Request for Proposal (RFP) for MIDAS VPN Configuration at the International Organization for Migration (IOM)

The International Organization for Migration (IOM) is a United Nations agency that provides services and advice concerning migration to governments and migrants, including internally displaced persons, refugees, and migrant workers.

Applications are invited for:

Title: Request for Proposal (RFP) for 2 Years Long Term Agreement (LTA) for MIDAS VPN Configuration for Various Nigeria Immigration Service (NIS) Locations

RFP No.: NG10-22-059

Preamble
Nigeria Immigration Service (NIS) currently operates an integrated virtual private network (VPN) over Wide Area Network (WAN) for its Migration Information and Data Analysis System (MIDAS), as part of its IT infrastructure which contribute to the enhancement of the communication among the various entry/ exit locations already connected to this network. The NIS MIDAS architecture combines the use of fiber, radio and VSAT in specific terrains to have seamless interconnections resulting in an overall network architecture design of a Star Topology combined with fiber optic and radio backhaul links.

Having already carried out the setup and configuration of a Dynamic Multipoint Virtual Private Network (DMVPN) for secured data transfer between the Nigeria Immigration Service Headquarters (NIS HQ), five (5) international airports, seven (7) state commands and their corresponding border control points (BCPs), IOM is looking for a qualified vendor to support its planned DMVPN expansion across several locations of the Nigeria Immigration Service (NIS) using IPSec and GRE in a scalable way on a 2 Year Long Term Agreement (LTA).

The main objective of this contract is to engage the services of a Technical Expert on a 2 Year Long Term Agreement (LTA) to expand on the existing MIDAS DMVPN configurations, using NIS provided network security equipment, and subnet classification with initial maintenance period of 12 months. To ensure smooth connectivity across all sites (present and future) of Nigeria Immigration Service IT infrastructure, the successful vendor will provide detailed specifications on best practices in secured infrastructure management.

Technical Requirements for the Configuration

• The new Cisco devices (Cisco ISSR 4300/ Meraki routers and ASA 5506-X/Meraki firewalls) must be installed and configured on the same physical LAN used for the MIDAS DMVPN.
• The DMVPN router should be reachable through the internet using a public IP.Network Address Translation (NAT) must not be deployed.
• Where required, firewalls (Cisco ASA 5506-X/ Meraki) devices will be configured for security purposes only, in addition to the router serving as the outside communication device.
• The new DMVPN devices must be able to establish IPSec tunnels to other DMVPN hub sites and send encrypted traffic through them, to allow the IPSec protocols to and from the DMVPN router’s public IP address, using ESP, GRE, IKE (UDP 500) and NAT-T (UDP 4500) protocols.
• The network configuration notes and diagrams will be pulled from the device, submitted and checked against stated compliance lists.
• The new DMVPN configuration must rely on two Cisco technologies: Next Hop Resolution Protocol (NHRP) and multipoint GRE tunnel interfaces. This should not alter the standard-based IPSec VPN tunnel, but allow for a modification of their configuration such as:
  • Protocols to use must be defined (mode, authentication and encryption, message digest algorithm, site authentication).
  • The required definition and use of pre-shared secret keys during inter-site collaborations.
  • Clearly define and prove that the VPN platform to be used is Dynamic Multipoint VPN.
  • Clearly define IP addresses to be used for data exchange over the link.
  • Define and set appropriate filter rules on the network devices (firewalls, routers, switches) over the link as required e.g. allow UDP port over 5000 for ISAKMP, allow UDP 4500 traversal, allow IP protocol 50 over ESP, etc
  • Implemented protocols and configuration must be submitted in a txt format. This will be copied directly from the device to check for compliance and standards.
  • Link testing will be done on a site to site basis e.g. BCP to state office, and state office to HQ.
• The network configuration notes and diagrams will be extracted from the devices, submitted, and checked against above stated compliance lists.

Application Closing Date
25th April, 2022.

Submission of Documents
The Proposals must be delivered by hand to IOM with office address at:
55 Hassan Musa Katsina Street,
Asokoro, F.C.T - Abuja.

Note

• No late proposal shall be accepted, and bids not registered in the bid registry will not be accepted.
• IOM reserves the right to accept or reject any proposal and to annul the selection process and reject all Proposals at any time prior to contract award, without thereby incurring any liability to affected Service Providers/ Consulting Firms.

Related Documents

• Request for Proposal (PDF).
• Terms of Reference (PDF).
• Declaration of Conformity to Suppliers (PDF).