The protocol that guides the administration of  the routing addresses is the Internet protocol. The most widely  deployed version of IP is version 4 (IPv4). IPv4 uses a 32-bit address format, which provides approximately 4.3  billion unique IP addresses. As  a result, the region is investing in IPv6 development, testing, and  implementation. IPv6 Key Characteristics Increase Address Space, Improve Functionality, Ease Network Administration, and Enhance Security

The key characteristics of IPv6 are designed to increase address  space, promote flexibility and functionality, and enhance security. For example, IPv6 dramatically increases the amount of IP address  space available from the approximately 4.3 billion in IPv4 to  approximately 3.4 × 10This large number of IPv6 addresses means that almost any  electronic device can have its own address. Besides recognizing that an IPv6 transition is already under way,  other key considerations for federal agencies to address in an IPv6  transition include significant IT planning efforts and immediate  actions to ensure the security of agency information and networks. Progress Has Been Made at Defense but Is Lacking at Other Federal Agencies

The Department of Defense’s transition to IPv6 is a key component  of its business case to improve interoperability among many  information and weapons systems, known as the Global Information  Grid (GIG). The department’s efforts to develop policies, timelines, and methods  for transitioning to IPv6 are progressing. Although DOD has made substantial progress in developing a  planning framework for transitioning to IPv6, the department still  faces several challenges, including developing a full inventory of  IPv6-capable software and hardware, finalizing its IPv6 systems  engineering management plan, monitoring its operational networks  for unauthorized IPv6 traffic, and developing a comprehensive  enforcement strategy, including using its existing budgetary and  acquisition review process. Unlike DOD, the majority of other federal agencies reporting have  not yet initiated transition planning efforts for IPv6. The  majority of agencies have not addressed key planning  considerations. Specifically, we recommended that  the Director of OMB instruct agencies to begin developing  inventories and assessing risks, creating business cases for the IPv6  transition, establishing policies and enforcement mechanisms,  determining the costs, and identifying timelines and methods for  transition, as appropriate. Finally, because poorly  configured and unmanaged IPv6 capabilities present immediate  risks to federal agency networks, we recommended that agency  heads take immediate action to address the near-term security risks. But such benefits may  be diminished if action is not taken to ensure that agencies are  addressing the attendant challenges, including addressing key  planning considerations and acting to ensure the security of agency  information and networks.
Why GAO Did This Study

The Internet protocol (IP) provides the addressing mechanism that defines how and where information such as text, voice, and video moves across interconnected networks. Internet protocol version 4 (IPv4), which is widely used today, may not be able to accommodate the increasing number of global users and devices that are connecting to the Internet. As a result, IP version 6 (IPv6) was developed to increase the amount of available IP address space. The new protocol is gaining increased attention from regions with limited IP addresses. For its testimony, GAO was asked to discuss the findings and recommendations of its recent study of IPv6 (GAO-05-471). In this study, GAO was asked to (1) describe the key characteristics of IPv6; (2) identify the key planning considerations for federal agencies in transitioning to IPv6; and (3) determine the progress made by the Department of Defense (DOD) and other major agencies in the transition to IPv6.

What GAO Found

The key characteristics of IPv6 are designed to increase address space, promote flexibility and functionality, and enhance security. For example, by using 128-bit addresses rather than 32-bit addresses, IPv6 dramatically increases the available Internet address space from approximately 4.3 billion in IPv4 to approximately 3.4 x 10^38 in IPv6. Key planning considerations for federal agencies include recognizing that the transition is already under way, because agency networks already include IPv6-capable software and equipment. Other important agency planning considerations include developing inventories and assessing risks; creating business cases that identify organizational needs and goals; establishing policies and enforcement mechanisms; determining costs; and identifying timelines and methods for transition. Managing the security aspects of transition is also an important consideration because poorly managed IPv6 capabilities can put agency information and systems at risk. DOD has made progress in developing a business case, policies, timelines, and processes for transitioning to IPv6. Unlike DOD, the majority of other major federal agencies reported that they have not yet initiated key planning efforts for IPv6. In its report, GAO recommended, among other things, that the Director of the Office of Management and Budget (OMB) instruct agencies to begin to address key planning considerations for the IPv6 transition and that agencies act to mitigate near-term IPv6 security risks. Officials from OMB, DOD, and Commerce generally agreed with the contents of the report.