19ML2020C0002: IRMDedicated VNET 2nd Circuit 70Mbps extension for 6 months

Requiring Activity: Extending Internet Service Provider contract.

NT VNET Specifications and Requirements

This internet circuit shall be high-end, professional grade service that differs from the residential, dial up service. NT requires dedicated (not shared or bundled) Internet Bandwidth, 24/7, “always-on” with unlimited usage. Fiber optic, terrestrial connectivity is preferred. The local ISP access circuit to the Post must meet the following specifications/requirements for connectivity.

1. A /28 subnet static Public IP addresses for VPN equipment, network mask, and default gateway IP address.


2. ISP interface connectors: LC fiber connector (MM-multimode) – Gigabit interface


3. ISP availability: "Always on"


4. ISP connection: IPs must NOT repeat and NOT use Network Address Translation (NAT).


5. ISP must permit all IP protocols (including but not limited to ICMP, UDP, TCP, and IPSEC) to transit without filters or proxies. Unfiltered access to the Internet is required without ISP firewall blocking or stateful inspection.


6. ISP must permit installation of Customer VPN encryption devices on circuit.


7. ISP must permit ping and trace route traffic from 169.252.0.0/16 and 169.253.0.0/16 to the ISP connection (LC fiber Gigabit MM router interface which terminates Customer VPN encryption device).


8. High quality performance, the following parameters in a vendor’s Service Level Agreement (SLA) should be used:
   
   
   
   1. Packet Loss
      
   2. Availability of 99.9%.
   
   
   
   


9. If multiple entry points and/or LEC providers are available to your facility, ensure that the ISP circuit is diverse from the DTS-PO circuit. If you are not certain of the path of your DTS-PO circuit, contact DoS DTS-PO Liaison, Marcellus Davis, davismd1@state.gov.


10. Must not have ZTE, Huawei, Xiaomi and affiliated branded products in use on the internet connection. Post may not enter contract (or extend or renew contract) with an entity that uses above mentioned equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. When in discussions to procure a circuit, please query the ISP about what network switching/connectivity equipment they use in their infrastructure, and if there is an option to use a path without the equipment mentioned above.


11. Note: all reporting questions or concerns regarding this subject should be directed to askISSO@state.gov using “STE, Huawei and Xiaomi” in the subject line to ensure the request is routed for expeditious resolution.

If these standards of performance above are not available locally, please contact NT/DTS-PO Liaison to discuss the requirements.