KENYA STANDARD      KS 2416 -3: 2022  
ICS 35.160; 35.240.99  
  
 
 
 
 
 
 
 
 
 
 
 
 
 
Information technology — learning, education and 
training  
 
Part 3:  
Network components to support eLearning   
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 © KEBS 2022                  Second  Edition 202 2 
 
 KS 2416 -3: 2022 
 
ii   KEBS 2022  — All rights reserved   TECHNICAL COMMITTEE REPRES ENTATION  
 
The following organiza tions were represented on the Technical Committee:  
 
Jomo Kenyatta University of Agriculture and Technology  (JKUAT)  
Commission for University Education (CUE)  
Daystar University  
Elimu Holdings  
Esri Eastern Africa Ltd.  
Global Open Data for Agriculture and Nut rition  (GODAN ) 
Inable  
Intelligent Technologies  
Kenya Engineering Technology Registration Board (KETRB)  
Kenya Industrial Training Institute (KIRDI)  
Kenya National Library Services (KNLS)  
Multi -Media University  
National Industrial Training Institute (NITA)  
Spring Training and Consulting  
Technohub Technologies  
University of Embu  
Kenya Bureau of Standards — Secretariat  
 
 
 
 
 
 
 
 
REVISION OF KENYA STANDARDS  
 
In order to keep abreast of progress in industry, Kenya Standards shall be regularly reviewed.  Suggestions  for improvements to 
published standards, addressed to the Managing Director, Kenya Bureau of Standards, are welcome.  
 
 
 
 
 
 
 
 
 
 
 
© Kenya Bureau of Standards, 2022  
  
Copyright. Users are reminded that by virtue of Section 25 of the Copyright Act, Cap. 12 of  2001  of the Laws of Kenya, copyright subsists in all Kenya Standards and 
except as provided under Section 26 of this Act, no Kenya Standard produced by Kenya Bureau of Standards may be reproduced, s tored in a retrieval system in any 
form or transmitted b y any means without prior permission in writing from the Managing Director . 
 
 KENYA STANDARD       KS 2416 -3: 2022  
ICS 35.160; 35.240.99  
KEBS 2022  — All rights reserved    iii  
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Information technology — learning, education and 
training  
 
Part 3:  
Network components to support eLearning  
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
KENYA BUREAU OF STANDARDS (KE BS)  
 
Head Office: P.O. Box 549 74, Nairobi -00200, Tel.: (+254 020) 605490, 602350, Fax: (+254 020)  604031  
E-Mail: info@kebs.org,  Web:http://www.kebs.org  
 
Coast Region     Lake Region          Rift Valley Region  
P.O. Box 99376, Mombasa -80100   P.O. Box 2949, Kisumu -40100        P.O. Box 2138, Nakuru -20100  
Tel.: (+254  041) 229563, 230939/40   Tel.: (+254 057) 23549, 22396        Tel.: (+254 051) 210553, 210555  
Fax: (+254  041) 229448    Fax: (+254 057) 21814  
 
 KS 2416 -3: 2022 
 
iv   KEBS 2022  — All rights reserved   Foreword  
 
This Kenya Standard was prepared by the Tec hnical Committee on Information Technology for Learning, Education and Training 
under the guidance of the Standards Projects Committee, and it is in accordance with the procedures of the Kenya Bureau of 
Standards.  
 
One of the current priorities for governm ent is to develop the use of ICT alongside other strategies in order to increase access to 
education and improve the quality  of teaching and learning.  
 
Today’s connected learning environment depends on delivering multimedia information to classrooms, stud ents, and faculty, and 
doing so across a range of devices to different buildings and student homes. These capabilities require counties and individu al 
learning institutions to provide a high -bandwidth, high -performance network at all times. This also requi res comprehensive, business -
grade broadband and network solutions to enable these capabilities.  
 
This Kenya Standard offers several technical recommendations to provide efficient networks to learning institutions. A modern  
network shall also include networ k management and maintenance, safety  and security solutions, access and distribution layer 
infrastructure, wireless availability and access points, video endpoints, local caching, cloud services, and mobile access so lutions for 
students and faculty working  on educational projects outside of the learning institution.  
 
While network infrastructure is the foundation, the need for robust specialized hardware that brings out the network value in  ways not 
possible through general -purpose computers and tablets can not be ignored.  
 
This Standard is a multi -part document intended to set minimum requi rements for ICT infrastructure and consists of the following 
parts under the general title, Information Technology — Learning, Education and training.  
 
Part 1: Computer ha rdware intended for eLearning  —  
 
Part 1.0:  Terms and Definitions  
 
Part 1.1:  Desktop computers.  
 
Part 1.2:  Laptop computers.  
 
 Part 1.3 :  Tablets . 
 
Part 2: Software i ntended for eLearning .  
 
Part 3 : Network components to support eLearning . 
 
During the p reparation of this standard, reference was made to the following document :  
 
High-Speed Broadband in Ever y Classroom: The Promise of a Modernized E -Rate Program 2013, CISCO.  
 
Acknowledgement is hereby made for the assis tance derived from this source.  
 
 
 
  
KENYA STANDARD        KS 2416 -3: 2022  
 
 
KEBS 2022  — All rights reserved     1 Information technology — learning, education and training  
 
Part 3:  
 
Network components to support eLearning  
 
1 Scope  and field of application  
 
This Kenya Standard  specifies the minimum network requirements to support in  the effective use of IT for Learning , Education and 
Training (IT LET). It prescribes the minimum requirements that any Local Area Network system supporting eLearning shall 
implement to establish a solid technical platform for efficient delivery.  
An eLearning network applies to : 
 
— distributed learning networks;  
 
— internetworked computing;  
 
— electronic media, such as the Internet, intranets, satellite broadcasts, interactive television, and videoconferencing, and;  
 
— other information and communication technologies (ICTs) to facilitate teaching and learning.  
 
2 Normative references  
 
The following referenced documents are indispensable for the application of this Kenya Standard. For dated references, only t he 
edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.  
 
KS IEC 60950 -1, Information technology equipment — Safety — Part 1: General requirements  
 
KS ISO IEC 11801, Information technology — Generic cabling for customer premises  
 
KS ISO IEC 18028, Information technology — Secu rity techniques — IT network security — Part 1: Network security management  
 
KS 2416 -1, Information technology — Learning, education and training — Computer hardware intended for eLearning — Part 1.1: 
Desktop Computer — Part 1.2:  Laptop Computers  
 
KS ISO/I EC 27002, Information technology — Security techniques — Code of practice for information security controls  
 
KS ISO IEC 27033, Information technology -- Security  techniques -- Network security   
 
3 Definitions  
 
For the purposes of this standard, the defini tions  in part 1 .0 of this standard shall  apply:  
 
4 Requirements  
 
All networks intended for eLearning shall have the following general characteristics.  
 
4.1 Policy management  
 
4.1.1  In accordance with The Children Act, 2 001 of Kenya and applicable informati on and education policies, content filtering 
should be enabled on learning institution networks to prevent students from accessing inappropriate material, as well as to p rotect 
them from malicious sites or people.  
  
2   KEBS 2022  — All rights reserved   4.1.2  Learning institutions should deplo y content filtering technologies with dynamic real -time categorization of material, to help 
enforce institution policies.  
 
4.1.3  Learning institutions should integrate their content filtering solutions within the entire framework of network security poli cies 
for the learning institution environment.  
 
4.2 Network management and monitoring  
 
4.2.1  Learning institutions shall implement network management and visibility tools in accordance with applicable Simple 
Network Manageme nt Protocols  as they deploy and op erate networks for student learning.  
 
4.2.2  Netw ork performance tools shall be used to measure actual bandwidth and throughput capabilities from the student to the 
learning applications, and ensure that goals are being met.  
 
4.2.3  Quality of service (Q oS) monitoring system should  be put in place to ensure that the learning institution network quality is 
satisfactory from end to end.  
 
4.2.4  Students and teachers should be able to download most files, conduct Internet research, engage in collaborative group 
projects, and handle most classroom tasks.  
 
4.3 Network s ecurity  
 
4.3.1  Learning institutions shall analyze their network security policies and deploy solutions that ensure that these policies are 
enforced at all times. The following Kenya S tandards shall b e applied ; KS ISO IEC 18028  KS ISO/IEC 27002  and KS ISO IEC 
27033 . 
 
4.3.2  Network security solutions should be flexible to allow different user groups (students, faculty, administrators, guests) to b e 
able access only the information that is permitted for their user group.  
 
4.4 School  safety  
 
4.4.1  Learning institutions  should determine their physical security policies and as appropriate, integrate digital video 
surveillance and storage technology across a single IP infrastructure, spanning across multiple  buildings in the district.  
4.4.2  To ensure that users are protected from hazardous situations the following risks shall be reduced general principles of 
safety observed:  
 
— electric shock ; 
—  energy related hazards ; 
— fire; 
— radiation ; 
—  mechanical hazards ; 
—  heat related hazards ; 
—  chemical hazards . 
 
Measures to reduce these risks shall be observed as detailed in Cl ause 0.2 of KS IEC 60950 Part 1.  
 
4.5 Present and future bandwidth needs  
 
In a few short years, most  learning institution s will require conne ctions of at least 100 megabytes per second, and larger Learning 
institutions  will require speeds faster than that.  
 
For school networks , best practice recommends bandwidth at five times the Internet access speeds. This translates into 20  Gbps per 
2,000  students . 
 
4.6 Local Area Network (LAN) internal c onnections inside the institution  
 
The learning institution LAN (also referred to as the internal connection) is critical for delivering educational application s end to end.  
Learning institutions  should de ploy solid network architecture across their districts, using the core -distribution -access model to 
ensure that students have consistent reliable access to information anywhere without network failures or outages.  
 KS 241 6-3: 2014  
 
KEBS 2022  — All rights reserved    3 4.6.1  The hardware shall support traffic prioritization, policing functionality, and security policies, and have the throughput 
required by school and student applications. Figure 1 shows the end -to-end network diagram . 
 
 
 
Figure  1 — End-to-end network  
 
4.6.2  The foundation of sound network arc hitecture, especially for large learning institutions, consists of the three network layers: 
core, distribution, and access  
 
4.6.2.1  The core  
 
The core provides the backbone for the entire  institution  and delivers fault -tolerant, high - speed services throu ghout.  
 
4.6.2.2  Distribution  
 
This is the point where policies are created and managed to facilitate the distribution of services to the learning institutions ; 
importantly, these policies shall ensure the most efficient transport path to maintain high avai lability and resiliency across the entire 
district. Security policies are enforced here, and transport paths are optimized based on the type of service requested.  
 
4.6.2.3  Access (building infrastructure)  
 
The access layer is where devices and peripherals connect to the network. For example, access points for wireless services, video 
surveillance cameras, line -powered bells and alarms, desktop computing, servers, IP phones, and digital building controls connect to 
the access layer. The access layer is where  the actual classrooms within learning institutions  attach to the network to gain 
connectivity to the district’s technology services  
 
The fundamental building blocks for connections inside and outside Learning institutions  are routers and switches. These s pecialized 
hardware devices shall be robust and be deployed in a redundant fashion to ensure that educators and students can depend u pon 
the network running 24 h ours a day, seven days a week.  
  
4   KEBS 2022  — All rights reserved    
Table 1 — Basic layout for LAN  
 
One computer  ICT room r equir ement  
 
One computer in a classroom with or 
without  its own private printer (Figure 1)  ─ a single LAN -connected point for the teacher  
─ an additional LAN connection to allow for a portable switch.  
─ Optional server with only the network administrator (usually a designated staff 
member) having access rights to the server.  
─ When a mobile PC or PC with projector is require in a room the network 
points are already present  
 
1 —  10 computers  Requirement  
Several computers in a classroom with or 
without a printer  ─ a LAN -connected point for the teacher  
─ wireless connections (USB Wi -Fi dongles or modems)  
─ Peer -to-peer network i.e. Each computers shares its resources with others in 
the network  
─ a corresponding number of LAN connection points through centralized access 
point (hub) to connect each  computer to the learning institution LAN.  
─ Optional server within or separate from the classroom.  
─ One network administrator (usually a designated staff member) having 
access rights to the server.  
─ A ‘Switch’ used to switch the dat a from one point to another.  
─ Network operating system software  
─ A network interface device on each computer i.e. network interface card or 
NIC) as specified in KS 2416 Part 1.  
Student machines(clients) connect to a 
web server through the hub. The 
eLearning  content resides in the server 
and the individual work stations have 
permissions to access that content  
 ─ Client server network  
─ server software  
─ LAN-connected presentation point for the teacher  
─ LAN-connected computers throughout the classroom for students  
─ The computer laboratory should be zoned for independent air -conditioning 
during times when the rest of the building is closed.  
─ The room should be designed to accommodate up to 30 computer 
workstations.  
Media b ays ITLET requirements  
 
Media bays, or data su ites are clusters of 
perhaps four desktop computers, a 
scanner and a printer  ─ connected to the main learning institution network either through a LAN 
connection point or a WLAN access point and have Internet access  
─ used by students in small groups or indiv idually and could accommodate 
task-oriented activities and self -directed learning.  
 
 
4.7 Bandwidth requirements for learning, education and training  
 
Table 2 — Recommended internet bandwidth targets  
 
Internet access bandwidth recommendations  minimum t arget (Mbps)  
Per connected computing device  1 Mbps  
NOTE     Calculations based on the ratio of bandwidth to the number of simultaneously connected machines (KENET data) . 
 KS 241 6-3: 2014  
 
KEBS 2022  — All rights reserved    5 4.8 WLAN (Wireless LAN) requirements  
 
Learning institutions  should use wireless desig n principles and expertise to create a wireless network that operates well at all times 
under heavy loads.  
 
Learning institutions  should deploy wireless access points with maximum throughput to support high, mobile device density and 
demand, especially in  1:1 student -to-device environments. Active rogue access point detection and containment is important for 
Learning institutions  to maintain a secure wireless network.  
 
4.9 Video bandwidths  
 
Video endpoints should be standards -based, allowing interoperabili ty with the thousands of other video endpoints in use at other 
learning institutions and libraries around the world  
 
QoS capability in the learning institution’s network is required to ensure that video quality is satisfactory from end to end . 
 
4.10 Voice to broadband  
 
IP LAN (internal connections) for voice and data services are recommended.  
 
NOTE  offsite, hosted voice solutions that use broadband connections, and host redundant, voice backup support is recommended.  
 
4.11 Requirements for data centres/serv er rooms  
 
Table 3  — Functional requirements for ICT server/ Equipment room  
 
Specification  Requirement  
Layout/ location, 
climate control, 
cooling and 
environment  
  Height , 2.6 m – 2.9 m from the building floor or from the raised floor to ceiling,   
 Non combu stible or fire -resistant building or room  
 The computer room should not be above, below, or adjacent to areas where hazardous 
materials or gases are stored, manufactured, or processed.  
 minimum door width of 914 mm (36 in.).  
 The minimum door height of 2032  mm (80 in.) of unobstructed height (no threshold plate).  
 Minimum height of 600mm in fully fitted area  
 minimum clear height of 2.85m  
 Column spacing primarily based on a 8m grid  
 Raised floors height of  5 cm with anti -static tiles  
 Suspended acoustic ceili ng.   
 Typical floor loading of 7.5kN/m²  
 Adequate drainage should be provided If the computer room is below ground level,  
 The roof, ceiling, and floor above the computer room and the storage area for recorded media 
should be watertight.  
 Liquid piping, roof  drains, and other potential sources of liquid damage should be rerouted 
around the area.  
 The maximum resistance for the flooring system should be 2 x 1010 ohms, measured between 
the floor surface and the building (or an applicable ground reference).  
 The s pace under the raised floor in the computer room should be provided with drainage to 
protect against flooding or trapped water.  
 Waste material containers should be constructed of metal with a frame -suppressant lid  
 Temperature and humidity in technical main tained within energy efficient parameters  
 Air Conditioners, should be positioned strategically and meet the below specifications; - 
 Cooling capacity of 50,000 BTU/H  
 Cooling specifications - Water input 10 oC Output 15 oC 
 Dehumidifier value 0.26 gal/h max  
 Compressor Type Rotary  
 Power Supply (Volt/Phase/Hz.) 230/ single phase  
 Panel Display LCD  
 Water Leakage Detection system   
6   KEBS 2022  — All rights reserved   Specification  Requirement  
Lighting   Light sources in the server room and work station areas should have a general lighting level of 
300 - 500 lumens/m2 (lux) or 30  - 50 foot -candles.  
 When preparing the equipment room and work areas, the room should be painted with a light 
color with a white ceiling to reflect (rather than absorb) light.  
 To lessen any glare, windows should not be in an operator's field of vision or  directly facing 
the display screen. Direct sunlight can cause light -sensing devices to malfunction and make 
observations of various signal lamps difficult  
 
Telecommunications 
equipment layout and 
cabling   Cabling in accordance with the Kenya Standard KS I SO\IEC 11801.  
 Access to multiple telecommunications providers  
 2 diverse cable entry points  
 Diverse cable routes and pathways  
 Multiple connection points to each area  
Fire detection and 
suppression system   An early -warning fire detection system should be ins talled to protect the computer room and 
storage areas for recorded media. This system should activate both an audible and a visual 
alarm in the rooms and at a monitored central station.  
 Smoke and gas extraction  
 Portable carbon dioxide fire extinguishers, o f suitable size and number, should be provided in 
the computer room for use on electrical equipment.  
 Portable, pressurized -water extinguishers should be provided for combustible material such as 
paper.  
 Extinguishers should be readily accessible to individ uals in the area, and extinguisher 
locations should be marked so they are visible.  
Security  
  Access control system should log all the access which will be recorded in a database in the 
main data centre. All the access controls will be linked and controlle d from the main Server. 
Multiple CCTV cameras (interior and exterior) . 
 An IP Based CCTV Camera System consisting of at least four(4)IP for round the clock 
monitoring. This should also be accessible from the main Data Centre  
 Perimeter Security should be pro vided by installing the main door with access control multi 
locks, which can only be opened with a password and/or a swipe card.  
 biometric access is recommended where possible.  
 A server monitoring system to check the status of the server room environment ( Temperature, 
humidity etc.) as well as physical security  
Redundant p ower  
  Incoming dedicated mains power supplied via 2 x 22kV supplies  
 Diverse A&B supply, distributed at 415  V via bus bar system Up to 2  MW of power per floor 
plate  
 Power and cooling are s upported by 12 x 2  MVA diesel generators  
 On-site diesel tanks ( 150,000 litres) support 24 h at full cap acity with 2 , 24x7 fuel delivery  
 Floor by floor UPS / DRUPS configurations options: N + 1 and N + N. Battery reserve typically 
10 minutes back -up time  
Backup  A backup and replication  plan shall be maintained  for critical information To protect against loss of 
data.  
 
 
 KS 241 6-3: 2014  
 
KEBS 2022  — All rights reserved    7 Annex A  
(informative)  
Checklist for network components  
 
Specification  Requirement met  
Yes Partially  No 
General requirements     
 Network management and monitoring systems is in place     
Policy management exists     
Network security system is in place     
Present and future bandwidth needs are addressed     
Classroom with 1 computer     
 LAN connection point for instructor     
Additional connection point     
At least 2 power supply points     
1- 10 computers     
 LAN Connection point for instructor     
Additional LAN connection points for several computers     
Corresponding number of p ower supply points     
Computer lab/ ICT ro om    
 Power supply     
LAN-connected presentation point for the instructor     
LAN-connected computers throughout the classroom     
Zoned for independent air -conditioning     
Designed to accommodate at  least 30 computer workstations     
Data centre s/ICT equipment room     
 Layout/location, climate control, cooling and e nvironment     
Lighting     
Telecommunications equipment layout     
Fire detection and suppression system     
Security     
Redundant p ower