malaysia v6 implementation-v2

advertisement
Malaysian IPv6 Initiative
How it’s done in Malaysia
Professor Dr. Sureswaran Ramadass
Director
National Advanced IPv6 (NAv6) Centre
Universiti Sains Malaysia (USM)
sures@nav6.usm.my | +604.653.3006 | http://www.nav6.usm.my
Copyright © 2011 NAv6, Universiti Sains Malaysia
IPv4: What happened on
4th February 2011
Source : http://www.bbc.co.uk/news/technology-12306573
IPv4 address depletion is a reality
News: Difficulties obtaining IPv4
Source : http://www.circleid.com/posts/20110214_ipv6_the_high_volteage_telephony_generator/
News: Difficulties obtaining IPv4
Source : http://www.circleid.com/posts/20110214_ipv6_the_high_volteage_telephony_generator/
The world is moving to IPv6..fast
Drastic measures by USG
Upgrade public/external facing servers and services (e.g. web, email,
DNS, ISP services, etc) to operationally use native IPv6 by the
end of FY 2012;
Upgrade internal client applications that communicate with public
Internet servers and supporting enterprise networks to operationally
use native IPv6 by the end of FY 2014;
Designate an IPv6 Transition Manager and submit their name, title,
and contact information to IPv6@omb.eop.gov by October 30, 2010.
The IPv6 Transition Manager is to serve as the person responsible
for leading the agency’s IPv6 transition activities, and liaison with
the wider Federal IPv6 effort as necessary; and,
Ensure agency procurements of networked IT comply with FAR
requirements for use of the USGv6 Profile and Test Program for the
completeness and quality of their IPv6 capabilities.
Drastic measures by USG
Release Date: February 2010
The purpose of Guidelines for the Secure
Deployment of IPv6 is to provide information
security guidance to organizations that are
planning to deploy IPv6 technologies or are
simply seeking a better understanding of IPv6.
The scope of this document encompasses the
IPv6 protocol and related protocol specifications.
IPv6-related security considerations are discussed
with emphasis on deployment-related security
concerns. The document also includes general
guidance on secure IPv6 deployment and
integration planning.
Malaysia’s Deployment Timeline
• Ministry of Energy, Water and Communications (MEWC @
KTAK)1 had initiated the establishment of National IPv6 Council
in 2004
• NAv6 Centre was also established in 2005 as experts to advice
and guide the government.
• The National IPv6 Council of Malaysia has stated2:
ISPs by 2006
Public Sector by 2013
1
2
Malaysia by 2015
– Now know as Ministry Of Information, Communication And Culture (MICC) @ (KPKK)
– The timeline has been revised by the Government in 2010
Malaysia’s IPv6 initiative
IPv6 – 1 of 8 main
components of
the MYICMS886
blueprint
IPv6 - 1 of 3
technologies
being prioritize
under 9MP
(under MEWC)
MYREN network
was made dualstack. Connecting
Universities and
Research centers
2 IPv6 Pilot
Projects was
executed
(KTAK & MAMPU)
IPv6 Deployment in Malaysia
National IPv6
Roadmap &
National IPv6
Transition
Guideline
Government’s Initiative:
MyICMS886 Strategy
1-
Malaysian Information, Communications and Multimedia Services 886
IPv6 is
identified as
1 of 8 key
Infrastructure
areas under
MyICMS1
886 strategy
NAv6’s Roles & Responsibilities
• Core R & D
– Continuous research, experiment and development of new
applications and porting existing applications to IPv6.
• Training & Human Resources
– To train and nurture IPv6 experts for Malaysia and the region.
• Monitoring & Audit
– To study and monitor the IPv4 to IPv6 transition in Malaysia
as well as monitoring the regional development.
• Awareness and Promotion
– To promote awareness on IPv6.
National Strategic IPv6
Roadmap
• Introduction
–
–
–
–
–
Overview
IPv6 Worldwide Initiatives
Role of ICANN in the Deployment of IPv6
Why IPv6 is gaining momentum globally?
Summary: IPv6 A Worldwide Perception
• Current IPv6 Status in Malaysia
–
–
–
–
–
MyICMS 886 Strategy
Government’s Initiatives in RMK-9
IPv6 and MYREN
Current ISP and Cellular Communication Providers Status
Summary: Current IPv6 Deployment Status in Malaysia
National Strategic IPv6
Roadmap
•
Benefits of IPv6 to the People and Country
–
–
–
–
–
•
Technical Benefits
Benefits for the Education Sector
Financial Benefits
Benefits for the Government
Summary: Economic Growth due to IPv6 Technology
Cost Estimation for Transition
–
–
–
–
–
–
–
–
–
Hardware, software and supporting services vendors
ISPs
Private Sector Organizations
Public Organizations
Overall Costs for the Transition to IPv6
Case-Study – Implementing IPv6 in MEWC
Social Impact
Human Resource Impact
Summary: Cost and Impact
National Strategic IPv6
Roadmap
• Recommendations and Guidelines
–
–
–
–
IPv6 Strategy for Malaysia
Stakeholders and their Roles
R&D Areas in IPv6 for Malaysia to focus on
Summary: The Recommendations list
• Success Indicators and Contingency
– Success Indicators
– Contingency Plan
– Summary: Moving Forward
• Overall Summary
NAv6’s roles as stated in the Roadmap
• To act as technical advisor to all stakeholders.
• To coordinate all IPv6 R&D nation-wide so that pertinent issues
are addressed and that there is no R&D overlap resulting in
inefficient use of funding.
• To provide IPv6 training and ‘train the trainers’ so that
knowledge and expertise can proliferate.
• To organize conferences, research meetings and workshops for
Malaysian researchers, facilitating the sharing and dissemination
of knowledge.
• To prepare detailed plans, strategies and guidelines as a result of
this Roadmap to enable implementation at all levels.
NAv6’s roles as stated in the Roadmap
(cont.)
• To work with MOSTI with respect to R&D funding and
work with MOHE with respect to human resource
requirements.
• To assist MAMPU by providing technical guidelines
appropriate for government agencies for the transition
to IPv6.
• To assist MEWC in IPv6 rollout for the nation.
• To assist government agencies and private
organizations in migrating to IPv6.
Malaysia’s IPv6 initiative:
IPv6 Pilot Projects
•
•
•
•
The Pilot Project was introduced in accordance with the National IPv6 Council’s
vision of an IPv6-enabled Malaysia by 2010 (now revised to 2012)
One of the major milestones of the timeline is to have the Public Sector IPv6-Ready
by 2008 (now revised to 2011)
NAv6 was contracted as a consultant to carry out these projects.
Two agencies was selected for the pilot project:
The Pilot Project will be pioneering the deployment of IPv6 in Malaysia
This IPv6 Pilot project will be used as reference and guidelines for parties
interested in implementing IPv6 in their network, mainly focusing on the
Malaysian government agencies
Malaysia’s IPv6 initiative:
IPv6 Pilot Projects
IPv6 Pilot Project Objectives
Establish basic IPv6 capability in within the
agency’s network.
Basic IPv6 capability is defined here as being able to
transport and route in dual-stack (IPv4 and IPv6) and
that all devices that are configured in dual-stack must
be able to interoperate with each other.
Malaysia’s IPv6 initiative:
IPv6 Pilot Projects
• The IPv6 deployment was
done in a gradual manner
adopting several well
recognized transition
mechanisms
Translation
• The step by step approach
was taken to ensure that
the migration would be free
of any technical glitches or
security issues.
• The project comprise of 4
phases
Isolated deployment
Expanding the infrastructure
Tunneling
Dual-Stack
Production Implementation
Commercial Services (Web & DNS)
20
Areas of Focus of the Pilot Project
Networking
Infrastructure
Address
Planning
Information
Security
Transition
Mechanisms
Standards
Training
Testing
Cost of
Transition
Malaysia’s IPv6 initiative:
IPv6 Pilot Projects
Agencies connected with Putrajaya Campus Network (PCN)
Pilot Project: How it’s done
Snapshot of IPv6 traffic
information monitored
using iNetmon
Servers, security & routing
devices installed at MAMPU
Pilot Project: How it’s done
One of many networking
equipment being configured during
Phase-3 implementation
Work done by NAv6 Engineers
IPv6 Audit Services
IPv6 Audit Service by NAv6 Senior
Engineer for EPF IPv6
Implementation
IPv6 Audit Service witness by EPF
IT team
Malaysia’s IPv6 initiative:
IPv6 Transition Guideline for Public Sector
Collaborative effort between KTAK,
MAMPU, NAv6 and several key agencies.
Made available to the public on 4th
January 2010
http://www.mampu.gov.my/pdf/suratarahankp040110.pdf
Document covers:
• IPv6 implementation in Malaysia
• Introduction to IPv6
• Management Structure
• Recommended Phases of IPv6 implementation at
agencies
• Phase 1
• Phase 2
• Phase 3
Malaysia’s IPv6 initiative:
ISP IPv6 Compliance Audit
IPv6 Compliance Audit for ISPs
Phase 1 :- Basic IPv6 Connectivity
Phase 2 :- ISP Interconnectivity
Phase 3 :- Implementation of IPv6 for Commercial Services
Phase 2 Compliance Audit :
7 December until 21 December 2009
1.Celcom (M) Berhad
2.DiGi Telecommunications Sdn Bhd
3.Extreme Broadband Sdn Bhd
4.Global Transit Communications Sdn Bhd
5.JARING Communications Sdn Bhd
6.Maxis
7.NTT MSC Sdn Bhd
8.Optical Communication Engineering Sdn Bhd
9.Packet One Networks (M) Sdn Bhd
10.Telekom Malaysia Berhad
11.TT dotCom Sdn Bhd
12.TM Net Sdn Bhd
Phase 1 Compliance ISP
Audit executed on March
2007
Source:
http://www.skmm.gov.my/link_file/tenders/pdf10/notification_IPv6_audit_phase2.pdf
http://nav6.usm.my/Research/isp.php
Malaysia’s IPv6 initiative:
ISP IPv6 Compliance Audit
Phase1:
Phase 2:




Basic connectivity,
IPv6 Application
functionality
Transition
mechanism
Inter-ISP
connectivity
Phase 3:
 Commercial Network
Services
 Advanced Network
Services
 Broadband Services (WiFi, 3G etc.)
 Full Connectivity
Note * - Phase 2 and Phase 3 are primarily focus for ISP
Malaysia’s IPv6 initiative:
IPv6 Compliance Audit
Another achievement for the global IPv6
community.
•
•
•
•
.MY Domain Registry is IPv6
enabled
1st Audit April 2008
The Malaysian .my Domain Registry has taken the
initiative to undergo the Phase-1 IPv6 Compliance
audit offered by NAv6 for their Secondary DNS
Server on the 23rd April 2010.
This is the 3rd audit conducted for .my Domain
Registry.
The 1st audit in April 2008 was to verify their
network connectivity while the 2nd audit also in
2008 was done on their Primary DNS Server.
NAv6 would like to extend our heartiest
congratulations to .my Domain Registry for their
initiatives and accomplishments as one of the global
key organization spearheading the IPv6
implementations.
2nd Audit 2008
3rd Audit April 2010
Building Human Resource:
Certified IPv6 Network Engineer (CNE6)
[ http://nav6.usm.my/Academic/training.php ]
The aim of this IPv6 training program is to give in depth
information on the transition from IPv4 to IPv6 and
expose the participants on the technical expertise
needed in the deployment of IPv6 in the organizations
network.
CNE6 Level 1 Course Outline
[ http://nav6.usm.my/Academic/training.php ]
CNE6 Level 2 Course Outline
[ http://nav6.usm.my/Academic/training.php ]
CNE6 Training Schedule
10th – 13th December 2013
Venue: NAv6 Centre, USM, Penang
16th – 19th December 2013
Venue: NAv6 Centre, USM, Penang
Awareness & Training
INET KL 2009, 20 July ‘09
CNE6 Trainings
CommunicAsia 2008~2013
Singapore
08, 09 & 2010
IPv6 Road shows
PICC, Putrajaya
Professional Certification
•Certified Network Engineer in IPv6
(CNE6)Level 1 & 2
• Trained so far about 5000+ ICT
personnel from the Government alone.
• Entire list certified so far can be found
at www.nav6.usm.my
•Certified Network Programmer in IPv6
(CNP6) -
Setting Up ATC (Malaysia)
• ATC in Malaysia
– Three organizations were appointed as CNE6
Authorized Training Centre:
3/22/2016
35
Setting Up ATC (Sudan)
Capacity building in IPv6 for requesting
developing nations & organizations
Sudan, spearheaded by National Telecom
Corporation (NTC) of Sudan.
Setting Up ATC (Singapore)
• Singapore
– An MoU with PROGRESO Networks (S)
Pte. Ltd. to set an ATC in Singapore
– PROGRESO’s engineers have been
trained in CNE6 Professional Training
& Certification at NAv6
– PROGRESO is currently one of the
market leaders in IPv6 in Singapore,
especially in the IPv6 Certification
Training area. They are providing IPv6
training to both, the private and public
sector, thus building IPv6 competency
in Singapore.
3/22/2016
37
Setting Up ATC (Thailand)
• Thailand
3/22/2016
38
Setting Up ATC (China)
• Signed an MoU with Ruijie
Networks Co. Ltd., China on
April 2011
– Promote CNE6 within their
5000 educational centers and
network in China
– Supply networking hardware
at subsidised rates
3/22/2016
39
Awareness & Training
ITU Asia-Pacific Centre of Excellence:
Online course on “Migration to IPv6” for the Asia
Pacific Region.
• This course will cover the key
issues of migrating to IPv6.
• It is aimed at assisting
officials dealing with the
policy, regulatory and
administrative aspects of
IPv6 migration.
• Over the six weeks course.
NAv6 Global Leadership
Capacity building in IPv6 for requesting
developing nations & organizations
– Working with University of Mosul, Iraq to establish
a Center of Excellence (CoE) in IPv6 in Iraq.
– Working with universities in Indonesia establish
Authorized Training Centre (ATC) in IPv6
– The above is carried out with US, Europe, Laos,
Vietnam, Thailand, Singapore, India, Tanzania,
Mexico and other Latin countries.
NAv6 Global Leadership
International Telecommunication Union (ITU) is one of
the specialized agencies of the UN
A study on IPv6 Address Allocation and Distribution
- Commenced March 2009, completed on 31 July 2009
- Invited expert in IPv6 for ITU IPv6 Group.
Conducted ASEAN IPv6 Workshop, 23-25 Feb 2009
 Vietnam: Hanoi National University of Education (HNUE),
signed MoA to establish a Training Centre on IPv6 (RM5 Million)
Sultanate of Oman – Sharing our Roadmap and expertise on
IPv6 deployment
NAv6 Global Leadership
Association of African Universities (AAU)
The AAU: Established in 1967, Headquarters in Accra. 253
members from all African regions.
• Established a strategic partnership with NAv6 in IPv6
deployment
Nokia Siemens Networks (NSN)
Professional Services provided to the Government on
the ICT modernization
• Creating framework/ guidelines for evolution to
IPv6 in various ICT sectors
NAv6 Global Leadership
Internet Innovation Union Establishment
Conferences & WorkshopHeld on the 21st September, 2012 in Beijing
In collaboration with National Advanced IPv6
Centre, USM, Information Technology,
Republic of Yemen and National Authority for
Communication, Republic of Sudan and ITU
had conducted and completed the IPv6
Workshop on 9th November 2013.
NAv6 Global Leadership
Participations on IPv6 talks worldwide (2010)
• 1ST MEETING OF ITU IPV6 GROUP (ITU)
• AI3 / SOI ASIA SPRING MEETING 2010
• INDONESIA IPV6 SUMMIT 2010
• 2ND INT'L CONFERENCE ON DISTRIBUTED FRAMEWORKS & APPLICATIONS
2010 (DFMA)
• ASIA-PACIFIC ADVANCED NETWORK 30TH MEETING (APAN) 2010
• 2nd MEETING OF ITU IPv6 GROUP INTERNATIONAL TELECOMMUNICATION
UNION
• 2010 3rd IEEE INT'L CONFERENCE ON BROADBAND NETWORK &
MULTIMEDIA TECHNOLOGY (IC-BNMT 2010)
• AI3 & SOI-ASIA ANNUAL MEETING
• MEETING ON IPv6 & JOINT WORKSHOP
Prepared by Adil Hidayat @ 28 March 2011
Download