TaxTMI 
TaxTMI 
CBEC Partner Connectivity Protocol- Solution for CBEC field formations managed by Custodians (under the HCCAR, 2009) requiring IT infrastructure and connectivity with CBEC Data Centre
X X X X Extracts X X X X
X X X X Extracts X X X X
....ivity Protocol Solution Version 2.0 (March 2017) (copy enclosed) for field formations managed by Custodians (under the HCCAR, 2009), prescribing the networking, communication equipments, Uninterrupted Power Supply System, desktops, servers, printers other computer peripherals and secure connectivity to the CBEC Data Centers as specified by the Directorate General of Systems to be provided by the Custodians. 3. In view of the above, all the Custodians (under the HCCAR, 2009) under the jurisdiction of the Custom House, Visakhapatnam are hereby instructed to meet all the requirements specified in the Document and its Annexures at the respective Custodian Sites. After making the prescribed infrastructure ready, all the Custodians are required to furnish the duly filled Non Disclosure Agreement (Annexure-5) and Custodian Infrastructure Checklist (Annexure-6) of the attached document, to the Systems Manager, Custom House, Visakhapatnam at the earliest, for forwarding the same to the Directorate General of Systems, CBEC for issue/ updation of LAN IP pool. Difficulties, if any, may be brought to the notice of the Department. -sd- (B. HARE RAM) COMMISSIONER OF CUSTOMS ====....
X X X X Extracts X X X X
X X X X Extracts X X X X
....the partner agency. CBEC is only suggesting various options, which have different techno-commercial implications. The custodians may choose any option based on their business requirements. C. Communication Mechanisms for Message Exchange 6 Secure File Transfer Protocol (SFTP) will be used as Communication Mechanism for Message Transfer with other CBEC partners. With Secure file transfer Protocol, users can pick up and drop files on the dedicated file transfer server in the directories assigned to their respective user ids in a secure manner. It may be noted that plain file transfer protocol (FTP) will not be allowed. a) Details Required for Creation of SFTP User ID for Message Exchange Following information in required to be provided for creation of SFTP User ID before starting the Message Exchange Agency Name Agency Type . Static Public IP address • Agency Address Authorized Single Point of Contact • Alternate Contact Person • • . Primary Contact Number (Landline) Alternate Contact Number (Landline) Primary Contact Number (Mobile) Alternate Contact Number (Mobile) Primary Em....
X X X X Extracts X X X X
X X X X Extracts X X X X
....n LAN (b) DHCP support for automatic firmware upgrades & unit configuration. 65 watt Adapter Office Productivity Suite Bundled Software (with support and Mozilla Firefox upgrades) Adobe Acrobat Reader, Flash player, Speakers Microphone Regulator y Standards Security JRE 8.0 or above Integrated Stereo Speaker, Integrated dual array microphone. UL, FCC Compliance, EPEAT India, BEE (optional), Energy Star Integrated Fingerprint Reader, TPM 1.2, capable for software Encryption Hard Drive to be 3. Specifications for 24 Ports Switch S.No. Specifications of equipment deployed by CBEC 24 RJ-45 autosensing 10/100/1000 ports (IEEE 802.3 Type 10BASE-T, IEEE 802.3u Type 100BASE-TX, IEEE 802.3ab Type 1000BASE-T) Mounts in an EIA-standard 19 in. telco rack or equipment cabinet Throughput- up to 95.2 Mpps Routing/Switching capacity- 160 Gbps Non-blocking and distributed forwarding hardware architecture All interfaces provide wire speed forwarding for both OFC and copper modules IP Multicast - RFC 3376 IGMPv3 Switches support 8 hardware queues per port 2. 4 5. 16 6 ....
X X X X Extracts X X X X
X X X X Extracts X X X X
.... LLDP and LLDP-MED capabilities IP source guard & Dynamic ARP Inspection/ Protection Secure Shell (SSH) Protocol and Simple Network Management Protocol Version 3 (SNMPv3) to provide network security by encrypting administrator traffic during Telnet and SNMP sessions. 1 RJ-45 serial console port 1 RJ-45 out-of-band management port Delivers secure encryption of all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3 Provides up to 336 Gbps of stacking throughput; each 4-port stacking module can support up to 42 Gbps in each direction per stacking port The Switch supports internal redundant power supply Advanced classifier-based QoS FTP for upgrading the operating System IEEE 802.1x support IEEE 802.3ad Link Aggregation Protocol (LACP) and HPE port trunking Supports management via CLI, Web interface SNMP v1, v2, v3 Manageable through both IPv4 & IPv6 with standard security features of 11 21. both IPv4 & IPv6 The stacking on the Switch provides the functionality to configure multiple switches in a single switching unit. Each unit/stack has the capability to be managed using a single IP address. 22. ....
X X X X Extracts X X X X
X X X X Extracts X X X X
....bit out of band management port Server supports configuring and booting securely with industry System with standard Unified Extensible Firmware supports RESTful ΑΡΙ integration System management should support provisioning servers by discovering and deploying 1 to few servers Intelligent Provisioning 13 System supports embedded remote support to transmit hardware events directly to OEM or an authorized partner for automated phone home support 19 Security Power-on password Setup password Serial interface control Power switch Administrator's TPM security password 1.2 UEFI 20 20 Operating Microsoft Windows Server Systems and Canonical Ubuntu Virtualization Red Software Support SUSE VMware Hat Linux Enterprise Linux (RHEL) Enterprise Server (SLES) 21 Secure encryption 22 22 Warranty 23 Provisioning 24 Remote Management Citrix XenServer Supports Encryption of the data on both the internal storage and cache module of the array controllers using encryption keys. ....
X X X X Extracts X X X X
X X X X Extracts X X X X
.... including LINUX (Redhat & SUSE), Windows 2003 OS etc. Note: This is the specification of the Line Printer Provided by CBEC. However, at sites where heavy duty operations are not involved, any compatible printer may be used. 15 8. Specifications for 4, 8, 12, 16 and 20 KVA UPS WITH 30 Min/1 Hr. BACKUP as per the requirement of the Location ITEM Technology / Design Topology UPS type Redundancy Operation Back up desired The Specifications of equipment deployed by CBEC Redundant N+1, Advance fully Microprocessor with PWM Technology with IGBTs. Double online conversion. UPS shall utilize modular power protection technology designed to allow internal redundancy, scalability (vertical paralleling) of power and runtime, and fast mean time to repair (MTTR). Online Double conversion Type On line (to act as power conditioner as well as Backup) with Auto start Facility power walking time of 30 ms Parallel N+1 parallel redundancy whereas all the power modules will be active and share the load mode. Full load for specific Period of 30 min/1 hr. of the 100% rated capacity. Upgradeable Upgradeable to 1: 1 redu....
X X X X Extracts X X X X
X X X X Extracts X X X X
.... otherwise (confidential information for short) is privileged and strictly confidential and/or proprietary to DG (Systems), CBEC. NOW THEREFORE, in consideration of the foregoing, the Custodian agrees to all of the following conditions, in order to enable DG (Systems) to grant the Custodian specific access to DG (Systems)'s confidential information, property, information systems, network, databases and other data as may be required in the process of establishing connectivity. a) IT IS HEREBY AGREED AS UNDER: The CUSTODIAN agrees to hold in confidence any confidential information received by the CUSTODIAN, as part of the connectivity process or otherwise, and the CUSTODIAN shall maintain strictest of confidence in respect of such confidential information. The CUSTODIAN also agrees: (i) (ii) (iii) (iv) (V) to maintain and use the confidential information only for the purposes of establishing connectivity and only as permitted by DG (Systems), CBEC; to only make copies as specifically authorized by the prior written consent of DG (Systems), CBEC and with the same confidential or proprietary notices as may be printed or dis....
X X X X Extracts X X X X
X X X X Extracts X X X X
....nnectivity process may require the CUSTODIAN's personnel to be present on premises of DG (Systems) or may require the CUSTODIAN's personnel to have access to software, hardware, computer networks, databases and storage media of DG (Systems) while on or off premises of DG (Systems). It is understood that it would be impractical for DG (Systems) to monitor all information made available to the CUSTODIAN's personnel under such circumstances and to provide notice to the CUSTODIAN of the confidentiality of all such information. Therefore, the CUSTODIAN agrees that any technical or business or other information of DG (Systems) that the CUSTODIAN's personnel, representatives or agents acquire while on DG (Systems) premises, or through access to DG (Systems) computer systems or databases while on or off DG (Systems) premises, shall be deemed confidential information. Confidential information and any derivatives thereof shall at all times remain the sole and exclusive property of DG (Systems). All confidential information and derivatives thereof shall be returned to DG (Systems) promptly after receipt of request by CUSTODIAN from the DG (systems)....
X X X X Extracts X X X X
X X X X Extracts X X X X
....of SIGNED for and on behalf of CUSTODIAN India By: Signature: Designation: Address: Witness: Name: Place: Date: By: Signature: Designation: Address: Witness: Name: Place: Date: 21 224 S No Annexure 6 Custodian Infrastructure Checklist Item 1 Please confirm whether the ICD/CFS is under Customs Critical Done Remarks Yes jurisdiction ie not in Free Trade & Warehousing Zones (FTWZ) 2 Connectivity MPLS Connectivity (Enter Bandwidth (in Mbps) in remarks column with name of Service Provider) Connectivity Taken for Both Data Centre- Delhi and Data Centre Chennai All the Network Switches and Routers at the location accessing CBEC's Data Centres support 802.1x to enable integration with CBEC's Network Access Control (NAC). Connectivity Media 3 LAN: CBEC LAN must be Insular and isolated from the custodian LAN. The LAN for Customs should be installed with a separate switch. LAN diagram must be provided showing the seating arrangements of the Customs officials and Service Centre operators 4 Service Centre details Whether Servi....