The Vendor is required to provide carrier grade network address translation (CGNAT) is a large-scale NAT that translates private IPv4addresses into public IPv4addresses.
- CGNAT employs network address and port translation methods to aggregate multiple private IPv4addresses into fewer public IPv4addresses.
- The solution will replace existing hardware and software with a new redundant system placed in a high availability configuration between Otto Street and Four Corners buildings.
- Solution Requirements:
• Physical appliance platform
• Redundant DC Power Supplies
• Minimum of 40Gbps system throughput; Scalable to 100Gbps
• On-premise redundant solution setup as an HA pair in separate physical locations
• Supports up to 10 million NAT sessions
• Provide security defenses against threats such as Distributed Denial of Service (DDoS) attacks targeting CGNAT pools
• Subscriber session controls ensure fair use and quotas of NAT resources
• Full support for Large Scale NAT444
• IPv6 capable; Dual-Stack native IPv6, routable IPv4 and network address translated IPv4
• Application layer gateway to ensure NAT is transparent to applications
• Centralized Management of devices with Graphical User Interface
• Must support SNMPv3, syslog, Net Flow and Port Mirroring
• Integration with LDAP or RADIUS with role-based access control
• Support VLAN (802.1Q) and LACP (802.1AX)
• Must have Internet Protocol Detail record (IPDR) logging options with configurable detail level to meet legal requirements
• Must adhere to the Communications Assistance for Law Enforcement Act (CALEA)
• Prefer a perpetual licensing structure
• On-call system support 24x7
• Software development and Technical Support will conform to US regulations set forth by local, State and Federal requirements.
• Capable of the following features:
○ Full-Cone (Normal) and Symmetric NAT modes
○ Application-Level Gateways for FTP, TFTP, RTSP, SIP, DNS, etc.
○ Static and Dynamic NAT
○ EIM and EIF Support
○ NAT session quotas
○ Static, OSPF, and BGP Routing
○ NAT64/DNS64
○ IP anomaly filtering
○ Connection rate limiting.
- The professional services team will conduct an on-site implementation of CGNAT infrastructure, ensuring that it is deployed and configured correctly and meets the specific needs of the District.
- The professional services team will provide both on-site and remote training for the district’s staff on CGNAT deployment, management, and troubleshooting, ensuring that they have the knowledge and skills necessary to effectively manage their CGNAT infrastructure.
- Contract Period/Term: 1 year
- Mandatory Online Pre-Bid Meeting Date: April 17, 2025
- Questions/Inquires Deadline: April 14, 2025