5-DART RFP Questions and Answers from vendors.docx

DART RFP Questions (Due August 4th):

1. You have indicated in your RFP that you would like to transition to SD-WAN, what is your current architecture model? MPLS?

We use dedicated edge routers at each site running BGP with multiple ISPs for internet connectivity and redundancy. Internal routing between sites is handled via EIGRP on core Layer 3 switches. OSPF runs over VLANs on point-to-point Metro Ethernet links connecting sites. We do not use MPLS.

2. Are there just two sites included in the SD-WAN?

Phase 1 includes migrating the two existing sites, Cherry Street and Dart Way, to SD-WAN, as well as bringing the new third site online with SD-WAN. The third site will eventually replace Dart Way, which will be decommissioned as part of this phase.

3. Will Internet circuits be available right away for the SD-WAN Implementation? Are these pre-existing connections that are already in place?

DART intends to have the new internet circuits in place and available prior to the SD-WAN implementation. However, DART acknowledges and accepts that any delays in circuit availability may result in corresponding delays to the SD-WAN project timeline.

4. Do you have your own ASN?

Yes, we do own our ASN.

5. Based on the background you have provided in your RFP it appears that your layer three routing may be facilitated in your switch fabric? Do you have dedicated routers? Would you consider pulling L3 routing up to the Firewall?

Internal Layer 3 routing is handled by core switches running EIGRP. Edge routers handle BGP. We do not have dedicated standalone routers beyond these. We are open to, and prefer moving Layer 3 routing functions to the firewalls as part of the new design.

6. What are the speeds (1G, 10G) and transmission medium (electrical, optical [what fiber type om1 or om3]) are associated with the links from your IDF’s to your MDF? Same Question from MDF to Router/Firewall.

Cabling requirements will be finalized during the planning phase following vendor selection. Any additional cabling identified as necessary will be procured by DART as a capital expense. Cabling costs are not expected to be included in the scope or pricing of this initial phase.

7. Within your organization can you share the Power Over Ethernet power utilization characteristics on your existing switches?

For pricing purposes, vendors may provide quotes for 48-port PoE+ access switches to represent the eight access switches. While Phase 1 does not require access layer upgrades, inclusion of these switches in Phase 1 may be considered if it proves cost-effective. Phase 2 will be a more in-depth focus on access layer.

8. Do you require any remote access as part of this solution (for example VPN Access)? If yes please indicate how many users use this option and if you have a desire to employ full tunnel or split tunnel.

VPN access is required for remote users, supporting approximately 10–15 concurrent users. Split tunneling is preferred, especially for Vendor group access.

9. Is any 802.1x required? (For both wired endpoints and/or wireless connections).

Yes, we currently are using RADIUS.

10. Is there a requirement for DPI (Deep Pack Inspection) as it pertains to SSL/https Yes, we prefer to have Deep Packet Inspection (DPI) capabilities for SSL/HTTPS traffic. Please include any necessary licensing for this feature as part of the firewall solution.

11. Are you looking to implement any web filtering?

We currently use a third-party cloud-based content filtering service. Firewall-integrated web filtering options will be considered.

12. Do you have any geo-filtering requirements?

Geo-filtering rules exist today, and we would like to continue this, as well as the ability to geo-block VPN connections as well.

13. What routing protocols are you using internally EIGRP?

EIGRP is used internally; BGP is used externally for ISP peering. We do not intend to expand BGP internally.

14. Are you behind the State of Iowa Firewall?

No

15. Your RFP indicates that you have two locations, can you share how many Circuits you have at each location as these are not provided. Did you have interest in making any changes to these circuits (WIN is both an IT and Network Connectivity Provider)?

Each site currently has dual ISP circuits of varying speeds (e.g., 1Gbps primary, 100Mbps backup). We are already finalizing contracts for new dual 1Gbps diverse ISP circuits at each site, including the new third site. Therefore, vendors do not need to include internet circuits in their quotes.

16. Are you able to provide a Blueprint for each location for the purpose of overlaying and modeling a comprehensive wireless solution?

For Phase 1 of the new building, only basic Wi-Fi coverage is needed. When the full buildout occurs, detailed site plans will be shared, and the Wi-Fi design will be reassessed and more inelegantly deployed.

17. Can you provide any switch density guidance? IE you have shared the number of switches you have but there is no indication of port utilization.

Phase 1 focuses primarily on core and firewall upgrades and does not include a comprehensive access layer deployment. For planning purposes, vendors should assume approximately eight access switches—five at the primary site and three at the secondary—representing the main access stacks in the server rooms. Port utilization on these switches typically ranges from 60 to 70 percent.

While the replacement of remote access switches is not planned for Phase 1, consideration may be given to including these eight access switches within Phase 1 if it presents a cost-effective opportunity. Otherwise, access layer upgrades will be planned for subsequent phases. This estimate is intended to assist with initial budgeting and may be refined during detailed design.