User, shall be packed in accordance with international standards that are applicable for the shipment by air of this kind of equipment. All delivery is normally packet in boxes with special protection against damage. 14) Deliverables Data Items 14.1. The Contractor shall deliver the following data items: 1) Project Plan 2) Technical paper for a Standard setup and configuration of network switches 3) Business plan for port capacity and contingency to assure upgrades done as required to host all clients and to ensure error free operation 4) Technical Status Reports after an installation and/or repair 5) Final Report with documentation 6) Hand-over Report on AIV (Acceptance, Integration and Validation testing) RFP 1498.2009 GM Page 9 of 13

7) Training material 8) Presentation material 9) Workshop /training evaluation report. 10) Network charts of the network layer2 and layer3 (VLAN and routing tables) 11) Documentation for all 12) Software documentation on the IOS and design documents 13) Software micro code 14) Bi-annual Reports about network health (performance and uptime) 15) Bi-annual Review of technology and upgrades required for IOS e.g. technical but also security updates (patches) 16) Spare equipment for two floors, stored at the IAEA 14.2. Delivery of Project Tentative time schedule from July 2009 to March 2010 (update will be sent) 1) July 2009, Procurement to run the Tender 2) August/September 2009, MTIT to perform technical evaluation of the responses 3) Sept 2009, Procure and establish the contract 4) October 2009, Delivery of hardware and plan/prepare with the contractor for the migration 5) November 2009, PoC and Final testing and acceptance for roll-out of TRAINING for the NTS staff 6) November 2009, START roll-out (as the contract is in place - Implementation time shall not exceed 6 month) 7) November 2009 to Feb 2010 Migration of all floors in the IAEA HQs. Hardware for the remote offices Seibersdorf and Monaco will be prepared by the contractor in Vienna and shipped to the remote locations by the IAEA 8) March 2010, AIV testing Acceptance, Integration and Validation Testing and if so required Post Installations 9) April 2010, Mission accomplished Close project 15. Final Comments: 15.1 Please submit your Cost Proposal in accordance with the instructions of this RFP 1498.2009 GM and all its attachments especially follow and respond point by point the Sealed Bid Tender Cover letter Section 1a: Cost Proposal points 1 - to 13 and the requirements listed in the SOW. 1) Please separate your Cost Proposal in two parts; submit one detailed Cost Proposal each: RFP 1498.2009 GM Page 10 of 13

- for the requirements of the Contract. - for the requirements of the BSA. 15.2 Please confirm and submit the compliance matrix with your technical offer which should also follow the instructions of Section 1b: Technical Proposal Contents and that of the SOW. 15.3 Please sign the sample BSA and the BSA Conditions and return it with your Cost Proposal. RFP 1498.2009 GM Page 11 of 13

The contractor is requested to confirm the deliverables in the compliance matrix Item Description YES/NO OTC 1.) A 5 y contract 2.RUNNING Costs One Time Costs (C0NTRACT) Managed Services to plan and install network hardware for all IAEA floors Planning and installation (setup config) Replace Nortels by new CISCOs Documentation network charts, and configuration Management Capacity planning yearly Installation of updates IOS and new features Capacity & Contingency plannin for ports and capacity/perfromanceg Training on new hardware & software Maintenance costs per year For all network hardware An SLA contract as in Section 5. Supplying of switches Catalyst 3. 4500s for 49 1.1 WS-C4510 R Supervisory Card 5/6 10GE X2-10GB-LX4 10GBASE-LX4 X2 Module WS4548-GB-RJ45V PoE 802.3af 100/1000 Base 48 ports RJ45 WS4548-GB-RJ45 48-ports 100/1000 Base TRJ45r PWR-C452800ACV 2800 ACV poer supply (Data and PoE) GLC-LH-MM- SX SFPs/LC-SX fiber for gigabit connections to CBB 802.1q, 802.1d,s, 802.1W, 802.1af, 802.1x, IEE STANDARDS 802.3ab, 802.3e, 802.3z Supplying of Floorlan swicthes Catalyst 4503, 4. 4507 for 144 ports are acceptable 5. Spare parts: Two set s requested. One set 4510 and one set 4503 6. A 5 y BSA Network hardware Basic Supply Agreement (BSA) for CISCO hardware & Software Service Catalog pls. for: CISCO Catalyst 4500 Series RFP 1498.2009 GM Page 12 of 13

Network Management CISCO Catalyst 6500 Series CISCO Catalyst 3750 Series CISCO Catalist 4948 Series CSICO Catalyst Routers Enterprise Network Management Products to Optimize Network and Application Perfromance CISCO 10GBASE X2 Modules Network Security ACS AIR-SC5.0-XP2K - PIDS Catalyst Integrated Security installation CISCO NAC Network Admission Control System Wireless AIR-WLC4404-100-K9 Wireless LAN Controller AIR-PWRINJ4 EK9-PR Cisco Access Points Patch cables Copper Fiber Patch cables copper and fiber CPC3312-07M003 Cat6e certified SYSTIMAX GS8E Gig Speed XL 3 meter Certified SYSTIMAX LazrSPEED 550 SC/LC1 fiber patch 50/125, aquas, 3-7 meters RFP 1498.2009 GM Page 13 of 13