The following change will enhance the security of the switch and we will be able to detect rogue platforms/ boot process starting from untrusted

(1)

SI.No. RFP Page No. RFP Clause No. RFP Clauses Clarification Sought Bank's Reply

1 3.1 78

During system boots, the system’s software signatures should be checked for integrity. System should capable to understand that system OS are authentic and unmodified, it should have cryptographically signed images to provide assurance that the firmware & BIOS are authentic.

The following change will enhance the security of the switch and we will be able to detect rogue platforms/ boot process starting from untrusted sources. "During system boots, the system’s software signatures should be checked for integrity. System should capable to understand that system OS are authentic and unmodified, it should have

cryptographically signed images to provide assurance that the firmware & BIOS are authentic. Basically System should verify the integrity of platform and ensures the boot process started from a trusted combination." We request the bank to modify the point in the following manner, inline with security being the top most priority.

As per RFP

2 2.15 76

Solution should have capabilities to go back in time up to 24 hours and see the cause of a network issue

Consider a scenario, wherein the issue occurs on a Friday/Saturday morning, by the time the IT officials come to office on Monday ( post the 24 hour timeline) the current solution will not allow us to go back in time beyond 24 hours. We request the bank to modify the clause in the following manner " Solution should have capabilities to go back in time up to 3 days and see the cause of a network issue." This will be extrmely useful in scenarios wherein the issue occurs over the weekend.

As per RFP

3 2.4 79

Router should have minimum 4 GB of on- board/inbuilt DRAM/RAM for data plane + control plane processes and 2 GB Flash from Day 1.

We recommend which can be upgradable to 8GB DRAM for future use and scalability without a change in the hardware. Being the external router ( Internet facing), this flexibility will allow the bank to expand/ scale/ include additional entires etc while protecting there investment. Please do modify the point in the following manner " Router should have minimum 4 GB of on- board/inbuilt DRAM/RAM from day 1 for data plane + controlplane processes upgradable to 8 Gb in future"

As per RFP

4 3.12( C ) 30

Prices quoted as above shall be valid for the whole contract duration. Price validity for 5 years cannot be gauranteed due to external market conditions such as dollar fluctuations, government duties etc.We request

the bank to modify the price validity clause to 1 year. Please refer corrigendum-1 of the RFP

5 31 21

Mean Time To Respond (MTTR) is a basic measure of the maintainability of repairable items. It represents the average time required to repair a failed component or device on proactive basis. MTTR for Wireless LAN controller should be Fifteen minutes and restoration time should be thirty minutes from failure/incidence occurred. In case of any hardware issue, bidder need to provide RMA Network Device of same make and model or above model (with all interfaces/modules) with in 4 hour of reporting. Bidder has to ensure all kind of troubleshooting should not be go beyond 15 minutes with the non-responding hardware, bidder has to ensure the availability of field engineer or sufficient resources at centralized location for arranging the support/ replacement of faulty hardware as per MTTR mentioned above

Segregation of the Inventory into critical and non critical devices will help identify SLA in terms of 4 hours/ 8*5 NBD.

As per RFP

6 Additional Points

The proposed switches controller model should be IPv6 Logo Certified from www.ipv6ready.org

This certification is an Industry standard and we request the bank to include the same for the entire switching portfolio. It has already been included for Core Switches and External Routers.

As per RFP

7

The same firmware should be present across all the switches that are part of the RFP. This will help the bank in upgrade of switches/ in classifying certified images etc. The same firmware will lead to less for troubleshooting and easier management of multiple switches which form the bulk of the inventory.

As per RFP

8 50 4.14. Payment

i. On Delivery: Forty percentage (40%) of the Total amount of delivered wireless LAN controller…….

In interest of having healthy cashflow and avoid un-necessary loading of interest charges on the project cost we request to modify the clause as: i. On Delivery: Seventy percentage (70%) of the Total amount of delivered wireless LAN controller...

Please refer corrigendum-1 of the RFP Request for Proposal For Procurement of Wireless LAN Controller & Network Devices, at Bank’s Head Office (BKC).

RFP Ref: BOI/HO/IT/NW/BKC-WLC/RFP-2020 Dated 16/12/2020 Reply to Pre Bid Queries

(2)

9 50 4.14. Payment

ii.On Installation / commissioning and acceptance: Fifty percentage (50%) of the amount of commissioned Wireless LAN controller on installation….

In interest of having healthy cashflow and avoid un-necessary loading of interest charges on the project cost we request to modify the clause as: ii.On Installation / commissioning and acceptance: Twenty percentage (20%) of the amount of commissioned Wireless LAN controller on installation….

Please refer corrigendum-1 of the RFP

10 51 4.14. Payment

Balance Payment: Balance 10% of total amount of ordered and commissioned Wireless LAN controller will be paid after the expiry of warranty

We request to modify the clause as:

Balance Payment: Balance 10% of total amount of ordered and commissioned Wireless LAN controller will be paid after the expiry of warranty or upon submission of PBG of 10% as per RFP conditions.

11 52 B. Payment of

AMC

The AMC charges of applicable Wireless LAN controller shall be paid by the bank quarterly in arrear within forty five (45) days from the date submission of invoice

Request to consider payment as:

The AMC charges of applicable Wireless LAN controller shall be paid by the bank quarterly in advance within Thirty (30) days from the date submission of invoice.

As per RFP

12 53 C. Payment terms

of FMS

The Facility Management charges as per Format – 6.3 part III shall be paid by the bank in equal yearly installments within Forty Five (45) days

Also, Request to consider payment as below:

The Facility Management charges as per Format – 6.3 part III shall be

paid by the bank in equal Quarterly installments within Thirty (30) days As per RFP

13 16

3.2.3. Annual Maintenance Contract (AMC)

15. Bidders to strictly quote in the format and for periods as mentioned in price bid format 6.3 Part I, Part II, Part III, Part IV and Part V.

There is no Part V mentioned in the commercial bid format 6.3. Request bank to amend the clause as "Bidders to strictly quote in the format and for periods as mentioned in price bid format 6.3 Part I, Part II, Part III, Part IV".

Request Bank to remove Part V

There is no Part V mentioned in the commercial bid format 6.3. Request bank to amend the clause as "Bidders to strictly quote in the format and for periods as mentioned in price bid format 6.3 Part I, Part II, Part III,

Part IV". Please refer corrigendum-1 of the RFP

14 32

3.17 Period of Validity of Bids &

repeat orders

3.17.3. The Bank shall have the right to place the order to either single or multiple locations, for all locations or new locations which can be spread over the contract period of five years from the date of award of contract. The Bank shall have the right at its absolute discretion to place further orders on the selected bidder for future requirement on the rates finalized for various items and services (including FMS and AMC) during the period of contract Such orders, if any, shall be governed by this RFP and agreed terms

Request Bank to amend the Clause as "The Bank shall have the right to place the order to either single or multiple locations, for all locations or new locations which can be spread over the contract period of one years from the date of award of contract. The Bank shall have the right at its absolute discretion to place further orders on the selected bidder for future requirement on the rates finalized for various items and services (including FMS and AMC) during the period of contract Such orders, if any, shall be governed by this RFP and agreed terms".

15 36

3.26 Opening of Price Bids / Reverse Auction

3.26.4. The Bank shall conduct two reverse auction (RA) for discovering the L1 bidder for new wireless LAN controller (Format 6.3 Part IV) and for new/existing network equipment (Format 6.3 Part V) separately. L1 will be decided separately as per type of solution required on the basis of Closed Bid/Reverse Auction. Bidders have to submit the separate price bids in separate envelops as stated in 3.18.2 for type of network equipment

We assume this is typo mistake, there will be only one reverse aution (RA) for discovering the L1 bidder for for new wireless LAN controller (Format 6.3 Part IV).

Request bank to clarify on this clause. Please refer corrigendum-1 of the RFP

16 37

3.27 Delivery Schedule for

Devices:

3.27. The deliverables and products and/ or Systems and/or Services covered under this bid are to be supplied, delivered within 6 weeks from the date of purchase order and installation within 8 weeks from the date of purchase order. No credit will be given to early deliveries

Request bank to amend the clause as "The deliverables and products and/ or Systems and/or Services covered under this bid are to be supplied, delivered within 10 weeks from the date of purchase order and installation within 16 weeks from the date of purchase order. No credit will be given to early deliveries"

OEM take 6-8 weeks to deliver the material to SI consideribg Covid 19 and considering pre dispatch inspection, it may take 10 weeks time, so request Bank to increase the delivery timeline from 6 to 10 weeks from the date of PO placement. Also as it involve passive cabling installation and multiple OEM products, so we request Bank to consider atleast 16 weeks of installation from the date of PO placement.

17 37 3.28.

Post-qualification

3.28.1 After bids evaluation on the parameters mentioned above, bank shall conduct two separate reverse auctions to discover the L1 bidder for new wireless LAN controller (Format 6.3 Part IV) and for new/existing network equipment (Format 6.3 Part V) separately. L1 will be decided separately as per type of solution required on the basis of lowest evaluated bidder in Closed Bid/Reverse Auction process.

We assume this is typo mistake, there will be only one reverse aution (RA) for discovering the L1 bidder for for new wireless LAN controller (Format 6.3 Part IV).

Request bank to clarify on this clause.

(3)

18 47 4.10 Delivery & Documentation

4.10.1. Delivery, Installation, commissioning and comprehensive maintenance of the devices at BOI Head Office at BKC shall be made by the supplier in accordance within eight (8) weeks from the date of order. No credit shall be given to early deliveries

Request bank to amend the clause as "Delivery, Installation, commissioning and comprehensive maintenance of the devices at BOI Head Office at BKC shall be made by the supplier in accordance within Sixteen (16) weeks from the date of order. No credit shall be given to early deliveries"

OEM take 6-8 weeks to deliver the material to SI consideribg Covid 19 and considering pre dispatch inspection, it may take 10 weeks time, so request Bank to increase the delivery timeline from 6 to 10 weeks from the date of PO placement. Also as it involve passive cabling installation and multiple OEM products, so we request Bank to consider atleast 16 weeks of installation from the date of PO placement.

19 50 4.12 Support

4.12.6. During Support Period, Supplier guarantees an Uptime of 99.99 % on monthly basis for the entire/core solution proposed. Please refer to Clause 4.35 for details of uptime required by the Bank.

Request bank to amend the clause as "During Support Period, Supplier guarantees an Uptime of 99.99 % on quarterly basis for the entire/core solution proposed. Please refer to Clause 4.35 for details of uptime required by the Bank."

Request Bank to consider SLA uptime of 99.99% on monthly basis. Also same is mentioned in the 3.2.5 Requirements from Bidders

20 54

4.20.1 LD on Network Device

Delivery/ Installation:

i) If the Supplier fails to deliver any or all of the products or perform the services within a period of six week from the date of purchase order, the Bank shall, without prejudice to its other remedies under the Contract, deduct from the Contract Price, as liquidated damages, a sum equivalent to 0.5% per week or part thereof of the total price ordered out of contract price subject to maximum deduction of 10% of the price of the ordered Goods for each week or part thereof of delay, until actual delivery. Partial delivery shall be treated as non-delivery of the entire goods ordered. Once the maximum is reached, the Bank may consider termination of the Contract. All items placed under one purchase order to be delivered within the stipulated delivery period.

Request bank to amend the clause as "If the Supplier fails to deliver any or all of the products or perform the services within a period of ten week from the date of purchase order, the Bank shall, without prejudice to its other remedies under the Contract, deduct from the Contract Price, as liquidated damages, a sum equivalent to 0.5% per week or part thereof of the total price of the undelivered product/products subject to maximum deduction of 10% of the price of the total price of the undelivered product/product for each week or part thereof of delay, until actual delivery. Once the maximum is reached, the Bank may consider termination of the Contract. All items placed under one purchase order to be delivered within the stipulated delivery period

As per RFP 21 54 4.20.1 LD on Network Device Delivery/ Installation:

ii) All equipments ordered shall be installed by the bidder at the respective sites within a period of eight week from the date of purchase order. If the supplier fails to install and commission all the equipments and make it functional to the satisfaction of the bank within from the date of delivery of all items, the Bank shall, without prejudice to its other remedies under the contract, deduct from the contract price, as liquidated damages, a sum equivalent to 0.5 % per week or part thereof of the total price ordered out of contract price subject to maximum deduction of 10% of the price of the ordered goods for each week or part thereof of delay in installation, commissioning and acceptance by bank until completion. Partial installation shall be treated as non-commissioning of the entire goods ordered. Once the maximum is reached, the bank may consider termination of the contract.

Request bank to amend the clause as "All equipments ordered shall be installed by the bidder at the respective sites within a period of sixteen week from the date of purchase order. If the supplier fails to install and commission all the equipments and make it functional to the satisfaction of the bank within from the date of delivery of all items, the Bank shall, without prejudice to its other remedies under the contract, deduct from the contract price, as liquidated damages, a sum equivalent to 0.5 % per week or part thereof of the total price of uninstalled product/products subject to maximum deduction of 10% of the price of the uninstalled product/products for each week or part thereof of delay in installation, commissioning and acceptance by bank until completion. Once the maximum is reached, the bank may consider termination of the contract."

22 54

4.20.1 LD on Network Device

Delivery/ Installation:

The LD for delivery of equipments and delivery of services shall be applicable concurrently and cumulatively. However, LD as mentioned above shall be applied to the entire amount of the purchase order subject to a maximum of 10% of the order value.

Request bank to amend the clause as "The LD for delivery of equipments and delivery of services shall be applicable concurrently and cumulatively. However, LD as mentioned above shall be applied to the entire amount of the undelivered/uninstalled products subject to a maximum of 10% of the undelivered/uninstalled products."

As per RFP

23 55

4.21.1. Cancellation of the

Contract:

vi. If uptime of any device is less than 99.99% for 2 months or more in any quarter, during the contract period.

If uptime of any device is less than 99.99% for 2 quarter or more in any

(4)

24 62 Uptime/SLA:

4.35. The entire solution is required to be up and running for 99.99% on a monthly basis, barring scheduled and agreed upon downtime for maintenance or training purposes. That is, the system should be up and available to the Bank personnel on all working days with an uptime of 99.99%.

As 4 hour window consider for the replacement of the equipment, to maintain 99.99% on individual equipment is not possible, so 99.99% uptime should on redundant solution in which one device is down and other is working. Also any device which is not in redundant mode, 99.99% uptime is not achievable. So request bank to consider 99.99% uptime for redundant solution only.

Request bank to amend the clause as "The entire solution is required to be up and running for 99.99% on a quarterly basis, barring scheduled and agreed upon downtime for maintenance or training purposes. That is, the system should be up and available to the Bank personnel on all working days with an uptime of 99.99%.

25 62 Uptime/SLA:

4.35. The selected bidder shall guarantee for each network device uptime of 99.99% during warranty and also during AMC which shall be calculated on monthly basis. The selected bidder shall provide call log-in procedure, preventive break down/corrective maintenance during warranty and AMC.

Request bank to consider the uptime of 99.99% on quarterly basis during warranty and also during AMC period. Request bank to consider uptime

of 99.99% on quarterly basis. Please refer corrigendum-1 of the RFP

26 67 Insurance

4.40. It is the responsibility of the bidder to insure the equipment’s installed at the sites against all risks and the charges are to be borne by the bidder. The insurance shall be against all risks basis including War Risks and Strikes, valid during contract period of 5 years.

As material will be kept at Bank premises and bidder will not have full accesses of the material all the time, so we request Bank to modify the clause.

Request Bank to consider bidder insurance responsibility till the hand over of the material at the site, thereafter it should be bank responsibility to insure the material in their premise.

As per RFP

27 92 FORMAT – 6.3

Price Schedule PART I

SCHEDULE FOR PRODUCT WITH 3 YEARS WARRANTY COST 4. Wireless Access Switches

Request Bank to modifiy it with Wireless Access Points

This is typo mistake, it should be Wireless Access Points. Please refer corrigendum-1 of the RFP

28 93 FORMAT – 6.3

Price Schedule PART II

SCHEDULE FOR ANNUAL MAINTENANCE COST 4. Wireless Access Switches

Request Bank to modifiy it with Wireless Access Points

This is typo mistake, it should be Wireless Access Points. Please refer corrigendum-1 of the RFP

29 129 Format 6.21 – UNDERTAKING OF AUTHENTICITY OF SOLUTION (HARDWARE AND SOFTWARE)

With reference to the subject matter, we hereby undertake that all the

components/parts/assembly/software used in the Solution, Hardware, Application Server Software and Backup software for Proposed Solutions shall be original and new components / products only, from respective OEMs of the products and that no refurbished / duplicate / second hand components / Parts / Assembly / Software are being used or shall be used. In case of default and we are unable to comply with above at the time of delivery or during installation, we agree to take back entire setup (i.e. Servers, Application Server Software and Backup software) for network switches without demur, if already supplied and return the money if any paid to us by you in this regard

There is no requirement of server hardware, application server software and backup software mentioned in the RFP. Request to modify the format 6.21 for network devices.

This is typo mistake, format 6.21 should be network devices instead of

server hardware, application server software and backup software. _{As per RFP}

30 115

FORMAT 6.14 CONFIRMITY TO

ELIGIBILITY CRITERIA

The Bidder should either be the OEM or an authorized partner with the premium or equivalent partnership level of the OEM for the last minimum 3 years (Either the authorized partner on behalf of the Principal / OEM or Principal / OEM itself can bid but both cannot bid simultaneously for the same item / product for this tender.).

Certificate / Letter from OEM / OEMs to be attached.

Request modification of the clause as:

The Bidder should either be the OEM or an authorized partner of the OEM Or submission of authorization from OEM to submit their solution for this RFP. (Either the authorized partner on behalf of the Principal / OEM or Principal / OEM itself can bid but both cannot bid simultaneously for the same item / product for this tender.).

MAF / Certificate / Letter from OEM / OEMs to be attached.

As per RFP

31 70 High Availability

The controller shall support new AP hardware without need for upgrading entire controller software.

Please remove this point or make it optional.

If new AP hardware is coming up with some latest technology then for controller based deployment the controller software should also be having that feature to support the new AP hardware and software.

The controller shall support rolling AP upgrade Please change to live upgrade of Access point.

Rolling AP upgrade is OEM specific term, and supported by one specific OEM only

The controller shall support rolling AP upgrade without need for clustering Please change to AP upgrade with or without need for clustering Different OEM is having different technique to update the AP. For live-upgrade without downtime, controller must be in cluster so that user will not see any downtime during AP upgrade

(5)

34 70 Software

The controller shall support standard-based, secure

AP-Controller data & control protocol like CAPWAP. Protocol that has known vulnerability like PAPI cannot be used.

Please remove Protocol that has known vulnerability like PAPI cannot be used.

Please change to controller should support control protocol inside IPsec tunnel.

The PAPI protocol is used by Aruba wifi products, for a number of management and control functions. By default, ArubaOS uses PAPI encapsulated inside IPsec for the majority of these functions - a feature called "CPsec" or "Control Plane Security".

Aruba does not used normal PAPI, Aruba uses CPsec or "Control Plane Security" on Top of PAPI, which means PAPI runs inside IPsec to make it secure communication between AP and controller.

CAPWAP was also having the vulnerability,

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper input validation on fields within CAPWAP Discovery Request packets by the affected device. An attacker could exploit this vulnerability by sending malicious CAPWAP Discovery Request packets to the Cisco WLC Software. A successful exploit could allow the attacker to cause the WLC Software to disconnect associated access points (APs). While the APs disconnect and reconnect, service will be unavailable for a brief period of time, resulting in a DoS condition.

As per RFP

35 71 Software

The controller shall support Multi Languages options from embedded GUI Management Please remove this point.

In India, majority of organisation works in English language and Majority of OEM is having GUI in English. There is no requirement of Multi Languages options from embedded GUI Management in India setup.

36 71 RF management

The controller shall support optimized, automatic channel width (20~160Mhz) selection over 5GHz, 802.11ac

Please change to "The controller shall support optimized, automatic channel width (20~160Mhz) selection over 5GHz, 802.11ac and 802.11ax."

802.11ax is the latest wireless technology, so controller should support 802.11ax access points as well.

As per RFP

37 71 Mesh

Mesh Backhaul interface shall support full duplex operation using wired daisy chaining Please remove this point.

wired daisy chaining is OEM specific feature.

As per RFP

38 71 BYOD & Security

The controller shall provide Device Profiling using multiple profiling methods to reduce false-detection

Please remove this point.

Only one OEM is having limited option (HTTP and DHCP) in their controller to do the device profiling.

for accurate device profiling there will be different technique to do the profiling like HTTP User-¬‐Agent • MAC OUI • Active Syncplugin • NAC Agent • SNMP • Subnet Scanner • IF-¬‐MAP • MDM • TCP Fingerprinting

Device Profiling will be done through policy server and BoI is using dedicated Policy server and NAC solution.

(6)

The system shall provide secure onboarding service for both employee and guest based on standard-based security protocol Proposed system shall not use public cloud as user data repository

Please Clarify this point.

Whether, we have to propose separate onboarding solution? If yes then separate software is required for employee and guest onboarding and how many onboarding users are there based on that we can take the required license.

Secured Onboarding solution is separate solution from wireless controller.

As per RFP

The controller shall be able to embedded custom web portal page (HTML) to fully customize user experience without additional cost or extra box

embedded custom web portal page (HTML) to fully customize user experience is not required for Corporate user. For Guest and BYOD access separate solution is required in which Guest captive port can be customised based on the requirement of Bank.

As per RFP

The controller shall support Identity PSK for on boarding Please remove this point.

Identity PSK used by one specific OME. Please change to solution should support MPKS with WPA3

42 73 1

Access Point shall support 4x4 MIMO on both 2.4 and 5GHz radio interfaces Please change to " Access Point shall support 4x4 MIMO 5GHz 802.11ax and 2x2 MIMO 2.4GHz 802.11ax."

Now industry is moving toward wifi-6,so it is recommendation to have access points with Wi-Fi 6 from day one

As per RFP

43 73 2

Access Point shall be able to powered up using PoE (.af) and should support full features with PoE+

Please change to " Access Point shall be able to powered up using PoE (.af)/ PoE (.at) and should support full features with PoE+ (802.3af/802.3at)"

Higher throughput access points required 802.3at power to give full feature and functionality.

44 73 3

Access Point shall support assurance, packet capture, sensor capabilities Please remove assurance

" for service assurance, separate hardware and software are required" As per RFP

45 73 7

Access Point shall ship with metal-based mounting bracket for durability and reliability Please remove this point.

Different OEM is having different type of mounting bracket based on the AP and mounting KIT design.

As per RFP

46 73 9

Access Point shall support Console port that uses Standard Port (RJ-45) type connection

Please change to "Access Point shall support Console port that uses Standard Port (RJ-45) type connection or USB physical jack or Micro-USB"

OEMs are having different option to design the console port in their access points.

As per RFP

47 73 10

Access Point should have 1x 100, 1000, 2500 Multigigabit Ethernet (RJ-45) – IEEE 802.3bz

Please change to "Access Point should have 1x 100, 1000, 2500 Multigigabit Ethernet (RJ-45) – IEEE 802.3bz and one 10/100/1000 Mbps port with Link aggregation (LACP) "

In access point redundant port should be required for redundancy and increased capacity

As per RFP

48 73 13

Must Support data rate upto 5 gbps. Please change to "Must Support data rate minimum 2.5 Gbps" All the access switches ask for 10/100/1000 Mbps port. Having 5 Gbps throughput on AP will not give the better performance if the underline switch is having only 1G downlink port to connect the Access point

(7)

49 73 14

Must support minimum of 23dbm of transmit power in both 2.4Ghz and 5Ghz radios. And should follow the local regulatory Norms.

Please change to " Must support minimum of 21dbm of transmit power in both 2.4Ghz and 5Ghz radios. And should follow the local regulatory Norms."

Maximum (aggregate, conducted total) transmit power (limited by local regulatory requirements i.e WPC)

As per RFP

50 74 26

Access Point Must continue serving clients when link to controller is down. It should also have option to authenticate user through Radius server directly from Access Point during link unavailability to controller.

Please remove this point. This is specific to OEM.

If Controller is down, all the security feature like Application firewall, Deep Packet Inspection, WIPS/WIDS, Spectrum analysis will not work properly. there will not be any traffic visibility what the user are accessing in case of controller is down.

in Bank, security is the main parameter while deploying any wi-fi solution

51 74 31

Access point should be wifi 6 certifiable. Please change to "Access point should be wifi 6 certified" BOI should have all Certified wifi 6 AP from day one.

The Wi-Fi CERTIFIED 6 certification program from Wi-Fi Alliance and is now available and delivers the best user experience with devices based on IEEE 802.11ax. The certification program brings new features and capabilities that enable substantially greater overall Wi-Fi network performance in challenging environments with many connected devices. With adoption of the latest Wi-Fi generation increasing, product vendors and service providers can trust Wi-Fi CERTIFIED will distinguish Wi-Fi 6 products and networks that meet the highest standards for security and interoperability. Wi-Fi CERTIFIED 6 provides significant capacity, performance, and latency improvements to the entire Wi-Fi ecosystem, while ensuring products across vendors to work well together to deliver greater innovation and opportunity.

Wi-Fi CERTIFIED 6 delivers advanced security protocols and requires the latest generation of Wi-Fi security like Wi-Fi CERTIFIED WPA3

52 74 1.3

Solution should have self learning capabilities like discovering the devices, getting onboarded using Plug and play and creating a topology automatically

Please change to " Solution should have capabilities like discovering the devices, getting onboarded using Plug and play and creating a topology" The mentioned specific feature support by Specific OEM.

As per RFP

53 74 1.6

Solution should have workflows defined to complete each configurations step by step e.g. RMA process

RMA process will be done through TAC not through management tool. Some specific OEM is having this process in their NMS tool.

As per RFP

54 74 1.6

Solution should have capabilities to monitor the health of network devices, clients connected to the devices and application accessed over the network.

Please change to " Solution should have capabilities to monitor the health of network devices, clients connected to the devices over the network." The mentioned specific feature support by Specific OEM.

Application visibility for wired user is not possible

55 75 2.1

Solution should have dashboard to provide root cause analysis and recommendations to fix problem.

Please change to " Solution should have dashboard to provide root cause analysis "

The mentioned specific feature support by Specific OEM.

56 75 2.5

Dashboard should apply AI /ML logics to provide insights about deviations in number of connected clients comparing past data of AP.

Please change to " Dashboard should provide insights about number of connected clients comparing past data of AP."

The mentioned specific feature support by Specific OEM.

(8)

57 75 2.6

Dashboard should provide throughput deviation per radio comparing past performance of radio.

Please change to " Dashboard should provide throughput per radio and performance of radio."

The mentioned specific feature support by Specific OEM

58 75 2.8

Solution should have capabilities to analyze the database of clients connectivity, devices statistics, applications performance statistics and need to come up with remediation plan in minutes against the issues.

Please change to " Solution should have capabilities to analyze the clients connectivity, devices statistics, applications performance statistics ."

59 75 2.11

Solution should have capabilities to integrate with SNMP, SYSLOG, DHCP, DNS and NETFLOW Servers etc. etc. to capture the network data.

Please change to " Solution should have capabilities to integrate with SNMP, SYSLOG, DHCP, DNS"

The Netflow feature support by Specific OEM

60 75 2.12

Solution should support wireless sensors to simulates real-world client experiences. Sensors can provide pro-active information about the health of your network

Please change to " Solution should support wireless sensors to the information about the health of the network ."

61 76 2.18

Solution should provide visualization with location intelligence on map about rouge devices, honeypot, devices sending authentication flood, association flood, interference, etc.

Please change to " Solution should provide visualization with location on map about rouge devices, honeypot, devices sending authentication flood, association flood, interference, etc."

62 76 2.23

Solution should be hardware based with 2x 10Gig multimode fiber Interface from day 1. If bidder is proposing software based solution then bidder to provide required hardware, OS , DB (if any) to install the propose solution.

Please change to " 2x1G port" for NMS, 10G port are not required.

As per RFP

63 76 1.2

Switch shall have 8 GB RAM and 8 GB Flash Please change to "Switch should have minimum 8 GB RAM and 1 GB Flash"

Since switches are ASIC based, RAM and Flash and non-consequential for performance. Gbps performance is is more relevant than RMM and Flash

As per RFP

64 77 2.4

The Switch should support minimum 18K ACLs, 4K IPV4 and 2K IPV6 Multicast routes Please change to " minimum 4K ACLs, 4K IPV4 and 2K IPV6 Multicast routes

All the ACL and multicast traffic will go to Wireless controller. Our controller support role based access so there is no need of such a higher ACL on the switch.

65 77 2.5

Switch shall support application visibility and traffic monitoring with minimum 60 K sflow/jflow/Netflow entries.

Please change to 60 K jflow/netFlow entries or sflow

Netflow is OEM specific protocol which works on number of flow where as sFlow does not work based on number of flow.

Sflow does not defined number of flow.

NetFlow is flow export protocols that aim at aggregating packets into flows. After that, flow records are sent to a collection point for storage and analysis. sFlow, however, has no notion of flows or packet aggregation at all.

sFlow allows for exporting packet data chunks and interface counters, which are non-typical features of flow export protocols.

While flow export can be performed with 1:1 sampling (i.e., considering every packet), this is typically not possible with sFlow, as it was not designed to do so. Sampling forms an integral part of sFlow, aiming to provide scalability for network-wide monitoring.

(9)

66 77 3.1

Should support IEEE Standards of Ethernet: IEEE 802.1D, 802.1 AE, 802.1s, 802.1w, 802.1x, 802.3ad, 802.1ae (256-bit and 128-bit AES), 802.3x, 802.1p, 802.1Q, 1588v2

Please remove 802.1ae (256-bit and 128-bit AES) Please remove 802.1x

Please change to "switch should support IEEE 1588 or Network Time Protocol (NTP) "

AES 256 for link encryption is required when two sites are connected on service provider P2P link (open ISP connectivity). This is not required in campus core network.

PTP protocol is requires at the access switch not at the core switch.(These all features are not ask in any of the other network specification.)

IEEE 802.1x authentication is not required at the core switch, it is required at access switch for end user authentication.

67 77 3.2

Should support mac sec encryption support with based encryption algorithm on hardware Please remove this point.

IEEE 802.1AE MACsec encryption is required when two sites are connected on service provider P2P link. This is not required in campus network.

As per RFP

68 77 3.3

Must support BGP, MPLS, IS-IS, VRF, VXLAN, NAT, OSPF Routed Access, Policy-Based Routing (PBR), PIM SM, and Virtual Router Redundancy Protocol (VRRP) from Day 1

Please remove MPLS, IS-IS, NAT.

MPLS link will not be required at switch, its required at router. NAT is required in Router or firewall not in Core switch IS-IS and OSPF works on same algorithm.

IS-IS protocol is used in service provider enviorement.IS-IS is a link-state routing protocol, operating by reliably flooding link state information throughout a network of routers. Like IS-IS protocol ,OSPF protocol uses Dijkstra's algorithm for computing the best path through the network. Packets (datagrams) are then forwarded, based on the computed ideal path, through the network to the destination.

So for current requirement we can use OSPF instead of IS-IS protocol.

69 77 3.5

Switch should support management features like SSHv2, SNMPv2c, SNMPv3, IGMP, Netconf/YANG.

Please change to Netconf/YANG/REST API

REST APIs is used to enable automation of network operations, monitoring, and troubleshooting of network switch.

70 77 3.6

Switch should support port security, DHCP snooping, Spanning tree root guard, First Hop Security.

Please remove this point or make it optional.

These features are required in Access switch where user is connected and getting the DHCP IP from DHCP host.

71 77 3.8

Should support 802.1x authentication and accounting, IPv4 and IPv6 ACLs and Dynamic VLAN assignment.

Please remove this clause or make it optional

IEEE 802.1x authentication is not required at the core switch, it is required at access switch for end user

As per RFP

72 78 5.3

Switch / Switch’s Operating System should be tested for EAL 2/NDPP or above under Common Criteria Certification.

Please remove this clause or make it optional.

In the wireless access point and Wireless controller there is no such certification is asked for. So pleas remove this from switch as well, or make it optional.

As per RFP

73 78 5.4

The proposed model should be IPv6 Logo Certified from www.ipv6ready.org Please remove this clause or make it optional.

(10)

74 78 1.1

Router have a physical separation between control and data planes. .The Router should support interfaces like Channelized E1/T1, Serial V.35, G.703, LTE, Gigabit. All the modular interfaces on the router should support hot-swap ability feature to accommodate field upgrades without rebooting the router.

Please remove "interfaces like Channelized E1/T1, Serial V.35, G.703, LTE, Gigabit"

Now all the ISP is providing ethernet handoff. So traditional connectivity type is not required in the router.

75 79 2.2

Router should have minimum 4 GB of on-board/inbuilt DRAM/RAM for data plane + control plane processes and 2 GB Flash from Day 1.

Please change to "Router should have minimum 2 GB of on-board/inbuilt DRAM/RAM for data plane + control plane processes and 512 MB Flash from Day 1."

Our Router network operating system don’t have layered software designed ,so we have made a light kernel with all features built in it and we have tested performance and published the results publicly as well. The other OEMs have created layered software and to run the added feature they required higher RAM and Flash to deliver the required performance

In a Router performance is important and not the RAM and Flash, higher the RAM and Flash does not improve performance

As per RFP

76 79 2.4

Router should support minimum 20,00,000IPv4 and 20,00,000IPV6 routes Please change to "1000000 IPv4, 1000000 IPV6 routes.

Such a higher routing entries is not required, if we import all the BGP routes From ISP router in to this router, then also such a higher routing table size is not required.

As per RFP

77 80 5.4 Router should have capability to enable SD-WAN features without hardware upgrade. This feature is not mandatory

Please remove this point. This is not applicable for stand-alone router.

As per RFP

78 80 6.2

Router shall conform to EN 55022 Class A/B or CISPR22 Class A/B or CE Class A/B or FCC Class A/B Standards for EMC (Electro Magnetic Compatibility) requirements.

Please remove all "/Certification.

Class B devices are intended for residential use only

As per RFP

79 80 6.3

Router/Router’s Operating System should be tested and certified for EAL 2/NDPP or above under Common Criteria Certification

As per RFP

80 80 6.4

Router should be IPv6 Certified/IPv6 logo ready Please remove this clause or make it optional.

As per RFP

81 80 1.1.2

Switch should support internal field replaceable unit redundant power supply from day 1 Please remove this point or make it optional.

At the access switch redundant power supply is not required. The infrastructure is used for Wi-Fi. The access point should have high availability and access point should have dual connectivity to different switch.

As per RFP

82 80 1.1.3

Switch should have minimum 4GB RAM and 4GB Flash. Please change to "Switch should have minimum 1 GB RAM and 1 GB Flash"

Since switches are ASIC based, RAM and Flash are non-consequential for performance. Gbps performance is more relevant in access switch.

As per RFP

83 80 1.1.4

Switch should have dedicated slot for modular stacking, in addition to asked uplink ports. Should support for minimum 160 Gbps of stacking throughput with 8 switch in single stack from day 1.

Please change to "Should support for minimum 96 Gbps of stacking throughput with 8 switch in single stack from day 1"

For 48 port 1G switch, the total stack bandwidth required for non-blocking will be 96 Gbps.

(11)

84 81 1.2.1

Switch shall have minimum 176 Gbps of switching fabric and 130 Mpps of forwarding rate Please change to "112 Mpps of forwarding rate"

For switch, switching throughput is required which is the Gbps throughput and switch PDU(protocol datagram unit) is frame. So wire speed switching throughput(Gbps) is required at access switch not the MPPS value

As per RFP

85 81 1.2.4

Switch shall have 1K or more multicast routes Please change to " Switch shall have 1K or more multicast routes/ multicast group"

At the access level switch, Multicast group(IGMP group is required not the multicast routes.

As per RFP

86 81 1.2.5

Switch should support atleast 16K flow entries Please remove 16K flow entries

Flow entries are required in Netflow protocol. NetFlow is OEM specific protocol which works on number of flow where as sFlow does not work based on number of flow.

As per RFP

87 81 1.2.6

Switch should support 128 or more STP Instances. Please change to "Switch should support MSTP instances or 128 or more STP Instances."

STP only supports a single instance. RSTP supports fast convergence and a single instance. MSTP includes the advantages of RSTP, and supports multiple instances

As per RFP

88 81 1.3.6

Switch should support IPv6 Binding Integrity Guard, IPv6 Snooping, IPv6 RA Guard, IPv6 DHCP Guard, IPv6 Neighbor Discovery Inspection and IPv6 Source Guard.

Please change to " Switch should support IPv6 Binding Integrity Guard/IPv6 lockdown, IPv6 Snooping, IPv6 RA Guard, IPv6 DHCP Guard, IPv6 Neighbor Discovery or Inspection and IPv6 Source Guard /Source-port filtering

Operational Security Considerations for IPv6 Networks rfc is in draft stage(draft-ietf-opsec-v6-16)

Different OEM is having different feature to achieve this

As per RFP

89 81 1.3.8

Switch must have the capabilities to enable automatic configuration of switch ports as devices connect to the switch for the device type.

To achieve this functionality, Bank should require policy driven architecture solution, which include policy server and controller to achieve this functionality.

As per RFP

90 81 1.4.1

Switch shall have 48nos. 10/100/1000 Base-T ports and additional 4 nos. SFP+ uplinks ports populated with 2x 10Gig multimode transceivers from day 1

Please change to " Switch shall have 48nos. 10/100/1000 Base-T ports Mbps Base-T ports and additional 2 nos. SFP+ uplinks ports populated with 2x 10Gig multimode transceivers from day 1"

for standard access to core switch uplink subscription is 2:1 so 20Gbps uplink will be sufficient for 48 port 1G switch.

As per RFP

91 82 1.5.2

Switch shall conform to EN 55022 Class A/B or CISPR22 Class A/B or CE Class A/B or FCC Class A/B Standards for EMC (Electro Magnetic Compatibility) requirements.

(12)

92 82 1.5.3

As per RFP

93 82 1.1.2

As per RFP

94 82 1.1.3

As per RFP

95 82 1.1.4

As per RFP

96 82 1.2.1

As per RFP

97 82 1.2.4

As per RFP

98 82 1.2.5

As per RFP

99 82 1.2.6

(13)

100 83 1.3.6

As per RFP

101 83 1.3.8

As per RFP

102 83 1.4.1

As per RFP

103 83 1.5.2

As per RFP

104 84 1.5.3

As per RFP

105 84 1.1.2

As per RFP

106 84 1.1.3

As per RFP

107 84 1.1.4

108 84 1.2.1

As per RFP

109 84 1.2.4

(14)

110 84 1.2.5

111 84 1.2.6

112 85 1.3.6

113 85 1.3.8

As per RFP

114 85 1.4.1

As per RFP

115 86 1.5.2

As per RFP

116 86 1.5.3

As per RFP

Note - We have uploaded Corrigendum 1 dated 05.01.2021, in relation to Reply of Prebid Queries. In case, for any query, the reply has been marked as "Please refer Corrigendum 1 of the RFP" and same has not been mentioned in Corrigendum, shall be deemed as "As per RFP only"