Design, implement and maintain sd-wan and wi-fi services for mtpa head office and nature reserves (3 years)

Closing

• 12 November 2026 at 11:00.

Compulsory briefing session

• 27 October 2026 at 10:00.
• Attendance is compulsory; the link is provided on request.

Bid validity

• 90 days from the advert closing date.

Technical enquiries

• Contact: Jabulile Makhubela
• Email: [email protected]
• Telephone: 013 065 0589

SCM and bidding procedure enquiries

• Contact: Evans Ngwenya
• Email: [email protected]
• Telephone: 013 065 0886

Submission address

Supply Chain Management Unit

Procurement Office, MTPA Finance Block E

N4 National Road, Hall's Gateway

Mataffin

Mbombela, 1200

Note: bidders may not contact any other MTPA staff in connection with this bid.

Submission

• Method: sealed bid deposited in the bid box at the MTPA Supply Chain Management Unit, Procurement Office (MTPA Finance Block E).
• Address: N4 National Road, Hall's Gateway, Mataffin, Mbombela, 1200.
• Closing: 12 November 2026 at 11:00.
• Late bids are not accepted for consideration, regardless of the reason.
• Bids must be submitted on the official forms provided; the forms may not be retyped.
• Bid validity: 90 days from the advert closing date.
• Bidders may not contact any MTPA official other than the SCM and technical contacts named in SBD 1.
• No submission in any manner other than the prescribed one will be accepted.

Returnable documents (certified copies or originals)

• CSD registration.
• Signed bid document, initialled on every page.
• SBD 1 (Invitation to Bid): bidder and contact details, signed as the offer cover page.
• SBD 4 (Declaration of Interest): discloses whether any director, member or shareholder is employed by the state or connected to MTPA staff; a false disclosure disqualifies the bid.
• SBD 6.1 (Preference Points Claim): claims the 20 specific-goals points.
• Activity schedule and Agreement & Contract Data, fully completed.
• Record of Addenda to Tender Documents, where applicable.
• Certified copies of identity documents of owners, directors, members and shareholders.
• CIPC company registration documents.
• Shareholders' agreements, share certificates or Memorandum of Association.
• Proof of authority to sign, such as a company resolution.
• Partnership, joint venture or consortium agreement where applicable, with each partner separately registered.
• The successful bidder must complete and sign SBD 7 (contract form).

Disqualification risks

• Bids delivered after the closing time.
• Any returnable document omitted or left unsigned.
• The bidder, or any of its directors or members, being a person in the service of the state.
• Listing on the Register for Tender Defaulters or the List of Restricted Suppliers.
• Failure to disclose all CSD-registered active companies linked to the bidder's directors.
• Alternative offers are not permitted.

Two-phase evaluation.

Phase 1 — functionality (100 points stated)

• Minimum qualifying score: 70/100. Bids scoring below 70 are disqualified.
• References and signed, dated appointment letters for design and implementation of SD-WAN, MPLS or equivalent work from the last five years (April 2021 to present): 20 points (4 references = 20; 3 = 15; 2 = 10; 1 = 5; none = 0). Letters must be on the client's letterhead and give the organisation and contact person, a description of the services including purchase orders, and telephone and email contact details.
• Proof of relevant SD-WAN partnership or accreditation: 5 points (certification = 5; none = 0).
• Skills and resources, with CVs of the project team: 10 points (degree in Computer Science or equivalent with at least 5 years' experience = 10; IT diploma or 3 years' experience = 5).
• Network diagram of the proposed solution, particularly for poor-reception and underserved areas such as Loskop Dam, God's Window, Songimvelo and Andover: 10 points.
• Real-time CCTV/IP camera streaming from all MTPA sites at latency below 150 ms, evidenced by technical proposal, product datasheets and architecture diagrams: 4 points.
• QoS prioritising video surveillance traffic over other traffic, evidenced by technical specifications and QoS configuration methodology: 2 points.
• Automatic failover and redundancy for uninterrupted video streaming during link failures, evidenced by network design, failover architecture and technical documentation: 2 points.
• Centralised monitoring of connectivity, availability and performance dashboards, evidenced by network design and failover architecture: 2 points.
• Presentation of the SD-WAN architecture diagram covering reserve connectivity, underserved areas and the Wi-Fi solution for tourist sites: 20 points (network diagram 5; solutions for no-line-of-sight environments and gates 5; cybersecurity 5; Wi-Fi and ticketing solution 5).
• Project approach narrative: 15 points (goals and objectives 3; scope outline 2; project plan with timelines 2; cashflow projections 2; stakeholders with defined roles and responsibilities 2; risk and mitigation plan 2; success metrics 2).
• Technical and operational support capacity at Head Office and across the province's nature reserves, with a support plan covering support locations, on-site technician availability and response times, remote support tools and service hours, and similar provincial references: 15 points (on-site and remote = 10; remote only = 5; neither = 0).
• Dashboard reporting and monitoring capability, evidenced by a screenshot: 5 points (no proof = 0).

Phase 2 — presentation

• Bidders reaching the 70-point functionality threshold proceed to a presentation valued at 20 points.

Price and preference points (80/20 system)

• Price: 80 points, scored as Ps = 80(1 − (Pt − Pmin)/Pmin), where Pmin is the lowest acceptable bid.
• Specific goals: 20 points — historically disadvantaged by unfair discrimination on the basis of race 6; women 5; disability 5; youth 4.
• Points for a specific goal are awarded only where ownership in that goal is at least 50 + 1%.
• Failure to submit proof of a claimed specific goal means those points are not claimed.

Scope

• Design, implement and maintain an SD-WAN solution and Wi-Fi services for three years across MTPA Head Office and its nature reserves.
• Supply routers and switches with external I/O ports and rack mounting.
• Two internet lines for Head Office and the DR site: a primary line with a backup line for primary downtime.
• DHCP leasing and static IP addresses.
• Implement QoS and demonstrate how traffic will flow.
• Supply cabinets, switches, access points and power adapters at each location.
• Provide a network diagram of the implemented solution.
• Provide access to a network performance monitoring tool covering SD-WAN, internet and wireless reliability.
• Provide a fault reporting and escalation plan, including the change management process.
• Provide a detailed project implementation plan.
• Provide cybersecurity for the network solution.
• Public Wi-Fi vouchering: uncapped Wi-Fi for chalets in nature reserves and 100 MB for day visitors.
• Security services: advanced SD-WAN and malware protection, real-time intrusion detection and prevention for known and unknown threats, content filtering, high availability, and daily, weekly and monthly reports.

Coverage requirements

• Centralised orchestration and dashboard management; dynamic path selection; application-aware routing; WAN optimisation; multi-site connectivity; LTE/5G failover support; cloud integration; real-time monitoring and analytics; scalability for future expansion.

Live video streaming

• Uninterrupted real-time CCTV and IP camera streaming from Manyeleti Nature Reserve Operations Room, Loskop Dam Nature Reserve, Potholes and Head Office.
• HD and Full HD transmission with minimal latency; latency below 150 ms is required for the streaming criterion.
• Encrypted communication between camera locations and the central monitoring facility using industry-standard VPN protocols.
• Redundancy and automatic failover to guarantee high availability of video services.
• QoS prioritisation of video surveillance traffic during network congestion.
• Simultaneous viewing of multiple camera streams by authorised users without performance degradation.

Security requirements

• End-to-end encryption; secure VPN tunnels; identity and access management; threat detection and prevention; secure remote access; compliance with cybersecurity standards; logging and audit trail capability.

Added services

• Vouchering system with QoS and an integrated firewall.
• Secure Wi-Fi for employees and multiple SSIDs.
• Outdoor Wi-Fi access points covering a 300 m radius at designated buildings or sites.

Sites (bandwidth / users / public Wi-Fi vouchering)

• Head Office: 200 Mbps, 170 users, no vouchering.
• KMIA: 10 Mbps, 5 users, no.
• Andover Nature Reserve: 10 Mbps, 5 users, yes.
• Barberton Nature Reserve: 10 Mbps, 3 users, yes.
• Potholes: 50 Mbps, 10 users, yes.
• Bushbuckridge Nature Reserve: 10 Mbps, 3 users, no.
• Kroomdraai Camp: 10 Mbps, 2 users, yes.
• Loskop Dam Nature Reserve and gate: 50 Mbps, 13 users, yes.
• Lydenburg Station Office: 100 Mbps, 5 users, no.
• Mabusa Nature Reserve: 10 Mbps, 5 users, no.
• Mahushe Shongwe Nature Reserve: 20 Mbps, 5 users, yes.
• Manyeleti OPS Room: 100 Mbps, 10 users, yes.
• Manyeleti Nature Reserve and gate: 50 Mbps and 20 Mbps, 10 users, yes.
• Mdala Nature Reserve: 10 Mbps, 5 users, no.
• Mkhombo Nature Reserve: 10 Mbps, 4 users, no.
• Drie Rondevals: 10 Mbps, 3 users, yes.
• God's Window: 10 Mbps, 3 users, yes.
• Mthethomusha Nature Reserve: 10 Mbps, 5 users, no.
• Nooitgedacht Dam Office: 10 Mbps, 3 users, no.
• Ohrigstad Dam Office: 10 Mbps, 3 users, no.
• S.S Skosana Nature Reserve (Anjawa): 10 Mbps, 10 users, no.
• C M Mahlangu: 10 Mbps, 10 users, yes.
• Songimvelo Nature Reserve and gate: 20 Mbps, 10 users, no.
• Sterkspruit Nature Reserve: 10 Mbps, 5 users, no.
• Swadini (Blyde) Nature Reserve and gate: 10 Mbps, 5 users, yes.
• Zithabiseni: 20 Mbps, 19 users, yes.
• Verloren Vallei Nature Reserve: 10 Mbps, 4 users, no.

Sites without line of sight: God's Window, Loskop, Songimvelo, Andover, Kroomdraai Camp and Ohrigstad Dam; mobile reception is poor.

Presentation (20 points)

• Present the proposed SD-WAN architecture diagram, connectivity for the reserves, solutions for underserved areas and the proposed Wi-Fi solution for tourist sites.
• The presentation must demonstrate network design, coverage, scalability, security, redundancy and service availability across all identified locations.
• Scoring: network diagram 5; solutions for no-line-of-sight environments and gates 5; cybersecurity 5; Wi-Fi and ticketing solution 5.

Project approach (15 points)

• Narrative description of the project approach and plan, including design and delivery timelines or phases.
• Scoring: goals and objectives 3; scope outline 2; detailed project plan with timelines 2; cashflow projections 2; stakeholders with defined roles and responsibilities 2; risk and mitigation plan 2; success metrics 2.

Network diagram (10 points)

• Diagram of the proposed solution, particularly for poor-reception and underserved areas such as Loskop Dam, God's Window, Songimvelo and Andover.

References

• Signed and dated appointment letters plus contactable references from the last five years (April 2021 to present) for design and implementation of SD-WAN, MPLS or equivalent.
• Documents must be on the client's letterhead and include the organisation and contact person, a description of the services with purchase orders, and telephone and email contact details.
• Scoring: 4 references 20 points; 3 = 15; 2 = 10; 1 = 5; none = 0.

Accreditation

• Proof of a relevant SD-WAN partnership or accreditation scores 5 points; no certification scores 0.

Personnel

• CVs of the project team: a degree in Computer Science or equivalent with at least 5 years' experience scores 10; an IT diploma or 3 years' experience scores 5.

Support capacity

• A support plan is required showing where support will be provided (Head Office and nature reserves), on-site technician availability and response times, remote support tools and service hours, and previous contracts or references demonstrating similar provincial coverage.
• On-site and remote support scores 10; remote only 5; neither 0.

Other

• The service provider must supply its own administrative support staff, with qualifications and experience attached.
• MTPA may contact references without informing the bidder.

Pricing

• Price carries 80 of the 100 preference points, scored as Ps = 80(1 − (Pt − Pmin)/Pmin), where Pmin is the lowest acceptable bid.
• Prices are quoted excluding VAT, with totals including VAT.
• Pricing must follow the prescribed schedule in five parts:

1. Implementation and installation: solution design and architecture; Head Office installation and configuration; reserve site installation and configuration; network equipment supply and installation; firewall/security configuration; Wi-Fi installation and configuration; CCTV/IP camera connectivity configuration; electronic ticketing connectivity; network testing and commissioning; training and knowledge transfer.
2. Monthly SD-WAN connectivity services per location over 36 months: Head Office, Loskop Dam, God's Window, Songimvelo Nature Reserve, Andover Nature Reserve, other MTPA reserves, and reserve entrance gates.
3. SD-WAN equipment and licensing: edge devices, controller/management platform, firewall/security devices, network switches, Wi-Fi access points and ticketing system, software licences, monitoring/dashboard licence, and other required equipment.
4. Support and maintenance over 36 months: remote technical support, on-site technical support, preventative maintenance, network monitoring, incident management and fault resolution, and equipment maintenance.
5. Underserved and no-line-of-sight areas: Loskop Dam, God's Window, Songimvelo Nature Reserve, Andover Nature Reserve, entrance gates and other underserved areas, priced as once-off and monthly costs.

• A separate detailed pricing schedule is required for all MTPA sites identified in the tender.
• Bid validity: 90 days from the advert closing date.

Registration and status

• Registered on the Central Supplier Database (CSD); a CSD number is required where no tax compliance PIN is available.
• Tax compliant on the closing date; MTPA verifies tax compliance status on CSD on the closing date. Submit a SARS tax compliance status PIN or a printed TCS certificate.
• Consortia, joint ventures and subcontractors: each party submits its own tax compliance PIN or certificate and CSD number.
• The bidder, its directors and its members must not be persons in the service of the state.
• The bidder must not be listed on the Register for Tender Defaulters or the List of Restricted Suppliers.
• Foreign bidders complete the foreign supplier questionnaire and enclose proof of South African representation where applicable.

Company documents

• CIPC registration documents.
• Certified identity documents of owners, directors, members and shareholders.
• Shareholders' agreements, share certificates or Memorandum of Association.
• Proof of authority for the signatory, such as a company resolution.
• Partnership, joint venture or consortium agreement where applicable, with each partner separately registered.

Preference points

• 20 points are awarded for specific goals: race-based historical disadvantage 6, women 5, disability 5, youth 4.
• Ownership of at least 50 + 1% in a claimed goal is required for those points.
• Proof of the claimed goal must accompany the bid; without it the points are not claimed.

Forms

• SBD 1 (Invitation to Bid): bidder details and signed offer.
• SBD 4 (Declaration of Interest): state employment, relationships with MTPA staff, and all CSD-registered companies linked to directors.
• SBD 6.1 (Preference Points Claim): claims the specific-goals points.
• SBD 7 (Contract Form): signed by the successful bidder.

Term

• Three years, covering the Head Office and the nature reserves.

Contract conditions

• MTPA may negotiate price with the preferred bidder.
• MTPA is not bound to accept any proposal and may call for best and final offers from shortlisted bidders.
• MTPA may interview shortlisted bidders before final selection.
• MTPA may contact references without informing the bidder.
• MTPA is not bound to accept the lowest or any bid and may award the whole or part of the scope.
• Alternative offers are not permitted.
• The service provider must supply its own administrative support staff, with qualifications and experience attached.
• The successful bidder must complete and sign SBD 7 (contract form).
• The bid is subject to the Preferential Procurement Policy Framework Act, 2000 and its regulations, and to the General Conditions of Contract and any applicable special conditions of contract.

Functionality is scored out of 100 points and a bidder must reach 70 points to proceed; anything below 70 is disqualified.

• References and appointment letters (SD-WAN, MPLS or equivalent, last five years from April 2021): 20 points, scaled from 4 references (20) down to none (0).
• SD-WAN partnership or accreditation proof: 5 points.
• Project team CVs: 10 points for a Computer Science degree or equivalent with at least 5 years' experience; 5 points for an IT diploma or 3 years' experience.
• Network diagram of the proposed solution: 10 points.
• Real-time CCTV/IP streaming at latency below 150 ms: 4 points.
• QoS prioritising video surveillance traffic: 2 points.
• Automatic failover and redundancy: 2 points.
• Centralised monitoring dashboards: 2 points.
• Presentation of the SD-WAN architecture: 20 points (network diagram 5; no-line-of-sight and gate solutions 5; cybersecurity 5; Wi-Fi and ticketing 5).
• Project approach: 15 points (goals 3; scope 2; project plan with timelines 2; cashflow projections 2; stakeholders 2; risk and mitigation 2; success metrics 2).
• Technical and operational support capacity: 15 points (on-site and remote 10; remote only 5; neither 0).
• Dashboard reporting and monitoring capability: 5 points.

Bidders who reach the 70-point threshold proceed to a presentation worth 20 points. Price carries 80 points and specific goals 20 points under the 80/20 system.