ESTABLISHMENT OF INFORMATION SYSTEMS and COMPUTING (ISC) LAB 1 AT HINDU COLLEGE ON TURNKEY BASIS UNDER QUALITY and COST BASED SELECTION (QCBS) METHODOLOGY

AI Management & Orchestration Server (Dell, HPE, or equivalent tier-1 OEMs): Supply, installation, testing, and commissioning of a rack-mount enterprise AI management and orchestration server for scheduling, managing and accessing remote GPU compute resources located in a separate building over a high-availability campus network, meeting the following minimum specifications (higher specifications acceptable): Processor: Minimum 1 × server-grade CPU with ≥16 physical cores (Intel Xeon Scalable Gen-3 or later / AMD EPYC 7003 series or later), suitable for continuous control-plane, orchestration and management workloads. Memory: 128 GB ECC Registered RAM (DDR4 or DDR5, as supported by the OEM platform), installed and balanced across memory channels, and expandable up to a minimum of 256 GB as per OEM platform design. Storage: 2 × 1.92 TB PCIe NVMe SSDs configured in RAID-1, implemented using OEM-supported hardware RAID or OEM-validated software RAID, as applicable. Networking: Minimum 2 × 10/25 GbE network ports via OEM-supported adapters for management, monitoring and control-plane traffic, configured for redundant operation. The server shall integrate with remote AI/GPU compute resources over the campus inter-building network, without hosting local GPU workloads. Power Supply: Dual redundant hot-swappable power supplies, suitable for 24×7 operation. Remote Management: Integrated OEM baseboard management controller (IPMI / Redfish / iLO / iDRAC class) with remote KVM, virtual media, and secure firmware management. Intended Use: The server is intended strictly for control-plane, orchestration, identity management, monitoring and scheduling services and shall not be required to host or support local GPU compute workloads. Operating System: Linux LTS distribution (Ubuntu Server LTS or equivalent), installed, configured and tested by the vendor. Warranty & Support: Minimum 3-Year OEM Enterprise On-Site Warranty, including remote diagnostics, firmware updates and hardware replacement as per SLA. Software Stack – Central Orchestration, Collaboration & MLOps Platform Supply, installation, configuration, testing and commissioning of a central orchestration, collaboration and MLOps software platform on the supplied management server, based on Ubuntu Server LTS or equivalent enterprise Linux, functioning as the central control layer for the REC and AI Labs. Scope shall include: Single-node Kubernetes control plane (scalable), Kubernetes-compatible container runtime (containerd preferred), Helm and ingress controller, Multi-user JupyterHub with LDAP/AD/OAuth integration and RBAC, MLflow for experiment tracking, Airflow or Argo Workflows for pipeline orchestration, Selective deployment of Kubeflow components, if required, Self-managed DevOps services including Git-based repository, CI/CD runners and container registry. Centralized monitoring, logging, audit, backup and security services, No GPU drivers or GPU workloads shall be installed on this server. All GPU-accelerated workloads shall execute on external dedicated GPU compute server(s) connected over the network. Blockchain services, if required, shall be limited strictly to orchestration, identity, certification and monitoring components only.

Student Classroom Workstations | CPU-Based, GPU-Upgradeable (Dell, HPE, or equivalent tier-1 OEMs): Supply, installation, testing, and commissioning of a high-performance Student Workstation, meeting the following minimum specifications (higher specifications acceptable): Processor: Minimum 1 × Intel Core i9 processor (latest generation or better), suitable for intensive development, data preprocessing, model prototyping and orchestration client workloads. Memory: 32 GB DDR5 RAM, installed and expandable as per motherboard and OEM platform design. Storage: 1 TB PCIe Gen4 NVMe SSD for operating system, development environments, datasets and user workloads. Graphics: Integrated graphics (Intel UHD or equivalent) Networking: Integrated Gigabit Ethernet (1 GbE) network interface, with support for higher speeds (2.5 GbE / 10 GbE) where required. Operating System: Windows 11 Pro (OEM licensed), with support for Linux dual-boot and/or WSL2 / virtualization for academic use. Display & Accessories: Supplied with 27-inch FHD IPS professional monitor, along with standard keyboard and mouse. Intended Use: Suitable for hands-on AI/ML laboratories, data preprocessing, feature engineering, model development, containerized workflows, CUDA programming via remote GPU access, computer vision pipelines, capstone projects, and advanced student experimentation using centralized GPU infrastructure. Power Supply & Chassis: OEM-certified power supply and chassis suitable for continuous operation in an AI laboratory environment. The workstation shall be from the OEM’s business / enterprise desktop series; consumer or gaming desktops shall not be accepted. Warranty & Support: Minimum 3-Year OEM On-Site Warranty, including hardware support and replacement as per OEM SLA. Developer & Client Computing Software Stack: The software stack shall comprise a stable desktop operating system such as Ubuntu LTS or Windows 11 Pro with WSL2 as approved, along with core development and data-science tools including Python with virtual environment management (Conda/venv), JupyterLab for local experimentation, NumPy, Pandas, SciPy, Matplotlib, Scikit-learn and CPU-based OpenCV. AI/ML frameworks shall be installed in client or CPU builds only, including PyTorch, TensorFlow and Hugging Face libraries, without CUDA or GPU bindings. Developer and DevOps tools shall include Git, Docker client/CLI, Kubernetes client tools (kubectl, Helm), Node.js and npm, together with IDEs such as VS Code and PyCharm Community. Blockchain development tools shall be limited to client-side components including Solidity compiler, Hardhat or Truffle, Web3/Ethers libraries, Hyperledger Fabric client SDKs and wallet/CLI tools, with access to central blockchain services provided over the network; no blockchain nodes, Kubernetes services or GPU drivers shall be installed on individual workstations. Enterprise Endpoint Security & Centralized Desktop Protection (3 Years): Supply, installation, configuration and commissioning of enterprise-grade endpoint security solution with centralized management console including real-time antivirus, anti-malware, ransomware protection, policy-based control, centralized reporting and alerting, silent deployment, and tamper protection. The solution shall be licensed for institutional use with minimum three (3) years subscription and OEM support. Free or consumer-grade antivirus solutions shall not be accepted.

Computer centre All-in-One Desktop Computers – Intel Core i5, 24-inch Display (Dell, HP, Lenovo or equivalent tier-1 OEMs) Supply, installation, testing and commissioning of All-in-One (AIO) desktop computers suitable for academic and administrative use, meeting the following minimum specifications (higher specifications acceptable): Processor: Intel Core i5 processor (latest generation or one generation prior, or better), suitable for academic and administrative workloads. Memory: 16 GB RAM, expandable as per OEM platform design. Storage: 512 GB PCIe NVMe Solid State Drive (SSD) for operating system, applications and user data. Display: Integrated minimum 23.8-inch FHD IPS LED display Graphics: Integrated graphics suitable for standard academic and office applications. Operating System: Windows 11 Pro (OEM licensed). Networking: Integrated Gigabit Ethernet and Wi-Fi connectivity. Peripherals: Integrated webcam, speakers and microphone; supplied with standard USB keyboard and optical mouse. Form Factor: Factory-integrated All-in-One chassis, reducing desktop footprint and cabling requirements. Intended Use: Suitable for computer laboratories, faculty offices, administrative workstations and general academic computing. Warranty & Support: Minimum 3-Year OEM On-Site Warranty, including parts and labour, as per OEM SLA. Enterprise Endpoint Security & Centralized Desktop Protection (3 Years): Supply, installation, configuration and commissioning of enterprise-grade endpoint security solution with centralized management console including real-time antivirus, anti-malware, ransomware protection, policy-based control, centralized reporting and alerting, silent deployment, and tamper protection. The solution shall be licensed for institutional use with minimum three (3) years subscription and OEM support. Free or consumer-grade antivirus solutions shall not be accepted.

Core L3 Network Switch (Enterprise Core/Aggregation): Supply, installation, testing and commissioning of an enterprise-grade Layer-3 core / aggregation network switch for the REC Lab, acting as the central aggregation point for access switches, servers and inter-building backbone connectivity, meeting the following minimum requirements (higher specifications acceptable): Make / Series: HPE Aruba Networking CX 8100 or equivalent Port Configuration: Minimum 24 × 10G SFP+ ports and 4 × QSFP28 ports supporting 40G / 100G Architecture: Non-blocking switching fabric suitable for high-throughput aggregation Layer-3 Features: Inter-VLAN routing, static routing and OSPF, ACLs, QoS, LACP Management: Centralized OEM management with telemetry, SNMP and secure role-based access Reliability: Front-to-back airflow, redundant hot-swappable fan modules and dual hot-swappable AC power supplies, designed for continuous 24×7 operation Scope: Includes rack-mount accessories, power cords, base OS licenses, configuration, testing, commissioning and documentation Optical transceivers and fiber cabling are not covered.

Layer-2 Access Switches with Optics – High-Performance Zone (i9 Workstations): Supply, installation, testing and commissioning of Layer-2 access switches for high-performance i9 workstation connectivity, complete with all required uplink transceivers and accessories. The system shall meet the following minimum requirements (higher specifications acceptable): Switch Hardware: Layer-2 access switch with 48 × 1G access ports and minimum 4 × 10G SFP+ uplink ports, supporting VLANs, LACP, QoS and centralized management. Preferred make: HPE Aruba Networking CX 6100 48G 4SFP+ or equivalent. Uplink Connectivity: Each switch shall be connected to the Layer-3 core switch using 2 × 10G SFP+ uplinks, configured as a single LACP bundle per switch, to provide higher aggregate bandwidth and redundancy for compute-intensive workloads. Transceivers: Supply and installation of 10G SFP+ LC SR 300 m OM3 Multimode Fiber (MMF) Transceivers, OEM-supported, 2 Nos. per switch, for uplink connectivity to the Layer-3 core switch. The item shall include all necessary configuration, testing, commissioning, documentation and integration with the overall network architecture.

Enterprise Wi-Fi 6 Access Points (4×4) – Complete with Mounting & Support: Supply, installation, testing and commissioning of enterprise-grade indoor Wi-Fi 6 access points, suitable for high-density academic, laboratory and office environments, complete with all required accessories, mounting hardware and OEM support. The system shall meet the following minimum requirements (higher specifications acceptable): Access Point Hardware: Indoor unified campus wireless access point compliant with IEEE 802.11ax (Wi-Fi 6), featuring dual-radio architecture with 4×4:2 spatial streams, internal antennas optimized for indoor coverage, and support for high concurrent client density, multiple SSIDs and seamless roaming. Preferred model: HPE Aruba Networking AP-515 (RW) TAA, Dual Radio 4×4/2×2 802.11ax Internal Antennas Unified Campus AP (Part No. Q9H72A) or equivalent. Security & Network Features: Support for WPA2/WPA3 security, role-based SSIDs (e.g., staff / student / guest), and basic wireless intrusion detection and rogue access point detection through centralized management. Management: Centralized management via Aruba controller-based and/or cloud-managed platform, supporting configuration, monitoring, firmware updates, diagnostics and performance analytics. Connectivity & Power: Gigabit Ethernet uplink, powered via IEEE 802.3af/at PoE sourced from network switches or OEM-approved PoE injectors, as applicable. Mounting Accessories: Supply and installation of OEM campus AP mount bracket kit, suitable for solid surface mounting. Preferred accessory: HPE Aruba Networking AP-MNT-D Campus AP Mount Bracket Kit (Part No. R3J18A) or equivalent. Console / Service Accessories: Supply of OEM Micro-USB TTL 3.3V to USB 2.0 AP console adapter cable for installation, troubleshooting and diagnostics. Preferred accessory: HPE Aruba Networking AP-CBL-SERU Console Adapter Cable (Part No. JY728A) or equivalent. Support & Warranty: Minimum 3-Year OEM Next Business Day (NBD) replacement support, including firmware updates and hardware replacement as per OEM SLA. Preferred service: Aruba 3Y FC NBD Exchange AP-515 TAA Service (Part No. HC4S4E) or equivalent. The access points shall be supplied, installed, tested and commissioned complete in all respects, including mounting, PoE connectivity, controller/cloud onboarding, RF configuration, testing and handover documentation.

Firewall / Unified Threat Management (UTM) Appliance (FortiGate 100F / 200F class or equivalent enterprise-grade appliance, meeting the specified performance parameters): Supply, installation, testing and commissioning of an enterprise-grade Firewall / Unified Threat Management (UTM) appliance, suitable for securing approximately 300 concurrent endpoint computers, AI servers, storage systems and associated network infrastructure, while enabling controlled and secure external connectivity for academic, research and collaboration use, meeting the following minimum requirements (higher specifications acceptable): Firewall Performance: Stateful firewall throughput of not less than 10 Gbps. Threat Protection / IPS Performance: Minimum 2 Gbps sustained throughput with IPS / Threat Protection enabled under real-world traffic conditions. Session Capacity: Support for minimum 500,000 concurrent sessions and not less than 20,000 new sessions per second. Security Features: Support for stateful firewalling, Intrusion Detection and Prevention System (IDS/IPS), application control, traffic monitoring, logging and reporting, with policy-based and role-based access control. VPN Capabilities: Support for site-to-site and remote-access VPN, with minimum 1.5–2 Gbps VPN throughput, including secure authentication mechanisms. Interfaces: Minimum 6 × 1G Ethernet ports and 2 × 10G SFP+ ports, or better, suitable for integration with core and access switches. Management & Logging: Centralized management, configuration, monitoring and reporting through a web-based management interface, with support for log retention, export and audit trails. Deployment Model/Scope: Dedicated hardware appliance. Open-source firewall / UTM platforms shall be permitted only if deployed on certified enterprise-grade hardware meeting all the above performance parameters, with single-point responsibility for support and maintenance by the bidder. The scope shall include policy configuration, basic rule-set creation, VPN setup (site-to-site and remote access), logging configuration and handover documentation. Warranty & Support: The quoted solution shall include a minimum 3-year OEM security subscription bundle covering IPS / threat protection, firmware updates and support.

Category 6A Passive Network - 10G Ready - 55 workstations, 2 port each (Panduit / CommScope / Siemon / Systimax / Molex / Legrand or equivalent enterprise-grade OEM): Supply, installation, testing, termination and commissioning of a complete Category 6A FTP 500 MHz structured cabling system supporting 10 Gigabit Ethernet or higher, comprising Cat 6A FTP copper cable ~3000 m, 24-Port 1U Cat 6A patch panels (Red) – 5 Nos, Cat 6A information outlets (Red, tool-free terminations) – 110 Nos, 2 m Cat 6A patch cords rack end (Red, 50 micro-inch gold-plated contacts) – 110 Nos, 2 m Cat 6A patch cords work-area end (Red, 50 micro-inch gold-plated contacts) – 110 Nos, dual-port faceplates with machine-printed laminated labels – 55 Nos, laid through PVC conduits, aluminium raceways and junction boxes as required, with all links tested using calibrated Fluke equipment, submission of Fluke test reports, as-built drawings and port-wise labelling matrix, and provision of OEM-issued 5-year site warranty, with all passive components from a single OEM only, inclusive of all materials, labour, accessories and compliance for a fully operational structured cabling system.