Dual stack coexistence guarantees application Chifeng City accelerates the construction and application of IPv6 in e-government external network

[[435282]]

Chifeng City's e-government extranet is an extension of the national and autonomous region's e-government extranets. Construction began in 2011 in accordance with the autonomous region's work requirements. At the end of 2012, the city-level e-government extranet upgrade was completed, and the interconnection of the three-level government extranet backbone networks of the autonomous region, city, and banner and county was achieved, as well as the migration and deployment of departmental business systems to the government extranet.

With the launch of the national IPv6 strategy and the release of the Information Security Level Protection 2.0 standard, and in accordance with the national and autonomous region's requirements for the large-scale deployment and application of IPv6, the Chifeng Municipal Government Service Bureau organized the IPv6 transformation of the city's e-government external network, built a dual-stack coexistence, secure and reliable network system, improved the IPv6-based security protection system, and enhanced the IPv6 technology application, business support and security assurance capabilities of the Chifeng municipal e-government external network, providing a safe and efficient government network platform for government governance and public services.

​​

(Figure: Chifeng City’s e-government external network realizes IPv6 intercommunication)

1. Overall planning to promote the new development of IPv6 in government extranets

The IPv6 transformation of Chifeng's municipal e-government external network involves a wide range of areas, multiple systems, and great difficulty. After sufficient demonstration, the IPv6 transformation and construction plan for the municipal e-government external network was determined, and the transformation and construction work was fully launched in December 2020.

Since the overall deployment and application of IPv6 is in its infancy, there are certain difficulties in the address planning, allocation and technical application of IPv6. Therefore, the winning service provider and Ruijie Network, the provider of core data communication equipment for the government extranet, jointly formed a project expert service team to study and formulate a plan for the IPv6 address planning, allocation and technical application of the municipal e-government extranet. With the coordinated cooperation of the expert team and the project implementation team, the organization completed the IPv6/IPv4 dual stack deployment and realized the IPv6 access application of business systems such as the Chifeng Municipal People's Government website deployed on the municipal e-government extranet.

After this transformation, Chifeng City's e-government external network has successfully achieved a smooth transition from IPv4 to IPv6 architecture, and created an IPv6 network support platform that meets the multi-business application needs of the e-government external network.

2. Dual stack coexistence to build a new IPv6 architecture for government extranets

The Chifeng municipal e-government extranet reconstruction project is based on the principle of full utilization, expanding and upgrading the existing network and security equipment to ensure the improvement of business carrying capacity and meet the needs of business development. At the same time, the Internet exit, core switching, horizontal access outside the building and access inside the comprehensive building, government extranet external connection, application services and operation and maintenance management areas are re-divided to improve the functions of the government extranet, enhance business carrying capacity, and meet the deployment needs of different businesses such as the government extranet and the Internet.

After IPv6 transformation and construction, the Chifeng municipal e-government external network has been built into a new architecture with IPv4/IPv6 dual stack coexistence, realizing IPv4/IPv6 dual stack network operation and meeting the requirements of IPv4/IPv6 dual stack terminals being online at the same time. At the same time, IPv4 addresses and IPv6 addresses are uniformly allocated by the core switch, and the association between IPv4/IPv6 addresses is established. While meeting the IPv6 carrying capacity in business, it can also quickly transition to IPv6 single stack operation in the future.

3. Security reinforcement to create a three-dimensional security protection system for the government extranet

While carrying out the IPv6 transformation and construction of the government extranet, the project team upgraded and reinforced the original security system of the government extranet, taking into full consideration the Level 3 standard of Information Security Protection Technology 2.0 and IPv6 security requirements: in terms of network architecture, core and key network equipment are deployed with dual-machine and dual-link redundancy; at the access end of the government extranet, security access equipment is deployed to implement real-name registration, authentication and access control of legal users of the extranet; security boundaries are set up in various functional areas of the government extranet, and firewalls, IPS, vulnerability scans, database audits, log audits, operation and maintenance audits, Internet behavior management, WAF and other security equipment that are compatible with the IPv6 protocol are upgraded and deployed; security collection probes and network security situation awareness platforms are deployed at the Internet exit, government extranet external connection area and business application area.

Through the above deployment, a three-dimensional security protection system for the municipal e-government extranet has been created to achieve overall protection for the access, visit and application of the government extranet users. At the same time, through real-time monitoring of the access logs and traffic of the government extranet and business systems, as well as the analysis, early warning and disposal of security incidents, the security protection and threat risk prevention capabilities of the municipal e-government extranet have been greatly improved.

4. Optimize and upgrade to enhance the operation and maintenance management capabilities of the government extranet

In order to meet the application requirements of new technologies, new architectures, and new equipment in terms of performance and security, and to improve operation and maintenance management capabilities, Ruijie Networks has also comprehensively upgraded and optimized the RIIL operation and maintenance management platform that was originally deployed and operated, and introduced Ruijie Networks' comprehensive IT operation and maintenance solution to realize the monitoring and management of IPv6 devices.

​​

(Figure: Chifeng City e-government extranet RIIL operation and maintenance management platform)

Based on the new operation and maintenance management platform, unified operation and maintenance monitoring and management of network equipment of different types, different manufacturers, and different IT infrastructures in Chifeng City's e-government extranet has been realized; based on the horizontal and vertical monitoring data collection and reporting, the operation status, performance trend, and operation and maintenance efficiency of the e-government extranet equipment can be visualized, providing real-time data for operation and maintenance personnel and dashboards for management personnel. The deployment of the new function RIIL has greatly improved the work efficiency of our city's government extranet operation and maintenance management personnel, and ensured the safe, stable, and efficient operation of the government extranet.

Through IPv6 transformation and construction, the Chifeng municipal e-government external network has realized IPv6/IPv4 deployment and application as a whole, and fully supports IPv6/IPv4 multiple business application requirements. In the next stage, Chifeng will comprehensively promote the IPv6 transformation of the county-level e-government external network, realize the overall IPv6 transformation and upgrade of the Chifeng e-government external network, fully support IPv6 business applications, and provide a solid network platform support and security guarantee for promoting the development of the city's digital economy and digital government construction.