USGv6: US Government. IPv6 Transition Activities 11/04/2010 DISCOVER THE TRUE VALUE OF TECHNOLOGY

Transcription

1 USGv6: US Government Dale Geesey Chief Operating Officer Auspex Technologies, LLC Phone: Fax: Web: IPv6 Transition Activities 11/04/2010

2 Agenda US Government IPv6 (USGv6) Transition History USGv6 Next Steps Department of Veterans Affairs (VA) Transition Example 2

3 US GOVERNMENT IPV6 (USGV6) TRANSITION HISTORY 3

4 Federal IPv6 Transition Thought Process How to transition? Infrastructure first Applications first Utilize Agency s Enterprise Architecture Process (Enterprise Focus) Track progress Show value How to pay for it? Existing budget Business case by specific program The Real Question: Why Transition to IPv6 in the First Place? Real Answer It is inevitable! Other Answers (Money/Capability/Security) Other Big Question Why transition now? Government requires a much longer timeframe than industry to integrate new technology Waiting will have a negative impacts on Government & industry No more time 11/4/ Auspex Technologies 4

5 USGv6 Historical Timeline New OMB IPv6 Policy USGv6 Product USGv6 Testing Milestone FAR Changed to Require IPv6 for IT Acquisitions Profile & Testing Program 10/28/ DoD IPv6 Transition Memo Released OMB IPv6 Transition Memo Released 5

6 M Requirements & Dates Oct FY06 Nov FY06 Dec FY06 Jan FY06 Feb FY06 Mar FY06 Apr FY06 May FY06 Jun FY06 Jun FY08 Assign IPv6 Lead Inventory of Existing Routers Switches & Hubs Inventory of All Existing IP Devices Impact Analysis Transition Plan Use of IPv6 6

7 June 2008 IPv6 Milestone Results OMB Public Statement All major USG agencies reported that they successfully demonstrated IPv6 capabilities on their network backbones. Reality Most agencies turned IPv6 on Performed basic network tests (ping, trace routes, etc.) Turned IPv6 off Bottom Line - IPv6 not operationally ready C&A and security Operational procedures Training Interoperability Etc. Is this Success? Yes! First, critical step in the overall transition 7

8 FAR Language (g) Unless the agency Chief Information Officer waives the requirement, when acquiring information technology using Internet Protocol, the requirements documents must include reference to the appropriate technical capabilities defined in the USGv6 Profile (NIST Special Publication ) and the corresponding declarations of conformance defined in the USGv6 Test Program. The applicability of IPv6 to agency networks, infrastructure, and applications specific to individual acquisitions will be in accordance with the agency's Enterprise Architecture (see OMB Memorandum M dated August 2, 2005). 8

9 Federal IPv6 Product Profile Device Types Host Router Network Protection Device Functional Categories IPv6 Basic Capabilities Routing Protocols Quality of Service Transition Mechanisms Link Specific Capabilities Addressing IP Security Network Management Multicast Mobility Application Requirements Network Protection Device Requirements 9

10 Federal IPv6 Product Testing Program Tied to Federal IPv6 Product Profile Utilizes Suppliers Declaration of Conformity process Leveraged by changes to FAR Types of Testing Conformance Interoperability Network Protection Device 1 st /2 nd /3 rd Party Testing 10

11 USGV6 NEXT STEPS 11

12 The Business Case and Roadmap for Completing IPv6 Adoption in US Government What Does it Cover 1. Federal IPv6 Transition Progress to Date 2. Federal IPv6 Transition The Next Steps 3. Leveraging Enterprise Architecture 4. Transition Roadmap and Milestones 5. IPv6 Impact on Federal Initiatives 6. IPv6 in IT Governance and Procurement 12

13 The New OMB IPv6 Memo Why Enable key Federal IT modernization initiatives: Cloud Computing Broadband SmartGrid Reduce complexity and increase transparency: Eliminate NAT technologies; Enable ubiquitous security services: End-to-end network communications Foundation for securing future Federal IT systems Enable the Internet to continue to operate efficiently: Integrated & well-architected networking platform Accommodate future expansion of Internetbased services What & When Procurements: Comply with FAR requirements Use of the USGv6 Profile and Test Program Ensure completeness/quality of IPv6 capabilities Now Designate an IPv6 Transition Manager: October 30, 2010 External Services: Public/external facing servers and services e.g. web, , DNS, ISP services, etc Operationally use native IPv6 End of FY 2012 (September 30, 2012) Internal Services: Applications that communicate with public Internet servers Supporting enterprise networks Operationally use native IPv6 End of FY 2014 (September ) 13

14 DEPARTMENT OF VETERANS AFFAIRS (VA) TRANSITION EXAMPLE 14

15 Example - OneVA Enterprise Network Evolution Yesterday Today 15

16 Example - VA IPv6 Transition Approach Organic Approach Leverage existing resources Test lab Tap external expertise as necessary Transition Governance OIT lead Structured transition team VA-wide involvement Vendors/contractors Strategy Executive level buy-in Core across entire enterprise Significant training effort Strong testing focus Emphasis on security Collaboration Work with other agencies CIO Council IPv6 working group Cross-agency testing Internet2 16

17 Example - Multi-Agency IPv6 Testing ` ` ` VA SSA Verizon Sprint GSA ` Internet NIST Qwest Level 3 IRS ` ` 17

18 Example - VA IPv6 Accomplishments OMB designated VA as Level 1 Agency IPv6 Transition rated 5 out of 5 for last 2 years Successfully tested IPv6 on core network Led multi-agency IPv6 test initiative IPv6 awareness video distributed to Federal Agencies - Youtube (keyword: VA IPv6) Provided IPv6 training leadership Acknowledged as leader in public and private forums 18

19 Example - VA IPv6 Lessons Learned Start Early Many potential delays (as with any program) Will take longer than initially planned Be Inclusive Impacts entire organization Less issues if other groups brought in during the beginning Better understanding of potential impacts Executive Level Buy-In Educate executives on program and benefits (in their terms not techno-speak) Support via policy & memorandum Tie into business case & budget activities Training Do not limit to technical groups Educate as many across the agency as possible Include the program benefits in the training Test Test Test Absolute requirements for operational deployment More testing partners (internal & external) the better Include multiple carriers if possible 19

20 Example - VA IPv6 Next Steps Phase II and Beyond Planning Identify VA next steps Meet new OMB Memo Requirements Plan enterprise-wide transition (beyond core) Communities of interest Continue Collaboration Cross agency testing CIO Council IPv6 Working Group Training Build IPv6 into Business Case Process Leverage IPv6 into new programs and technology refreshments Focus on leveraging IPv6 capabilities and solutions Internal demand for IPv6 already identified from VA field organizations Establish Permanent Demonstration Network Leverage VA Internet2 Program In conjunction with other agencies & academia Active (and ongoing) testing and demonstration of IPv6 and other technologies and applications 20

21 Example - VA IPv6 Pilot Programs 21

22 Contact Us Dale Geesey Chief Operating Officer Auspex Technologies, LLC Springstone Drive Suite B100 Clifton, VA Phone: Fax: Web: November 4,