Department of Veterans AffairsDepartment of Veterans ...auspextech.com/vaipv6//5-Pirzchalski VA IPv6...
-
Upload
vuongduong -
Category
Documents
-
view
214 -
download
0
Transcript of Department of Veterans AffairsDepartment of Veterans ...auspextech.com/vaipv6//5-Pirzchalski VA IPv6...
Department of Veterans AffairsDepartment of Veterans AffairsIPv6 Transition Progress
2011 and Be ond2011 and Beyond
February 2 2011February 2, 2011
Steven PirzchalskiVA IP 6 T iti MVA IPv6 Transition Manager
AgendaAgenda
USG USG IPv6 –
Then and Now
VA IPv6 2011 and
VA IPv6
2011 and Beyond
VA IPv6 2005 –2010
USG IPV6 – THEN AND NOWUSG IPV6 THEN AND NOW
12/13/2010 3
USG IPv6 USG IPv6 –– The HistoryThe History
2010
New OMB IPv6
FAR Changed to Require IPv6 for IT
USGv6 Product Profile & Testing
2008
2009 Policy
OMB IPv6 Transition
USGv6 Testing Milestone
IPv6 for IT Acquisitions
gProgram
200510/28/2010
DoD IPv6 Transition Memo R l d
Memo Released2003
Released
4
OMB IPv6 2010 OMB IPv6 2010 –– The DriversThe Drivers
Enable Key Federal IT Enable Key Federal IT Modernization Initiatives
Reduce Complexity/Increase Transparency
B i Enable Ubiquitous Security S iBusiness
ContinuityServices
5
OMB IPv6 2010 OMB IPv6 2010 –– Acquisitions Acquisitions
• Comply with FAR requirements
• Use of the USGv6 P fil d T Profile and Test ProgramE • Ensure completeness/quality of IPv6 capabilitiesof IPv6 capabilities
6
OMB IPv6 2010 OMB IPv6 2010 –– 2012 Milestone2012 Milestone
• External Services:– Public/external facing
servers and servicese g web email DNS – e.g. web, email, DNS, ISP services, etc
– Operationally use p ynative IPv6
– End of FY 2012 (September 30 2012)(September 30, 2012)
7
OMB IPv6 2010 OMB IPv6 2010 –– 2014 Milestone2014 Milestone
• Internal Services:– Applications that
communicate with public Internet serverspublic Internet servers
– Supporting enterprise networks
– Operationally use native IPv6End of FY 2014 – End of FY 2014 (September 30 2014)
8
VA IPV6 2005 - 2010VA IPV6 2005 2010
12/13/2010 9
VA IPv6 Transition Timeline VA IPv6 Transition Timeline -- HistoricalHistorical
VA IPv6 Transition
Office E t bli h d
VA IPv6 Transition
Office E t bli h d
VA June 2008 IPv6
Testing C l t d
VA June 2008 IPv6
Testing C l t d
VA IPv6 Transition
Plan
VA IPv6 Transition
Plan
VA IPv6 Lab
E t bli h d
VA IPv6 Lab
E t bli h d
Interagency IPv6
M ti
Interagency IPv6
M ti
Interagency IPv6
Meeting
Interagency IPv6
MeetingVA IPv6
C ti itVA IPv6
C ti it
UpdatingIPv6
Transition Plans
UpdatingIPv6
Transition PlansEstablishedEstablished
VA IPv6 Working Groups
VA IPv6 Working Groups
VA IPv6 Addresses VA IPv6
Addresses
CompletedCompletedPlanPlan EstablishedEstablished MeetingMeeting
Interagency IPv6
Interagency IPv6
MeetingMeeting
VA Designated
Level 1
VA Designated
Level 1
VA IPv6 Core
Network
VA IPv6 Core
Network
VA EA & Exhibit
300s Updated
VA EA & Exhibit
300s Updated
VA Scores 5 on OMB
IPv6 Transition
VA Scores 5 on OMB
IPv6 Transition
VA Scores 5 on OMB
IPv6 Transition
VA Scores 5 on OMB
IPv6 Transition
ConnectivityConnectivity PlansPlans
pFormed
pFormed AllocatedAllocated MeetingMeetingAgencyAgency TestingTesting
pwith IPv6
pwith IPv6 RatingRating RatingRating
2005 2006 2007 2008 2009 2010 2011
OMB 05-22 Memo
OMB 05-22 Memo
VA IPv6 Steering
Committee Established
VA IPv6 Steering
Committee Established
VA Chairs Federal
IPv6 Training
Group
VA Chairs Federal
IPv6 Training
Group
Internet2 Connectivity
Internet2 Connectivity
Interagency IPv6
Meeting
Interagency IPv6
Meeting
VA IPv6 Training Launched
VA IPv6 Training Launched
VA IPv6 Case StudyVA IPv6
Case StudyInternet2
Pilots Identified
Internet2Pilots
Identified
Planned Interagency
IPv6 Meeting
Planned Interagency
IPv6 Meeting
VA IPv6 PM
Identified
VA IPv6 PM
Identified
VA IPv6 Policy
Released
VA IPv6 Policy
Released
VA IPv6 Awareness
Video
VA IPv6 Awareness
Video
VA IPv6 Pilots
Identified
VA IPv6 Pilots
Identified
VA Scores 5 on OMB
IPv6 Transition
VA Scores 5 on OMB
IPv6 Transition
Interagency IPv6 TestingInteragency IPv6 Testing
IPv6 Incorporated into Strategic
Plan for
IPv6 Incorporated into Strategic
Plan for
New OMB IPv6 Memo
Released
New OMB IPv6 Memo
Released
RatingRating OneVAEnterprise
Network
OneVAEnterprise
Network
10
MultiMulti--Agency IPv6 TestingAgency IPv6 Testing
Verizon Sprint
InternetQwest Level 3
Internet
11
VA IPv6 Transition Lessons LearnedVA IPv6 Transition Lessons Learned
Start Early
Be Inclusive
Executive Level Buy-In
Training
Test – Test – Test
12
VA IPV6 2011 AND BEYONDVA IPV6 2011 AND BEYOND
12/13/2010 13
Why is IPv6 Important to VA?Why is IPv6 Important to VA?
Business (V t ) Si li it Investment (Veteran)
ContinuitySimplicity Protection
Reaching Rural Security
Veteransy
14
VA IPv6 Transition VA IPv6 Transition –– Our FocusOur Focus
15
VA IPv6 Governance StructureVA IPv6 Governance Structure
Chief Information Officer (CIO)Chief Information Officer (CIO)
Office of Information and Technology (OI&T)Enterprise Infrastructure Engineering (EIE)
Office of Telecommunications Engineering & DesignOffice of Telecommunications, Engineering & Design
IPv6 Transition Lead
IPv6 Steering Committee IPv6 Project Management Transition Office (IPv6 PMTO)
IPv6 Transition Working Group
Planning Activity
Security ActivityTraining Activity
Registry &Pil A i i
Technology Advisory Panel
16
Registry & Addressing ActivityPilot Activity Enterprise
Strategy
VA IPv6 ActivitiesVA IPv6 Activities
• IPv6 Planning UpdateIPv6 Planning Update– Transition Plan– Addressing Plan– T&E RequirementsT&E Requirements– VA OMB 300 Exhibit for IPv6– Inventory
• ARIN IPv6 Address Request Augmentation• ARIN IPv6 Address Request Augmentation• New VA IPv6 CIO Directive• Federal Task Force IPv6 Transition Worksheet• IPv6 Acquisition Process (FAR & USGv6)• Enterprise WAN C&A
U d P bli F i S i• Upgrade Public Facing Services– DNS– 9 Mail Domains– 126+ Application Domains
17
Domain Transition Domain Transition –– An Agile ApproachAn Agile Approach
• Focus on early “quick wins”
• Stagger domain i itransitions
• Build to full f ti lit ti
PlanOperationalize
functionality over time• Roll lessons learned
into next cycle Pilotinto next cycle• Don’t jeopardize
operational integrity
18
Pilot
operational integrity
VA IPv6 Transition Activities Cont.VA IPv6 Transition Activities Cont.
• IPv6 Specific Pilots– Infrastructure Pilots– Mission Pilots
• Inter-Agency Information ExchangeInter Agency Information Exchange• IPv6 Service into Veteran’s homes• Internet2 Program
– Internet2 connection– Internet2 Lab– Internet2 PilotsInternet2 Pilots
• DREN• IPv6 Lab
19
VA Infrastructure PilotsVA Infrastructure Pilots
Enclave Pilot• Phase 1: Turn up IPv6 in a secured isolated and monitored setting • Phase 1: Turn up IPv6 in a secured, isolated, and monitored setting • Phase 2: IPv6 networking between secured enclaves • Phase 3: IPv6 networking with the open internet
E-Mail Pilot• Initial focus on IPv6 enabled SMTP traffic• Limited MSFT Exchange deployment• Limited MSFT Exchange deployment• Lessons learned for enterprise mail upgrade
Va.gov Pilot• Leverage industry best practices• Initial deployment of ipv6.va.gov• Evaluate security and operational capabilities
20
Evaluate security and operational capabilities
Pilot Considerations for va.govPilot Considerations for va.gov
• Approach– Do we IPv6 enable the existing site or replicate it?g p– Do we do it in-house or use a cloud based service?– Do we use va.gov or a specialized domain such as ipv6.va.gov for
initial launch?• AddressingAddressing
– Do we have IPv6 addresses to use?– Are they advertised?– Can we allocate them?
Should we get them from our ISP?– Should we get them from our ISP?• Routing
– Are we routing IPv6 (BGP) to the outside world?– What IPv6 routing protocols are we using internally?
• DNS– Will our DNS support AAAA records?– Will .gov support AAAA records?– Is the IPv6 Glue setup in gov and va gov?– Is the IPv6 Glue setup in .gov and va.gov?– Do we have IPv6 connectivity to our DNS servers? .gov?
21
Pilot Considerations for va.gov Cont.Pilot Considerations for va.gov Cont.
• Network Connectivity– Do we have IPv6 connectivity from out ISP?y– Is IPv6 enabled on our routing devices from our gateway to our servers
(web and DNS)?• Server
– Does the va.gov servers support IPv6?g pp• Application
– Does our http (and other web based applications) support IPv6?– Are there any IPv4 addresses hard coded into our applications/code?
• SecuritySecurity– Will the gateway security products support IPv6?– Are the web server and other supporting servers updated with any IPv6
related patches and security configurations?• Network ManagementNetwork Management
– Can we manage IPv6 with our existing management system?– Can we see what is going on with the IPv6 side?
• Transition MechanismsDo we need to use a transition mechanism?– Do we need to use a transition mechanism?
– Tunneling or translation?
22
VA IPv6 Mission PilotsVA IPv6 Mission Pilots
Patient Monitoring Nurse Call/MonitorE d l di d li i ti iti t i l d t Utili IP 6 t t f b d id ti tExpand sleep disorder clinic activities to include at-
home monitoring via IPv6 connectivity. Utilizes IPv6 to convey a new set of bedside patient
choice icons to free up nurses’ time.
Benefits :• Increases the number of
individuals clinicians can
Benefits :• Alleviates patient frustration
particularly when speechindividuals clinicians can treat
• Lessening wait time for patients to be evaluated
particularly when speech impaired
• Assists nursing staff to support patient needs.
Remote Care Pilot Videophone PilotRemote Care Pilot Videophone PilotEmploy IPv6 video conferencing to provide scheduled
and drop-in medical appointment service. Employ IPv6 video devices to improve service inside
VA’s network, replacing current devices.
Benefits : Benefits :• Allows doctors and clinicians
to treat additional patients without significant patient travel
• Greater utilization of doctors
• Lower cost to service and maintain
• Improves level of service and speed of connection
23
• Greater utilization of doctors and clinicians time
Some of the ChallengesSome of the Challenges
• IPv6 Support in Security Products • IPv6 Support in Network Management
Products• Carrier Support for IPv6 (to Veterans)• Enabling Legacy Applications to support
IPv6 • IPv6 DNS (.gov)
12/13/2010 24
QUESTIONSQUESTIONS
25