Академический Документы
Профессиональный Документы
Культура Документы
Prepared for
For David Wild, BSF Technical Delivery Gordon McPhail, Group Procurement Director
Prepared by: Lance Hardiman Senior Design Engineer (Aruba Certified) Deep Toor Agilisys Account Director Darren Brownfield Service Director
Contents
Management Summary 3
.21
23
Confidential
Page 2
03/03/2010
Management Summary
Vanix would like to thank Agilisys for the invitation to put forward this proposal for an ICT infrastructure within the schools nominated under the Sandwell BSF program. This document provides Agilisys with an overview for Wireless data network with an option of comprehensive service wrap for professional services, pro active support and maintenance.
Vanixs have worked with Agilisys over the last four years on a number of projects such as the deployment of Wireless and Voice at General Healthcare Group, Wireless deployment in Cumbria Council and deployment of the some of the core Infrastructure around the Smartworking project as HFBP which involved an element of Wireless, coupled with a security audit to bring the council in line with the new compliance regulations set out by the Government.
With regards to BSF, the technical selection of manufacturer and solution design has been built around three fundamental principles of simplification, reliability and network performance to ensure operational efficiency and the lowest possible Total Cost of Ownership. The two Vendors Vanix are proposing for the BSF project are Cisco for the LAN and Aruba for the Wireless. We understand that Agilisys has narrowed down their selection of Vendors for the LAN and we wish to put forward the Cisco pricing we are able to offer through leveraging our Telco relationships with BT, who are Ciscos largest partner in the UK. We
have the ability to offer full range of services around the Cisco element but also understand that Agilisys have the in-house capability and would look to back fill this as and when required.
Vanixs experience of deploying Aruba technology in the Education Sector is extensive and as successful projects such as Hammersmith & West London College, Cambridge University and Stephenson College as well as numerous schools have proved our ability in this sector. Our methodical and thorough approach to implementation mitigates the project risk and our capabilities have helped position us as one of the market leading network integrators. Our engineering team have a combined 20 years of experience in the Wireless market and we have access to the highest number of Aruba engineers in the country.
Confidential
Page 3
03/03/2010
From a Support perspective Vanix are able to offer Agilisys not only a comprehensive maintenance contract but also proactive Network Monitoring and Configuration collection service should this be required. This will enable Agilisys to identify potential issues early, before they become a threat to service. Importantly all Vanix services proposed are delivered entirely in house with no reliance on sub contractors for engineering resource or spares.
We would also welcome the opportunity to discuss and position a solution that drives responsibility and true Service Level Agreement with the comfort to meet the financial and technical constraint and liabilities during the lifecycle of the contract. Vanix understand the need to be a stakeholder to Agilisys to ensure not only customer satisfaction but also customer delight!
As Agilisys have already designed the Cisco network, although we will supply pricing for this network, the remainder of this proposal will focus on the Wireless Network. We strongly feel that this proposal offers Agilisys not only the most compelling technical solution but also excellent commercial value, particularly when analysed over the lifetime of the network with so called soft costs such as power costs and management time included. Moreover we are confident that Vanix are the right type of organisation to give Agilisys the confidence in the delivery of a high profile project of this nature and have demonstrated this capability already within a number of Key Agilisys accounts.
Confidential
Page 4
03/03/2010
The proposed Aruba wireless service design provides a cost effective solution to wireless enablement, for current wireless devices and including readiness for the inevitable influx of 802.11n (high speed WiFi) compliant devices. As handheld
devices become smaller and smaller it is becoming increasingly impossible to allocate space for wired connections, so provision for WiFi devices, both now and future, is no longer an optional consideration.
Security, segmentation and network privilege control of multiple wireless client groups (staff, students, guests) is a strong factor in the selection of the Aruba product as the system boasts the industrys only integral, award winning statefull firewall that provides unprecedented control.
Other strong features that make Aruba the centralised wireless market leader and the preferred choice of Vanix are the automated radio management features, real time heat map ability and integrated wireless intrusion protection and location tracking server functions.
Furthermore the Aruba mobility controller system has compelling scalability options, making the decision of how much wireless to deploy or what future wireless requirements are likely, far easier to manage.
Arubas latest dual radio 802.11n (high throughput) wireless APs (AP105s) are proposed by Vanix due to their aesthetic design and integrated aerial technology.
Confidential
Page 5
03/03/2010
Vanix strongly believe that given the ever increasing minimisation of mobile devices, that wireless as an access method will only grow in uptake. Given that 802.11n is the latest wireless access speed and was finally ratified recently, Vanix see the AP105 as a great fit for the modern campus.
Network Integration
The proposed Aruba Mobility System will be configured to integrate with the network as an overlay. In this manner the Aruba APs will reside within the
network VLAN / IP provision at the edge and build generic router encapsulation (GRE) tunnels back to the master Aruba controller, physically located within the network core, as if they were directly connected. This provides an extremely cost effective and low intrusion (low risk) implementation method with zero down time to the wired network and network services/applications.
Confidential
Page 6
03/03/2010
The Aruba controllers are configured to control the Aruba APs and to assign specific network attributes to the associated 802.11 clients as per their configuration.
These client / device specific network attributes include connectivity such as VLAN and IP assignments, authentication requirements, encryption settings as well as statefull firewall policies. In this manner security requirements can be set per
user identity (user role), as against per user physical connection point.
Manageability of all site based Aruba controllers would be via a java based (GUI) web page or alternatively via the command line if desirable.
Scalability
Each of the Vanix proposed Aruba 3000 wireless controllers support a maximum AP count of 128 operational units. This gives the Aruba 3000 its impressive
ability to support up to 128,000 active firewall sessions and an encrypted traffic throughput of 4Gbps.
Further to the above scalability figure, an additional controller from the Aruba portfolio can be added along side and be configured to join the mobility system as a synchronised local unit, thus maintaining the ability to have one single point of configuration, monitoring and management control, regardless of deployment size, or complexity.
Security
The Aruba identity-based security solution dramatically improves network security by introducing the concept unique user based credentials which cater for authentication mechanisms, VLAN assignment, firewall rules and user rights on the network while also providing identity-based auditing of activity.
Confidential
Page 7
03/03/2010
Single Point of Security Control: With the Aruba mobility solution having a single point of security control, this prevents against address spoofing attacks by combining the point of encryption, authentication, and access control within the Aruba controller. Without a single point of security control, one device normally does encryption, another device does authentication, and an external firewall does access control. This makes the firewall vulnerable to IP address spoofing, since the firewall is not identity-aware. In an Aruba system, firewall policies are applied to users, not to IP addresses. An address spoofing attack in an Aruba system will not result in the bypassing of any firewall policies.
Universal Authentication: Authentication is how the system learns user or device identity. Aruba mobility controllers support 802.1x authentication, VPN
authentication, and captive portal authentication. Most systems support only a single protocol at a time. The Aruba system supports Universal Authentication, making all three available at the same time. In this way, clients connecting to a wireless SSID can use whatever authentication protocol for which they are configured, meaning that no client is locked out of the network.
Client Authentication: The Vanix proposal is based on the use of the IEEE's ratified 802.1x Port Based Network Access Control standard for Wireless Security. An Aruba Mobility System fully supports 802.1x security with client accounts either being held on the Aruba Mobility Controller or by integrating with an external Remote Authentication Dial In User Service (RADIUS) server and subsequent backend Active Directory (AD) infrastructure.
Confidential
Page 8
03/03/2010
The 802.1x standard uses the Extensible Authentication Protocol (EAP) as the protocol or "wrapper" for exchanging authentication information. An Aruba mobility system supports a multitude of EAP authentication methods within the EAP framework. Two of the most commonly deployed are protected EAP (EAPPEAP) as well as EAP Transport Level Security (EAP-TLS) dependant on the level of client authentication required and whether client-side certificates are required.
Wireless clients would be configured for 802.1x media access control with AES encryption. Any clients that dont have 802.1x ability (phones for example)
would be configured with the highest level of authentication and encryption that the client supports. This would most likely be a WPA2-PSK (possibly WPA-PSK) pre shared key to ensure equivalent levels of encryption to that used via 802.1x, only with the use of a passphrase for client authentication in place of a username/password or client side certificate.
Network
Access
Control:
Arubas
Extended
Services
Interface
is
fully
compatible with Microsoft NAP and will automatically correlate the results of NAP with policies set up for uses. This correlation allows clients to be whitelisted or blacklisted based on their security posture and whether it is fully up to date. Together with 802.1x authentication, AES and a fully statefull firewall which offers per user policies, this combines to provide a very robust and manageable security architecture. Aruba is soon to receive Federal information processing standard four (FIPS4) and is approved for manual-Y in the UK.
Captive Portal Guest Access: As guest wireless Internet access is a common wireless mobility requirement, Vanix have will if required, configure the system with a level of guest WLAN access via the use of a separate Service Set Identifier (SSID) for this service based on a web based captive portal internal to the Aruba Mobility System for authentication with restricted access to the minimum of desired resources (e.g. the internet), controlled via the statefull firewall module.
Time of day and/or bandwidth restrictions can be applied to individual users or user groups to control levels of access. These settings can be administered
across all WLAN users (staff / contractors / guests) within the Aruba mobility system. Multiple captive portal configurations can be configured, should the need arise.
Confidential
Page 9
03/03/2010
Role-based Access Control: Role-based access control identifies who the user or device is, based on either an authentication method such as 802.1x, VPN, captive portal or via a user-derived process such as MAC address authentication or hardware type. During this process, the Aruba controller learns the group, or role, of a user or device.
This information allows appropriate access rights and policies to be applied to that session. This practice allows multiple classes of users to share the same network infrastructure, with independent access control, thus eliminating excess privilege normally granted by "one size fits all" fixed networks.
High-Speed
Encryption:
Encryption
is
critical
component
of
wireless
networks, and can greatly enhance security on wired networks as well. Aruba supports a broad array of encryption types, including AES, TKIP, and WEP for
wireless; AES-CBC, Triple-DES, and MPPE for VPN; AES-CBC-256 through the xSec protocol for wired or wireless encryption, and SSL for system management and captive portal.
Hardware-based
Processing:
Assures
the
highest
possible
level
of
performance. Aruba controllers have separate control, data, and encryption processors to provide scalability and performance. Firewall rules are processed by special-purpose packet processing hardware in each mobility controller, resulting in no loss of throughput even when complex rule sets are in use.
Automatic Client Blacklisting: Permits the administrator to automatically blacklist - or block from all network access - any client that violates specific firewall rules even a single time. This is particularly useful when single-purpose devices such as voice over IP handsets are used. If the Aruba controller detects a voice handset attempting to conduct database queries or file server browsing, it is likely that the device credentials have been compromised by an intruder. The mobility controller, using automatic client blacklisting, will immediately disconnect the device from the network and generate alert messages to the administrator.
Confidential
Page 10
03/03/2010
moving around all affect the wireless environment and hence the coverage of any wireless system. It is therefore impossible to set any system to its optimum, as the environment may very well change in the next day, hour or even few minutes. The result is patchy coverage and poor, inconsistent performance. Arubas system, due to its centralised nature, allows all of the access points to intelligently and continuously adapt their power and channel settings to ensure optimal settings in real time . An in-built floor plan in the system allows a real time heat map showing the actual RF coverage throughout the site.
Real Time heat-map showing actual RF coverage The net result is consistent coverage and performance.
Support for multiple users; A key requirement within schools is the ability to handle lots of users suddenly typically, a class or multiple classes of students logging in at the same time. In many wireless systems, the first few users are able to connect perfectly well, but, by downloading their image, they hog the
Confidential
Page 11
03/03/2010
available
bandwidth
with
the
result
that
subsequent
users
suffer
poor
performance. Arubas system uniquely allows the intelligent allocation of bandwidth to devices to ensure that every user has fair access to the network, resulting in consistent performance for all, regardless of the number of users attaching, how they connect and when.
Load
Balancing;
The
centralised
architecture
ensures
that
the
Mobility
Controller(s) have a holistic view of the wireless network and know where users are. As such, the Mobility Controller can load-balance devices across Access Points to ensure that they experience the maximum amount of coverage and hence bandwidth available. This mechanism ensures that no single AP is congested, whilst others nearby are comparatively idle. This results in greater overall network performance and throughput and a much improved user experience.
Robustness; Should an Access Point fail, the Aruba System can instruct the surrounding APs to increase their coverage to provide a wireless signal into the failed AP area. Users connected to that failed AP may not even know that they have been roamed onto a new AP. Similarly, if a controller fails (unlikely), providing a second controller has been provided, the entire system will seamlessly run on the remaining system.
A robust and sophisticated suite of system software that powers the mobile edge, ArubaOS coordinates all mobile edge operations with advanced capabilities that include seamless mobility, identity based security, non-disruptive integration into existing networks, class mobile VoIP open capabilities, APIs, adaptive radio management, centralised
enterprise
resiliency,
end-to-end
QoS
and
management. ArubaOS is a fully modular software that runs on all Aruba mobility controllers and controlled access points, allowing them to work seamlessly in delivering services to users on the mobile edge.
Confidential
Page 12
03/03/2010
The base feature set of ArubaOS comes standard with every mobility controller and includes sophisticated authentication and encryption, seamless mobility with fast roaming, RF management and analysis tools, centralised configuration, location tracking and more. ArubaOS gives administrators a single point of control from which to locate and shut down rogue APs, identify and thwart malicious attacks and impersonations, load balance traffic, detect coverage holes and interference and create statefull role-based security policies that follow individuals as they move across the mobile edge. ArubaOS is entirely modular, with particular emphasis on reliability features such as automatic process restarts to minimise the impact of any software failures.
This software module is included in this proposal, as it delivers user and group policy enforcement through an integrated ICSA-certified statefull firewall. Security policies can be centrally defined and enforced on a per-user or per-user-group basis, following users as they move. Policies are enforced dynamically, taking into account a variety of metrics such as user location, time-of-day, device type, authentication method, bandwidth restriction requirements and others.
The Aruba mobility controllers have the ability, via this software module, to provide statefull firewall access control of user session data and connectivity.
Unlike simple Access Control Lists (ACLs), a statefull firewall tracks upper-layer flows and ensures that unauthorised traffic cannot bypass access control. For example, a packet claiming to be part of an established Telnet session would be blocked unless there was an actual established session.
The Aruba Networks internally-developed firewall has been certified by ICSA Labs under the Corporate Version 4.0 criteria. ICSA's rigorous certification program for firewalls is the recognized benchmark by which all network firewalls are judged.
Furthermore the deployment of the Policy Enforcement Firewall Module enables network administrators to take better control of users accessing the wireless network via flexible policy creation. Firewall policies can be constructed based on identity, source and destination of traffic, service type, time of day and even physical location. Policy actions can include permit, drop, redirect to external
Confidential
Page 13
03/03/2010
devices or tunnels, logging, or QoS actions such as setting 802.1p or DiffServ bits and placing traffic into high or low queues.
Confidential
Page 14
03/03/2010
Vanix is rapidly becoming the IT and communications solutions provider of choice for a growing number of businesses. We believe that the following key attributes will enable us to remain at the forefront of the market:
Unity: Vanix offers its customers a complete, unified solution, encompassing consultancy, project management, system installation and ongoing maintenance support. This approach ensures clear accountability and enables us to provide an ongoing service level tailored to the particular needs of each individual client.
Customer Care: We work with clients to gain an intimate knowledge and understanding of their business needs and strive to provide the highest possible standard of pre and post sales and installation care.
Independence: As an independent solutions provider, Vanix is best placed to offer truly bespoke communications and IT solutions, developed to meet a clients exact business needs.
Requirements Scope
Vanix support services will extend the following benefits:
Ongoing manufacturer Software updates, allowing you to efficiently evolve your Telephony system infrastructure to address the needs of an ever-changing business environment
Rapid technical problem resolution with 24-hour access to a team of experienced technical engineers to help resolve your telephony problems.
Confidential
Page 15
03/03/2010
Advance hardware replacement, to help reduce the risk of system downtime with the option of an onsite engineer to install replacement parts at your site
Advanced replacement of hardware parts within agreed service levels An on-site engineer to facilitate hardware replacement 24x7 access to the Vanix Technical Assistance Centre (TAC) Software upgrades, updates, maintenance releases and bug fixes Software Application upgrades and updates Blanket Maintenance
Vanix Logistics
Maintenance Stock
Vanix maintenance services are delivered throughout the UK, including the Channel Islands, the Isle of Man and Northern Ireland and also extends into Europe for a growing number of customers.
The focal point of contact for these customers is through the 24x7 TAC based in the West Midlands. Arrangements for maintenance stock are under close management to ensure the correct ratio of stock to equipment covered. Stock
rotation and periodic maintenance is carried out to ensure the spares held are serviceable and fully functional by our various 3rd party providers.
Stock location within the store to ensure rapid access and deployment Stock allocation, tracking what equipment has been deployed and where Model and serial numbers of all stock to help ensure appropriate stock is available
Quantities of all stock for use in ensuring the correct ratio of stock to equipment covered this varies with the nature of the equipment covered.
Through our partnerships we can obtain advanced replacement of parts direct from the manufacturer on a next business day basis. This process is facilitated to ensure that adequate spares are always held, maintained and replenished to facilitate our in-house maintenance support service and that of our 3rd party providers.
Confidential
Page 16
03/03/2010
Standard Engineer
Vanix recognises the need to provide a quick response to any incident or situation requiring support. To satisfy that need, Standard Engineers are on hand to capture the necessary information to enable the provision of a resolution. First line support can be provided by the engineers with the aim of getting a customers service restored. Engineers are often required to perform initial analysis and assessment of a problem so they are fully trained in how to do this for a large number of scenarios. Collecting the right information about a problem or fault also enables a smooth escalation to a Senior Engineer for more complex issues. Escalating these issues allows a more effective resolution and allows the first line support service to continue providing a quick service to all clients. Standard Engineers have years of experience with a broad range of products, and are certified in certain telephony and IT products where necessary.
Senior Engineer
Vanix Senior Engineers are qualified in specific products to enable them to provide a good second line support service. The training for those qualifications enables them to resolve more complex issues which would normally require escalation to a manufacturer. By removing this need, Vanix can provide a more responsive and thorough service to all clients, whilst still having a further escalation point if required. In addition to support tasks, Senior Engineers carry out the installation of systems for clients at both the pre-configuration and the on site commission stages. Senior Engineers are also able to provide user training for customers to ensure they get maximum benefit from their investment. In the event of further assistance being required, Engineers can rely on the backup of both manufacturers and Vanix Consultant Engineers.
Consultant Engineer
Vanix employs Consultant Engineers to provide a first class service to its clients. They are able to work throughout all stages of a project or task, be it support, installation, pre-sales or advanced configuration. Consultant Engineers are typically qualified to high standards and are certified in various products.
Confidential
Page 17
03/03/2010
Consultants also have extensive experience working in their field in both their current and previous roles.
They bring with them a wealth of experience to advanced levels in all aspects of a project and support, working from small schools to large enterprises. Consultants are also responsible for the adoption of new technology within the business and are constantly updating their knowledge of products in both the IT and Telephony industries. Consultant Engineers are proficient in the design and implementation of systems and services to customers, through building good relationships with clients on both commercial and technical levels.
The Vanix portfolio provides a range of support services to protect your network during its working lifetime. These services provide you with software updates and upgrades, replacement of hardware parts and technical support.
Access to the Vanix Technical Assistance Centre (TAC) 24 hours a day, 365 days a year
Rapid escalation into manufacturer to expedite call resolution Access to Software updates major version upgrades, minor releases, maintenance releases and bug fixes
Replacement of hardware parts with the option of an on-site engineer. IOS/Software Support
A high percentage of problems encountered with networks are often software related, whether that is IOS software issues, maintenance releases or bug-related etc. Break-fix support agreements do not cater for this event, resulting in complex escalation procedures through suppliers and distributors in an attempt to get the problem resolved. It is on these occasions that the value of our
arrangements with our manufacturers and the additional features that this agreement covers are realised.
Confidential
Page 18
03/03/2010
The Vanix TAC provides e-mail and telephone access and support for network related issues 24 hours a day, 365 days a year. The response given would be in line with the equipment detailed within the agreement for general network issues. The service would operate within the Service Level Agreement terms for coverage and response times.
Features: Access to highly trained and experienced engineers All calls have technical escalation to highly qualified and experienced consultants Involvement of technology and product specialists Response to calls within agreed SLAs All support backed up by comprehensive agreements directly with manufacturers and georgraphically placed 3rd party providers
Benefits:
Ensures the very best technical specialists both at Vanix and within the manufacturers back your own support team.
Provides rapid solutions to technical problems that can take less experienced staff a great deal of time to resolve.
Gives access through to manufacturers at a high technical level ensuring speedy provision of quality technical information on existing bugs, bug reporting and queries regarding technical specification and compatibility of their devices.
Provides access to product and technology specialists who would not be cost effective to maintain in-house.
Levels of Cover:
Vanix are able to provide a range of support options and bespoke contracts. These range from 24/7/365 2hr on site response through to back filling in-house engineers with Next Business Day Support services.
Confidential
Page 19
03/03/2010
Highly trained onsite field engineers provide: Accurate and faster advance network parts installation Improved network staff readiness and skill levels Reduced staffing requirements Support for geographically diverse networks
Blanket Maintenance
Blanket maintenance contracts allow the highest levels of flexibility for our customers, providing the ability to experience dramatic network growth and change at the lowest possible cost, frequently only requiring the initial capital expenditure for the product with free support provided through the support thumbprint. This service provision can reduce management overhead in the
frequently unnecessary administration required for support contract, reduce the frequency of financial invoices and fluctuations and also ensure that support is available on the same day product is shipped.
Under a Blanket Cover Maintenance contract all new qualifying purchases made through Vanix within the contract period can be automatically included within the proposed maintenance contract for the duration of each annual contracted period.
This bespoke approach allows our customer the largest degree of flexibility and over the course of longer contracts the face of support agreements can evolve to give a best fit, best cost approach for the customer.
Confidential
Page 20
03/03/2010
Our rapid growth is attributable to both technical excellence and a continual focus on good customer service and a long stranding commitment to our strategic partners. Importantly our employee retention since our inception is over 90%. Our flat management structure enables Vanix to be an approachable, dynamic and flexible organisation with an easy to do business attitude. These values are reflected throughout our employees and are demonstrated on a daily basis with our interaction with our customers.
Technology Focus:
As a Specialist Network Integrator Vanix has proven ability to translate leading edge IP technologies in the infrastructure, convergence and security arenas into practical solutions and services that meet real business needs for our customers. We are a consultative led business and base our proposed solutions on listening intently to our customers requirements.
Datacentre
Network
Infrastructure
high
performance
converged
networks for the LAN Mobility Secure Wireless Networking Network Security Unified Threat Management Content Delivery Application acceleration and content switching Intelligent Storage SAN, de-duplication, back up & recovery Wide Area Network connectivity services for Voice and data IP Telephony
Vanixs ethos is to develop long term strategic partnerships with networking vendors whom we identify as best of breed. Through these technology partnerships and a sound understanding of our customers business needs Vanix
Confidential
Page 21
03/03/2010
can build wider converged solutions in the technology areas of IP Telephony, WLAN and Network Security.
Vendor
Accredited
Engineers
Technology
Select Reseller
VoIP
Platinum Partner
LAN infrastructure
Select Partner
FW/IPVPN
Authorised Partner
All Areas
Gold Partner
Vanix holds a strong belief in delivering best of breed technology and as such fosters strong strategic relationships with vendors whom we identify as best of breed market leaders. We invest heavily in these relationships from both a technical and commercial perspective to ensure that we can deliver and support their solutions expertly.
Confidential
Page 22
03/03/2010
Wireless Infrastrucutre for 100AP's 3600-64 LIC-32-AP LIC-4-AP LIC-PEFNG-128AP AP-105 AP-105-MNT-C Aruba 3600 Controller 64 AP Support Access Point License (32 Access Point License) Access Point License (4 Access Point License) Policy Enforcement Firewall Module License (128 AP's) Aruba 105 Wireless Access Point (Dual Radio). Aruba 105 Wireless Access Point Ceiling Mounting Kit. 1 1 1 1 100 1 7,442.54 1,028.74 135.36 3,248.64 274.39 5.92 Sub Total Professional Services VAN_INS VAN_INS VAN_INS Pre-configuration, deployment, testing 1 750.00 Install in hours, Backbone Network Integration, and Authentication Server Integration as sistance 2 750.00 Design Consultancy including Documentation 1 750.00 Sub Total Vendor SW Subs SILVER SUPPORT 5 YEAR CONTRACT Mon Fri business hours 9am-5pm ex cl. Bank Holidays Next Business Day engineer on site with hardware parts replacement TAC service via telephone or email Access to Full software updates including major upgrades, security updates, patc hes and fixes ** Basic Support Option as been provided, Please note AP's are not incluled at present as they come with a lifetime warranty 750.00 1,500.00 750.00 3,000 VANIX Support 7,442.54 1,028.74 135.36 3,248.64 27,438.60 5.92 39,299.80
5 YEARS
6,306.00
7,236
Cisco LAN Infrastrucutre (Pricing via BT) WS-C2960G-48TC-L GLC-SX-MM= PD-7024G/AC/M WS-C3750G-48TS-E WS-C3750G-12S-E GLC-SX-MM= GLC-T= ASA5520-BUN-K9 Catalyst 2960 48 10/100/1000, 4 T/SFP LAN Base Image GE SFP LC connector SX transceiver PowerDsine 7024 Managed 24 port HiPoE 10/100/1000 Catalyst 3750 48 10/100/1000T + 4 SFP + IP Services Image Catalyst 3750 12 SFP + IP Services Image GE SFP LC connector SX transceiver 1000BASE-T SFP ASA 5520 Appliance with SW, HA, 4GE+1FE, 3DES/AES 40 48 6 2 2 12 6 2 2,122.29 175.43 825.30 8,294.54 4,554.30 175.43 144.43 3,439.81 Sub Total ** Please note Profess ional Services are subjected to further to discussion with Agilisys as there is an understanding of Agilisys in-house expertise 84,891.66 8,420.83 4,951.80 16,589.08 9,108.60 2,105.21 866.57 6,879.62 133,813.37
Confidential
y revileD dn a TA V f o evis ulcxE er a s ecir P l A ,s noit au tculf et ar eg na hcxe ot tcej bus si gnici rP .EO &E .de hsilba tse si tn e mee rg a k row marf a emit hc us litn u ro eussi fo et ad mo rf sya d 4 1 rof dilav si et ou q e vob a eht ,' snoiti dn oC & s mreT ' s 'otip m A rep sA .s re enig ne de tide rcc a d na dev orpp a ro dn ev yb tu o deir ra c e ra kr ow t ro ppu S dna n oi ta ru gi fn oC ,n oitalla tsnI ,g ninia rT llA :s mr eT
Page 24 03/03/2010
Vanix have a host of references and a proven history of deploying and supporting Wireless networks in the education, public sector and corporate markets. A selection are listed below, we can provide reference details for all on request.
General Healthcare Group 4 Thameside Centre Kew Bridge Road Brentford Middlesex TW8 0HF
Vanix are currently contracted to GHG via Agilisys to role out the data and voice solution across 60 Hospitals. Vanix support the network in house and offer a 4hr SLA on life critical services. Vanix deploy and support Aruba, Mitel and Extreme within the GHG network
Vanix have deployed a Wireless solution across a number of the council buildings with Aruba. Vanix have also undertake a consultancy project to make the council compliant around new Government regulations around connectivity. The project also address how the council can start to work more efficiently with the council workers
Eric Ascot Project Manager 0845 450 1131 Eric.Arsicot@hfbp.co.uk Other Selected References
Ealing Hammersmith and West London College Gliddon Road W14 9BL Martin King IT Manager martin.king@wlc.ac.uk 0207 565 1230
In 2008 Vanix completed the roll out of Extreme 8810 core switches at the Colleges four sites (Hammersmith, Ealing, Acton, Barons Court) to better support
Confidential
Page 26
03/03/2010
the Colleges burgeoning use of learning services through IT. Each switch runs Extremes market leading EAPS protocol so that full voice-grade resiliency across the dispersed campus is achieved. In 2009 Vanix went on to implement 802.11n wireless services throughout the college using Aruba Networks secure WLAN technology. Both the LAN and the WLAN are supported by Vanix with a 4hr onsite response support package.
University of London Computer Centre Senate House Malet Street London WC1E 7HU Colin Love Network Manager Colin.love@ulcc.co.uk 02076921304
The University of London Computer Centre are a long term customer of Vanix from an initial hot spot wireless deployment in 2006. Since then the Aruba wireless network has grown in size and importance to the University and now consists of over 200 Access Points. Following the success of the Wireless project Vanix were then awarded in open tender the contract to upgrade and support the Universities core networking infrastructure Firewalling and Server Load Balancing. and, more recently, the Core
Confidential
Page 27
03/03/2010
Stephenson College Thornborough Road Coalville Leicestershire LE673TN Fraser Wright IT Manager fraserw@stephensoncoll.ac.uk 01530 519000 (115)
Stephenson College invited Vanix to expand the Extreme Network infrastructure following an initial deployment with a different supplier. The Stephenson College network consists of Extreme Black Diamond 8810s in the core and Summit X450s at the network edge. Stephenson have also deployed Mitel IP Telephony using 3300 MXe and CX controllers. Vanix provide full support services for the IP Telephony estate including regular health-checks and engineering assistance with the Extreme network on an on-demand basis.
Confidential
Page 28
03/03/2010
Camarthenshire College (or Colegsirgar) selected Vanix in open tender for the upgrade of wired and wireless ICT infrastructure. The refresh program that is ongoing incorporates the implementation of a distribution switching layer (based on Extreme Summit X450as), the integration and possible upgrade of the Extreme core switches and the eventual replacement of the network edge. Wireless networking with Aruba (approximately 100 APs) has also been deployed with dual Aruba 3400 controllers.
Other
Education
References
where
Vanix
have
deployed
Core
Confidential
Page 29
03/03/2010
Confidential
Page 30
03/03/2010