inctpc-list@list.cityoftacoma.org

Members of Intergovernmental Network Consortium of Tacoma-Pierce County

View all threads

INCTPC Meeting Thursday

SW
Strauss, Wesley
Wed, Oct 2, 2013 11:22 PM

INCTPC meeting 10 AM, Thursday, October 3, 2013.

================
New business:

IGN connection maintenance October 15, 2013 at 530PM, up to 30 minutes duration, by the state. This will affect the INCTPC connection to state resources.

================
Old business:

We discussed IPv6. The discussion was not focused on a plan to upgrade the INCTPC environment at this time, but to raise awareness around IPv6 and issues.  To recap, IPv6 is enabled by default in current Microsoft operating systems that we all utilize. While our network devices may currently only be routing IPv4, these new operating systems have the ability to tunnel IPv6 traffic in IPv4, so that it traverses our own agency's networks and potentially the INCTPC network. There are potential and known security issues with IPv6 - in some cases, the same issues we would have with network communications over IPv4, but also new concerns. All agencies seem to have taken different approaches (GPO, manually disabling and removing all components for IPv6, no action, etc.) to dealing with IPv6 configuration on workstations and servers. Maintaining visibility into network traffic, so that both network troubleshooting and security awareness can be performed, may be a challenge given our existing IPv4-focused tools. It was recommended that all who can should try to attend any upcoming presentation by Cisco on IPv6, as a recent such session was very enlightening. It appears some content may also be available on-line at cisco.com or their related training site(s). We expect to operate in a dual-stack IPv4 and IPv6 environment for some time going forward, but we need to continue to share information on the issues surrounding IPv6 and begin to plan how we will deal with supporting IPv6, including monitoring, troubleshooting, and security issues.

---=====================

Wesley Strauss

Network Engineer
South Sound 911 (formerly LESA)
Wesley.Strauss@southsound911.orgmailto:Wesley.Strauss@southsound911.org

INCTPC meeting 10 AM, Thursday, October 3, 2013. ================ New business: IGN connection maintenance October 15, 2013 at 530PM, up to 30 minutes duration, by the state. This will affect the INCTPC connection to state resources. ================ Old business: We discussed IPv6. The discussion was not focused on a plan to upgrade the INCTPC environment at this time, but to raise awareness around IPv6 and issues. To recap, IPv6 is enabled by default in current Microsoft operating systems that we all utilize. While our network devices may currently only be routing IPv4, these new operating systems have the ability to tunnel IPv6 traffic in IPv4, so that it traverses our own agency's networks and potentially the INCTPC network. There are potential and known security issues with IPv6 - in some cases, the same issues we would have with network communications over IPv4, but also new concerns. All agencies seem to have taken different approaches (GPO, manually disabling and removing all components for IPv6, no action, etc.) to dealing with IPv6 configuration on workstations and servers. Maintaining visibility into network traffic, so that both network troubleshooting and security awareness can be performed, may be a challenge given our existing IPv4-focused tools. It was recommended that all who can should try to attend any upcoming presentation by Cisco on IPv6, as a recent such session was very enlightening. It appears some content may also be available on-line at cisco.com or their related training site(s). We expect to operate in a dual-stack IPv4 and IPv6 environment for some time going forward, but we need to continue to share information on the issues surrounding IPv6 and begin to plan how we will deal with supporting IPv6, including monitoring, troubleshooting, and security issues. ====================================================== Wesley Strauss Network Engineer South Sound 911 (formerly LESA) Wesley.Strauss@southsound911.org<mailto:Wesley.Strauss@southsound911.org>