Advertisment

BHEL Chennai's sucessful IPv6 migration

author-image
Sharath Kumar
New Update

BHEL Piping Center, Chennai (also know as BHEL Chennai), is an ISO-9001 company and has embarked on its journey towards Total Quality Management.It's the world wide leader in manufacturing Power Piping products. The center manufactures more than 50 wide range of piping products. Some of them pipes, bends, fittings, hangers and flow nozzles.

Advertisment

BHEL Chennai won the C-Change Enterprise Connect Award 2014 in security category of its successful IPv6 migration project.

Here is a case study:

Post implementation scenario:

As per Government and as per corporate directions, BHEL Chennai planned to migrate our network from IPv4 to IPv6.

Advertisment

The permanent solution was deemed to be a redesign of the Internet Protocol itself.The next generation of the Internet Protocol, intended to replace IPv4 on the Internet, was eventually named Internet Protocol Version 6 (IPv6).

Challenges:

Advertisment

The company's CTO was faced with the task of maintain the uptime 99.999 per cent in addition to ensuring data security, achieving business goals and

satisfied customers, both internal and external.

Implementation:

The address size was increased from 32 to 128 bits or 16 octets. The new

address space provides the potential for a maximum of 2128, or about

3.403×1038 addresses.

BHEL Chennai is the first among the BHEL units to complete the IPv6 migration on all areas listed below,

Advertisment

WAN (Public) Side :

1. Email Server (webmail.bhelmpc.co.in)

2. Webserver (www.bhelmpc.co.in)

3. Firewall

4. Antispam Appliance

5. Proxy server

LAN Side :

1. ADS Servers

2. Intranet Webserver

3. PCs

4. Switches, Routers, etc.

All the above are made possible by;

Advertisment

1.Establishing Firewall Technology(Watch guard XTM 1050) with high

availability dedicated FIREWALL appliance with HA has been established in our network to achieve the following.

1.External threats through ISP lines can be avoided.

2.Intrusion prevention.

3.IP spoofing can be prevented.

4.Content Filtering and unwanted ports can be locked.

5.99.9pc Uptime assured.

2.Establishing Email SPAM Filter (CISCO IRONPORT C160) with High

Availability.

Dedicated SPAM Filter Appliance (CISCO IRONPORT C160)

has been established in our network to achieve the following.

1.100pc SPAM free Incoming Mail and Outgoing Mail is assured.

2.Virus free Email also assured

3.99.9 per cent uptime assured.

4. Black listing of our domain name is avoided since virus and spam free

environment achieved.

5. Attachment scanning and filtering can also be done.

Advertisment

3.Establishing SYMANTEC Anti-Virus Server to improve threat free Desktop and Server environment to achieve the following

Dedicated SYMANTEC ANTIVIRUS Server for the Desktop and

Server environment(LAN) has been established to achieve the following

1.100pc virus free Desktop and Server environment is assured.

2.Data security is assured and vulnerability attacks can be prevented.

3.99.9 pc uptime assured.

4.Hardware safety and data transfer control also assured.

5.User satisfaction is assured.

IPv6 Enabled Servers & Services @ BHEL Piping Centre:

In order to support IPv6 services, the application servers need to be enabled for supporting IPv6. Initially at-least DNS and Web Server(s) should be configured to support IPv6.

Advertisment

Policy and authentication:

As per the directives of BHEL Corporate IT and DoT & Min of HI & PE, BHEL Chennai made a plan to migrate our LAN and WAN to IPv6 protocol as per standards. It involved the CTO, the data center manager and ISPs and our security consultants.

Components



In order to support IPv6 services, the application servers need to be enabled for supporting IPv6. Initially at-least DNS and Web Server(s) should be configured to support IPv6.

Post implementation:

After IPv6 implementation, the entire network works on WAN concept and unique identity. So all the threats are covered and the network became 100 per cent free from all the threats.

Only very few companies has enabled complete email communication through IPv6 channel and BHEL Chennai is the first among BHEL units to

accomplish this. As of now in India, under enterprise segment, only Google

and BHEL Piping Center has accomplished this complete email communication through IPv6 channel.

Ipv6 forum has audited BHEL Piping Center website and approved for IPv6 enablement program.

case-studies