Data Dial Tone Access

Desktop access is used for 10/100/1000 Mbps access for PCs, network printers and in-building servers.

Server access is used for 10/100/1000 Mbps access for network servers in an internal data center or in the DMZ.

Switch access is used for connecting an agency access switch to the OTM aggregation switches in the data centers. Agencies need to provision two ports on their access switch for this connection.

A Support Service fee of 0.5% shall be applied to the monthly cost of this service.

Data Dial Tone Service Orders

There are no setup or installation charges for initial establishment of Data Dial Tone service in a new building. There are no fees associated with activating new ports or deactivating existing ports. Other charges may apply to port or network architecture changes, depending upon the complexity of the change. Additional wiring infrastructure changes made after initial building occupation shall be coordinated through OTM, but shall be done at the expense of the requesting agency. 

A Support Service fee of 0.5% shall be applied to the monthly cost of this service.

LaNet via Data Dial Tone (Internet Access)

Agencies purchase LaNet (Internet) access for their collective users on a bandwidth subscription basis. The subscription is controlled and rate-limited by IP subnet. For example, if Agency A uses subnet 10.30.0.0 and purchases 12 Mbps of bandwidth for its users, the 10.30.0.0 subnet is rate-limited to a total of 12 Mbps of Internet access.  

A Support Service fee of 0.5% shall be applied to the monthly cost of this service.

Data Dial Tone DMZ Service

Agencies that offer publicly accessible servers must subscribe to Data Dial Tone De-Militarized Zone (DMZ) services. Agency public servers are placed in a secured DMZ and are protected by OTM-provided firewalls. An agency connects its public servers to the DMZ switch and pays for Server Access at the appropriate port speed for each server located within the DMZ network. In some cases, the agency may connect its own DMZ switch or firewall to OTM’s DMZ switch and pays for Switch Access at the appropriate port speed. In either case, in addition to the access port(s), the agency purchases bandwidth for its collective group of servers located within the DMZ network.

A Support Service fee of 0.5% shall be applied to the monthly cost of this service.

Data Dial Tone Wireless LAN (WLAN) Service

OTM offers Wireless LAN (WLAN) service (802.11b/g) in all of the buildings served by Data Dial Tone in the downtown Baton Rouge Capitol Park. OTM will provide free Internet Only wireless access in one common area of each Data Dial Tone building, generally the first floor where multiple shared conference rooms and/or training rooms are located. Any agency that subscribes to Data Dial Tone may use this service in these areas.

Agencies will also have the option of subscribing to a paid service in other areas of their home building, consisting of an installation fee and a monthly charge per access point. Subscription options include 1) portal-dependent guest user access, 2) VPN-dependent agency user access and 3) VPN-independent agency user access. Agencies are charged for each access point in their area. The access points will be installed according to the radio frequency (RF) study done by OTM that will allow for optimum speed and access on that floor. Installation will be designed to serve the entire area on that floor. For example, if an agency in the LaSalle building wants WLAN access available on all of the 11th floor, and OTM’s RF study indicates that it requires two wireless access points to provide full coverage on that floor, the agency will be charged for two access points. It is important to note that these access points will become part of the shared Capitol Park wireless infrastructure and will be accessible to all authorized users for Internet access only. Authentication to use the wireless network will still be required.

The service is designed to serve authorized building residents, visitors and guests. OTM will not provide "open" wireless access for the general public that may be attending a meeting in a conference or meeting room within the Capitol Park. WLAN is offered as a convenience but is not designed to be a replacement for the wired desktop line of service. It is a shared technology and offers best effort service, with no guarantee as to speed of transmission, although OTM plans to place access points at locations which optimize service.

Guests to the Capitol Park must be authorized by the hosting agency to use WLAN access. The agency must issue user ids and passwords for the authorized guests to use for the duration of their stay.

The process requires a relationship exist between OTM’s Access Control Server and the agency directory server prior to use. Once the relationship is established, agency IT personnel will be given information that each end-user will use to configure the WLAN client on their wireless device, as well as login instructions. Access is allowed to the Internet only on the following TCP/UDP ports:

25 (SMTP email)
50/51 (IPSEC)
80 (web)
110 (POP3 email)
443 (SSL)
500 (UDP only, ISAKMP)

Agencies that require access to internal resources must use either the Data Dial Tone Virtual Private Network (VPN) service or the VPN-independent agency user access option. VPN is the preferred access method.

There are no monthly fees for WLAN use in these shared areas, but there is a setup fee for each agency subscribing to this service.

A Support Service fee of 0.5% shall be applied to the monthly cost of this service.

Data Dial Tone Virtual Private Network (VPN) Access

Virtual Private Network (VPN) access is available to an agency participating in Louisiana Secure Intranet. It allows an end-user to access private agency resources via a non-secure network (i.e., the Internet). An example might be the IT support person who subscribes to cable modem service at home, but uses a VPN client to access the agency network to maintain a server.

The two types of available service are group account and site-to-site account.

Group Account--A group account is intended for use by a group of users that belong to an agency but work in various remote locations (at home, on the road, in other agency offices, in wireless LAN areas). Each user in the group must have some type of Internet access, and the ISP must allow use of VPN on their network. A group account has a single set of rules for access that apply to everyone in the group. These rules are for security purposes and can be customized based on agency need (using TCP/UDP ports and protocols). Group accounts are sold in increments of bandwidth, and the bandwidth subscription applies to the entire group of users. It is recommended that an agency allow approximately 64 kbps of bandwidth per concurrent VPN user within the group (about 0.5 Mb per every 10 users for standard web-browsing traffic).

Allowing two different types of users access via VPN--for example, employees and outside contractors--might require two different group accounts because the rules for access by each group may be different.

Site-to-Site Account--A site-to-site account is intended for use by a remote office (single location) with multiple users that needs to connect to a “home” office. This would be an office that does not change location and has access to an ISP. For example, it may be more cost-effective for an agency to connect a small remote location to the Internet with broadband ISP access than with a direct connection to the agency. With site-to-site VPN access, that remote office can participate in the internal agency network as if it were directly connected.

Just as with group accounts, each site-to-site account has a single set of rules for access that apply to everyone at the remote location. These rules are for security purposes and can be customized based on agency need (using TCP/UDP ports and protocols). Site-to-site accounts are sold in increments of bandwidth, and the bandwidth subscription applies to the entire group of users at the remote site. It is recommended that an agency allow approximately 64 kbps of bandwidth per concurrent VPN user (about 0.5 Mb for every 10 users for standard web-browsing traffic).

Allowing two different remote locations access via VPN will require two different site-to-site accounts.

Authentication and Use

Group Accounts--Cisco’s VPN software client is necessary for logon and authentication to the VPN. This software is free for distribution and will be provided to the agency IT department via the web when the agency subscribes to this service. A VPN configuration file will also be provided to each user for installation and set up of the software. In order for authentication to take place, each agency directory server must be set up to interface with OTM’s Authentication Server (agency server must support RADIUS). Each agency must maintain its own directory of user ids and passwords that are allowed VPN access.

The VPN client software will automatically check for presence of firewall software on the users computer before it allows connection via the VPN. “Split-tunneling” is not allowed; that is, the computer will either be connected to the Internet via the user’s ISP or via the VPN tunnel, but not both at the same time.

Site-to-Site Accounts--Site-to-site VPN requires hardware at the remote location. OTM recommends that it be a Cisco solution to ensure compatibility with the central VPN concentrators. It can be a router or firewall running VPN software. Configuration and templates for setup will be provided to the agency IT department. OTM will not be responsible for configuration of the equipment at the remote agency location.

Once the site-to-site VPN has been defined and configured, it is a permanent, “always-on” connection and the remote site functions as a remote location of the primary agency.

Billing rates are the same for Group Account or Site-to-Site Account.

Each additional Mb is an additional $72.00. Example: 3 Mb is $216.00

Installation Rate
$120.00

A Support Service fee of 0.5% shall be applied to the monthly cost of this service.