colombo, sri lanka, 7-10 april 2009 a pilot implementation of an ngn dual stack ipv4/ipv6 network...
TRANSCRIPT
Colombo, Sri Lanka, 7-10 April 2009
A Pilot Implementation of an NGN Dual Stack IPv4/IPv6 network for MEWC,
Malaysia
Prof Dr Sureswaran Ramadass,Director, National Advanced IPv6
Centre of Excellence (NAv6),Universiti Sains Malaysia
FORUM ON NEXT GENERATION STANDARDIZATION
(Colombo, Sri Lanka, 7-10 April 2009)
Colombo, Sri Lanka, 7-10 April 2009
2
IPv6 Pilot Project
The IPv6 Pilot Project was introduced in accordance with the National IPv6 Council’s vision of an IPv6-enabled Malaysia by 2010One of the major milestones is to ensure that government agencies are IPv6-enabled by 2008
Colombo, Sri Lanka, 7-10 April 2009
3
IPv6 Pilot Project
Two government agencies were chosen to initiate the Pilot project - MEWC and MAMPUThe Pilot Projects will be pioneering the deployment of IPv6 in MalaysiaWill function as reference and guideline for IPv6 deployment and adoption, focusing on the Malaysian government agencies
Colombo, Sri Lanka, 7-10 April 2009
4
IPv6 Pilot Project
The IPv6 deployment was done in a gradual manner adopting several well recognized transition mechanisms
The step by step approach was taken to ensure that the migration would be free of any technical glitches or security issuesThe project comprise of 4 phases
Colombo, Sri Lanka, 7-10 April 2009
5
IPv6 Pilot Project Objectives
Establish basic IPv6 capability in network devices located at the peering points, backbone, and Center LAN backbones
Basic IPv6 capability is defined here as being able to transport and route in dual-stack (IPv4 and IPv6) mode, and that all devices that are configured in dual-stack mode must be able to interoperate with each other
Colombo, Sri Lanka, 7-10 April 2009
6
Areas of Focus for the Pilot Project
Colombo, Sri Lanka, 7-10 April 2009
7
Governments agencies that uses Putrajaya Campus Network (PCN)
Government Agencies Involved in the IPv6 Pilot Project
Colombo, Sri Lanka, 7-10 April 2009
8
Pilot Project IPv6 Connectivity
Current IPv6 Connectivity for MEWC and MAMPU
Colombo, Sri Lanka, 7-10 April 2009
9
Technical view of the IPv6 connectivity USM to PCN
Logical IPv6 Network Topology for the IPv6 Pilot Project
Colombo, Sri Lanka, 7-10 April 2009
10
Servers, security & routing devices installed at MAMPU
Snapshot of IPv6 traffic information monitored using iNetmon
Colombo, Sri Lanka, 7-10 April 2009
11
Work done by NAv6 Engineers
One of many networking equipments being configured during Phase-3 implementation
Work done by NAv6 Engineers
Colombo, Sri Lanka, 7-10 April 2009
12
Implementation, Phase 1
Installation of a single and isolated network, using both dual-stack and tunneling mechanism
Colombo, Sri Lanka, 7-10 April 2009
13
Implementation, Phase 1
Testing IPv6 connectivity to a single node via tunneling mechanism (node installed in PNOC)
Colombo, Sri Lanka, 7-10 April 2009
14
Implementation, Phase 2
Installation of Dual-stack tunneling for selected virtual networks using a fixed tunnel client
Migration of the PNOC to a dual-stack network
Colombo, Sri Lanka, 7-10 April 2009
15
Implementation, Phase 3
Implementation of a fully functioning Dual-Stack IPv6 network at MEWC
Installation of IPv6 Router
Colombo, Sri Lanka, 7-10 April 2009
16
Implementation, Phase 4
Post implementation study on the IPv6 internet services in MEWC
Collective and comprehensive information based on the network services will be acquiredA guideline for IPv6 services migration is to be made available to MEWC
Colombo, Sri Lanka, 7-10 April 2009
17
Problems & Challenges
Available Budget & TimeGathering accurate informationIP addresses that only have local significance and are not advertised outside their local networksDevices with hardwired addressesImportant architecture devices that are not, and will never be, IPv6 capable (RFID time management)
Colombo, Sri Lanka, 7-10 April 2009
18
Preventive Maintenances
Maintaining the IPv6 networkContinuous access to routing devices to maintain a reliable connectivity
Checking routing topologyAccess Control List (ACL)
Checking and updating the security network security policies on security devices (firewalls, IDS / IPS) to ensure security is at optimum conditions
Colombo, Sri Lanka, 7-10 April 2009
19
Preventive Maintenances
Monitoring both IPv4 and IPv6 network activities by using network management tools (JNetmon)Maintaining and upgrading firmware for better support and stabilityConstantly updating and maintaining operating systems and applications
Colombo, Sri Lanka, 7-10 April 2009
20
Thank You
Q & A