BHEL Chennai’s sucessful IPv6 migration

By : |May 12, 2014 0

BHEL Piping Center, Chennai (also know as BHEL Chennai), is an ISO-9001 company and has embarked on its journey towards Total Quality Management.It’s the world wide leader in manufacturing Power Piping products. The center manufactures more than 50 wide range of piping products. Some of them pipes, bends, fittings, hangers and flow nozzles.

BHEL Chennai won the C-Change Enterprise Connect Award 2014 in security category of its successful IPv6 migration project.
Here is a case study:

Post implementation scenario:

___________________________________________________________________________________________________________

As per Government and as per corporate directions, BHEL Chennai planned to migrate our network from IPv4 to IPv6.

[image_library_tag 809/96809, style=”float: left;” alt=”ipv6″ ,default]

The permanent solution was deemed to be a redesign of the Internet Protocol itself.The next generation of the Internet Protocol, intended to replace IPv4 on the Internet, was eventually named Internet Protocol Version 6 (IPv6).

Challenges:

The company’s CTO was faced with the task of maintain the uptime 99.999 per cent in addition to ensuring data security, achieving business goals and
satisfied customers, both internal and external.

Implementation:
The address size was increased from 32 to 128 bits or 16 octets. The new
address space provides the potential for a maximum of 2128, or about
3.403×1038 addresses.

BHEL Chennai is the first among the BHEL units to complete the IPv6 migration on all areas listed below,

WAN (Public) Side :
1. Email Server (webmail.bhelmpc.co.in)
2. Webserver (www.bhelmpc.co.in)
3. Firewall
4. Antispam Appliance
5. Proxy server

LAN Side :
1. ADS Servers
2. Intranet Webserver
3. PCs
4. Switches, Routers, etc.

All the above are made possible by;

1.Establishing Firewall Technology(Watch guard XTM 1050) with high
availability dedicated FIREWALL appliance with HA has been established in our network to achieve the following.

1.External threats through ISP lines can be avoided.
2.Intrusion prevention.
3.IP spoofing can be prevented.
4.Content Filtering and unwanted ports can be locked.
5.99.9pc Uptime assured.

2.Establishing Email SPAM Filter (CISCO IRONPORT C160) with High
Availability.
Dedicated SPAM Filter Appliance (CISCO IRONPORT C160)
has been established in our network to achieve the following.
1.100pc SPAM free Incoming Mail and Outgoing Mail is assured.
2.Virus free Email also assured
3.99.9 per cent uptime assured.
4. Black listing of our domain name is avoided since virus and spam free
environment achieved.
5. Attachment scanning and filtering can also be done.

3.Establishing SYMANTEC Anti-Virus Server to improve threat free Desktop and Server environment to achieve the following
Dedicated SYMANTEC ANTIVIRUS Server for the Desktop and
Server environment(LAN) has been established to achieve the following
1.100pc virus free Desktop and Server environment is assured.
2.Data security is assured and vulnerability attacks can be prevented.
3.99.9 pc uptime assured.
4.Hardware safety and data transfer control also assured.
5.User satisfaction is assured.

IPv6 Enabled Servers & Services @ BHEL Piping Centre:

In order to support IPv6 services, the application servers need to be enabled for supporting IPv6. Initially at-least DNS and Web Server(s) should be configured to support IPv6.

Policy and authentication:

As per the directives of BHEL Corporate IT and DoT & Min of HI & PE, BHEL Chennai made a plan to migrate our LAN and WAN to IPv6 protocol as per standards. It involved the CTO, the data center manager and ISPs and our security consultants.

Components

[image_library_tag 808/96808, alt=”bhone” width=”350″ height=”190″ ,default]
In order to support IPv6 services, the application servers need to be enabled for supporting IPv6. Initially at-least DNS and Web Server(s) should be configured to support IPv6.

Post implementation:

After IPv6 implementation, the entire network works on WAN concept and unique identity. So all the threats are covered and the network became 100 per cent free from all the threats.

Only very few companies has enabled complete email communication through IPv6 channel and BHEL Chennai is the first among BHEL units to
accomplish this. As of now in India, under enterprise segment, only Google
and BHEL Piping Center has accomplished this complete email communication through IPv6 channel.

Ipv6 forum has audited BHEL Piping Center website and approved for IPv6 enablement program.

No Comments so fars

Jump into a conversation

No Comments Yet!

You can be the one to start a conversation.