Laserfiche WebLink
Exibit A: City of San Leandro <br /> Firewall and Internet Upgrade <br /> February 9, 2016 <br /> Introduction <br /> The City of San Leandro is currently operating separate Internet connections at various locations with <br /> the main purpose of providing Internet access to those locations. The City would like to consolidate <br /> these separate Internet connections into a single 10Gig connection located at City Hall. The new 10Gig <br /> Internet connection will also operate with the BGP routing protocol for the sole purpose of failover to a <br /> secondary service provider(also running BGP)on a 100Mb link also at City Hall. BGP will provide <br /> active/standby failover as both service providers will share the same Internet IP addresses(BGP <br /> announced prefix(es))and the"secondary line"will not be usable when the primary is up. <br /> The City will purchase new firewalls for this connectivity,a primary ASA5585-X-SSP20 for the 10G link <br /> and an ASA5515-X for the 100Mb backup link. The configuration of these two firewalls will be manually <br /> synchronized. The main"inside"connection will be to City Hall networks(via a full 1Gig connection);the <br /> Police Department will receive its Internet via a new DMZ(also a full 1Gig connection);and 3 other <br /> locations(2 wireless service locations and"library public")will receive internet via new DMZs(full 1Gig); <br /> and 3 existing DMZs will be trunked from a 1Gig DMZ. The 5585-X-SSP20 has a maximum total <br /> throughput of 10G with"real-world throughput"at 5G. Failover between service providers and <br /> 5585/5515 will be automatic for City Hall and Police Department(as both are capable of a dynamic <br /> routing protocol,expected EIGRP). Failover between service providers and 5585/5515 for all other <br /> DMZs shall be done as a manual process. <br /> This statement of work shall provide professional services to the City for the implementation of the new <br /> firewalls, planning and executing of a migration to the new firewall/Internet design,and an onsite <br /> production cut-over. <br /> ExtraTeam is pleased to provide the following proposal for professional services. <br /> Project Proposal <br /> All tasks in the below sections(with except of cutover) shall be performed remotely using collaborative <br /> technology(phone and web conferencing,etc)during standard business hours. There is a single cutover <br /> event for the new firewalls and Internet. ExtraTeam will provide an onsite engineer for the cutover <br /> event which is assumed during an afterhours time period. Day-1 post cutover support shall be <br /> performed remotely. <br /> ExtraTeam will be responsible for the following tasks and deliverables associated with this project. <br /> 2 <br />