Download as pdf or txt
Download as pdf or txt
You are on page 1of 24

L0MBA KOMPETENSI SISWA

SEKOLAH MENENGAH KEJURUAN


TINGKAT PROVINSI JAWA BARAT

CIREBON, 17-19 OKTOBER 2017

SOAL
MODUL A – LINUX ISLAND
(TERBUKA)

BIDANG LOMBA
IT NETWORK SYSTEM ADMIN
(IT NETWORK)

PEMERINTAH PROPINSI JAWA BARAT


DINAS PENDIDIKAN
JL. Dr. Radjiman No. 6 Tel. (022) 4264957, Fax. (022) 4264881
Wisselboard (022) 4264944, 4264957, 4264973
BANDUNG (40171)
1

ISLAND A – LINUX ISLAND


CONTENTS
This Test Project proposal consists of the following document/file:
LKS JABAR 2017_ITNSA_MODULA.pdf

INTRODUCTION
The competition has a fixed start and finish time. You must decide how to best divide your
time.
Please carefully read the following instructions!
When the competition time ends, please leave your station in a running state.

PHYSICAL MACHINE (HOST)


FOLDER PATHS
Virtual Machines: C:\LKS\Virtual Machine
ISO Images: C:\LKS\ISO

Password for OS Pre-Install : Skills39

Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
2

PART I
WORK TASK INSTALLATION (SOLOSRV, SEMARANGSRV)
Note Please use the default configuration if you are not given details.

WORK TASK SERVER SOLOSRV


Configure the server with the hostname, domain and IP specified in the appendix.
o Configure the disk and partitions
Add 3 disk with 7 GB of each disk.
Use the three virtual disks to create a software RAID 5.
Mount it as /files

o Create 30 local UNIX users with password “InaSkills2017”


Username: user[1-30]. ex: user1, user2, …, user30

o Install the services:


1. DNS (bind9)
Configure and install DNS Server with two domain
- skills4future.net to SOLOSRV
- skills39.edu.id to SEMARANGSRV
Create subdomain files.skills4future.net and internal.skills4future.net
Create subdomain monitor.skills39.edu.id and vpn.skills39.edu.id
Create a host www.skills4future.net for IP Public JATENGRO

2. Web Server (apache2 including php5)


Create website “http://internal.skills4future.net” and “http://www.skills4future.net”
- Use the following code for index.html in the http://internal.skills4future.net
<html>
<h1>Welcome in the INTERNAL skills4future.net</h1>
</html>

- Use the following code for index.html in the http://www.skills4future.net


<html>
<h1>Welcome in the skills4future.net</h1>
</html>

Make sure “http://internal.skills4future.net” is protected by authentication


- Allow users from “user11” to “user20”
Enable HTTPs for both sites
- Use a certificate signed by CA Service in SEMARANGSRV
- Make sure no certificate warning is shown.

3. FTP (proftpd)
Enable FTPS
- Use a certificate signed by SEMARANGSRV
Each user (user21 to user30) will have a home directory.

Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
3

Make sure the user is jailed in their respective website document root directories.
Make sure file transfer to the server is possible.

4. Mail
Make sure user11 to user20 have access via POP3, IMAP and SMTP
Before you finish your project make sure you send an email message from user14 to
user19 and another message from user19 to user14.
Do not delete these email messages.

5. File Server (Samba)


Share “MANAGER”
o Path is /files/manager
o Give access only to users “user1” to “user10”
o Make sure the share is not shown in the network browser of the clients
Share “GUEST”
o Path is /files/guest
o Enable read-only access to everyone

6. SSH Server
Install SSH Server
Use RADIUS SEMARANGSRV to authentication users.
Change SSH port default to 1945

WORK TASK SERVER SEMARANGSRV


Configure the server with the hostname, domain and IP specified in the appendix.
o Install the services:
1. CA (openssl)
Configure as CA
CA attributes should be set as follows
- Country code is set to ID
- Organization is set to LKSN2017
Create a root CA certificate
Store the certificate in directory /cert

2. Monitoring Server (Cacti)


Configure Cacti with url http://monitor.skills39.edu.id
Create an admin-user “master” with password “InaSkills2017”
Create a graph showing the statistics of the CPU, Memory and interfaces traffic of
JATENGRO

3. RADIUS (FreeRadius)
Create 5 users with password “InaSkills2017” for SSH login SOLOSRV
o Username: user[31-35]. ex: user31, user32, …, user35
Use “InaSkills2017” as share key

Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
4

4. DHCP
o Create DHCP Pool INTERNAL:
Range: 192.168.150.51 – 192.168.150.100
Netmask: /25
Gateway: 192.168.150.1
DNS: 172.23.199.3
o DNS-Suffix: skills4future.net
o SOLOCLT should always receive the following IP: 192.168.150.88
o The clients should automatically register their name with the DNS server after they
have been assigned with an IP address by the DHCP server.

Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
5

PART II
WORK TASK NETWORK CONFIGURATION (JATENGRO)
Note Please use the default configuration if you are not given details.

WORK TASK ROUTER JATENGRO


Configure the server with the hostname, domain and IP specified in the appendix.
o Install the services:
1. Routing
Enable routing to router forward IPv4 Packet

2. DHCP Relay
Configure DHCP Relay to SEMARANGSRV for internal client

3. Reverse Proxy (nginx)


Configure a reverse proxy for http://www.skills4future.net, which is hosted by SOLOSRV
Make sure external network can access to http://www.skills4future.net

4. VPN Server
External clients should connect to 212.99.45.65
Use address range 10.20.0.1 to 10.20.0.10 and DNS SOLOSRV for VPN clients
For login create a user “remote” with password “InaSkills2017”
Configure VPN for access to SOLOSRV and SEMARANGSRV.
External network can access to SOLOSRV and SEMARANGSRV after the VPN established

5. Firewall
External network allows the ICMP packet to interface external JATENGRO
Ensure the vpn client can’t access to internal client (SOLOCLT) when the vpn established.
(Can only access to SOLOSRV and SEMARANGSRV)

Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
6

PART III
WORK TASK LINUX CLIENT (JEPARACLT, SOLOCLT)
Note Please use the default configuration if you are not given details.

WORK TASK LINUX EXTERNAL (JEPARACLT)


Note Please use the default configuration if you are not given details.
o Install the base OS and use Gnome for the GUI
o Configure the client with the hostname, domain and IP specified in the appendix.
o Make sure the JEPARACLT can access to http://www.skills4future.net
o Make sure the JEPARACLT can access to SEMARANGSRV and SOLOSRV (via JATENGRO) through
VPN
o Make sure the root CA certificate of SEMARANGSRV is trusted
o Make sure the client certificate is installed
o Install FileZilla FTP client
o Install Icedove mail client
Configure mailbox of user14
Make sure user14 can send mails to user19
o Make sure the client can access samba shares.

WORK TASK LINUX INTERNAL (SOLOCLT)


Note Please use the default configuration if you are not given details.
o Install the base OS and use Gnome for the GUI
o Configure the client with the hostname, domain and IP specified in the appendix.
o Make sure the root CA certificate of SEMARANGSRV is trusted
o Make sure the client certificate is installed
o Install FileZilla FTP client
o Install Icedove mail client
Configure mailbox of user19
Make sure user19 can send mails to user14
o Make sure the client can access samba shares.
Mount the MANAGER SMB share to /mnt/manager on boot using fstab

Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
7

APPENDIX
SPECIFICATIONS

SOLOSRV
Operating System Linux Debian 7.8
Computer name: SOLOSRV
Root password InaSkills2017
User Name: competitor
User Password: InaSkills2017
eth0: 172.23.199.3/29

SEMARANGSRV
Operating System Linux Debian 7.8
Computer name: SEMARANGSRV
Root password Nasional2017
User Name: competitor
User Password: InaSkills2017
IP address: 172.23.199.4/29

JATENGRO
Operating System Linux Debian 7.8
Computer name: JATENGRO
Root password InaSkills2017
User Name: competitor
User Password: InaSkills2017
eth0: 212.99.45.65/28
eth1: 172.23.199.1/29
eth2: 192.168.150.1/25

JEPARACLT
Operating System Linux Debian 7.8 (GUI)
Computer name: JEPARACLT
Root password InaSkills2017
User Name: competitor
User Password: InaSkills2017
IP address: 212.99.45.70/28

Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
8

SOLOCLT
Operating System Linux Debian 7.8 (GUI)
Computer name: SOLOCLT
Root password InaSkills2017
User Name: competitor
User Password: InaSkills2017
IP address: DHCP

Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
NETWORK SPESIFICATION
L0MBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN
TINGKAT PROVINSI JAWA BARAT

CIREBON, 17-19 OKTOBER 2017

SOAL
MODUL B – SYSTEM INTEGRATION
(TERBUKA)

BIDANG LOMBA
IT NETWORK SYSTEM ADMIN
(IT NETWORK)

PEMERINTAH PROPINSI JAWA BARAT


DINAS PENDIDIKAN
JL. Dr. Radjiman No. 6 Tel. (022) 4264957, Fax. (022) 4264881
Wisselboard (022) 4264944, 4264957, 4264973
BANDUNG (40171)
1

ISLAND B – SYSTEM INTEGRATION ISLAND


CONTENTS
This Test Project proposal consists of the following document/file:
LKS JABAR 2017_ITNSA_MODULB.pdf

INTRODUCTION
The competition has a fixed start and finish time. You must decide how to best divide your
time.
Please carefully read the following instructions!
When the competition time ends, please leave your station in a running state.

PHYSICAL MACHINE (HOST)


FOLDER PATHS
Virtual Machines: C:\LKS\Virtual Machine
ISO Images: C:\LKS\ISO

Password for OS Pre-Install: Skills39

Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
2

PART I
WORK TASK INSTALLATION (WINSRV1, WINSRV2,
LNXSRV1, LNXSRV2)
Note Please use the default configuration if you are not given details.

WORK TASK SERVER WINSRV1


Configure the server with the hostname, domain and IP specified in the appendix.
o Modify the default Firewall rules to allow ICMP (ping) traffic
o Install Active Directory Domain Services for indonesiahebat.net.
Create a new Organization Unit named InaHebat2017. All new users and groups must be
created in this OU.
Create the user and security global group with members as indicated in the table in
Appendix. Use InaSkills2017 as the password for all user accounts.
Group Members Total Users
IT it[01 – 50] 50 users
Marketing mkt[01 – 50] 50 users
Visitors vtr[01 – 30] 30 users
Employees IT, Marketing 100 users

o DNS
Create a forward zone called “indonesiahebat.net”
Create a host info.indonesiahebat.net for WINSRV2
Create 2 hosts for LNXSRV1:
- training.indonesiahebat.net
- competition.indonesiahebat.net
Create reverse zones for the created DNS record

o GPO – Security Policies


At logon on WINCLNT2, users should see this message before logging in: Message Title:
“Welcome to Indonesiahebat2017” with Message Text “Only authorized personnel allowed
to access.” and prohibit this message on all servers.
All users, except the IT group, are not allowed to access the display settings on the Control
Panel.
disable "First Sign-in Animation" for all Windows 8.1 clients
disable the use of “cmd” and “run” for the Visitor group

o VPN SERVER (RRAS)


setup and configure the VPN service (RRAS)
use the following IP Range for the VPN Clients: 172.20.31.21 – 172.20.32.25
With a VPN connection the user should be able to access to the shares on WINSRV2
Only users in the IT group should be able to connect to the VPN server
Remote Clients should be able to access the VPN server via the IP address 200.132.45.12

Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
3

WORK TASK SERVER WINSRV2


Configure the server with the hostname, domain and IP specified in the appendix.
o Modify the default Firewall rules to allow ICMP (ping) traffic
o Make WINSRV2 a domain controller in the indonesiahebat.net domain
o Web Server (IIS)
Setup the web server for info.indonesiahebat.net
- Use the following code for index.html in the http://info.indonesiahebat.net
<html>
<h1>Welcome in the INFO Indonesia Hebat</h1>
</html>

o DHCP Server
Create Pool ISCLNT
- Range: 172.20.32.51– 172.20.32.100
- Netmask: /25
- Gateway: 172.20.32.1
- DNS: 172.20.31.3
- Option 150 (TFTP) 172.20.32.1

Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
4
WORK TASK SERVER WINSRV1 & WINSRV2
o Install Distributed File System
Create “skills” as the root DFS Namespace in a Domain-based namespace in 2008 mode.
Create DFS share folders and configure the folder targets as indicated in the following table.
Enable DFS Replication between WINSRV1 and WINSRV2.

DFS Namespace Share Folders Folder Target Local Folder on both Servers Description
\\indonesiahebat.net\skills\rfolder \\WINSRV1\rfolder C:\share\rfolders On WINSRV1 Folder
s s C:\share\rfolders On WINSRV2 Redirection &
\\WINSRV2\rfolder home folder
s
\\indonesiahebat.net\skills\IT \\WINSRV1\IT C:\share\IT On WINSRV1 Departmental
\\WINSRV2\IT C:\share\IT On WINSRV2 Share for IT
\\indonesiahebat.net\skills\Sales \\WINSRV1\Sales C:\share\Sales On WINSRV1 Departmental
\\WINSRV2\Sales C:\share\Sales On WINSRV2 Share for Sales
\\indonesiahebat.net\skills\Market \\WINSRV1\Mkt C:\share\Mkt On WINSRV1 Departmental
ing \\WINSRV2\Mkt C:\share\Mkt On WINSRV2 Share for
Marketing
o Configure users profiles and share folders:
Create users’ home folder \\indonesiahebat.net\skills\rfolders\%username% and ensure it is
mapped to Z: at each logon automatically.
- limit the storage space to every home folder to 50MB
- Prevent any .exe and .bat files to be stored on the home folder.
Redirect the Documents folder to
\\indonesiahebat.net\skills\rfolders\username\Documents.
Create departmental share folders on \\indonesiahebat.net\skills\IT,
\\indonesiahebat.net\skills\Sales and \\indonesiahebat.net\skills\Marketing and map the
respective share folder to Y: at logon, depending on the department the user is in. Users
should not be allowed to access other departments’ or users home shares.

WORK TASK SERVER LNXSRV1


Configure the server with the hostname, domain and IP specified in the appendix.
o Create 50 local UNIX users with password “InaSkills2017”
Username: user[1-50]. ex: user1, user2, …, user50
o Web Server (nginx)
Create 2 virtual webhost for training.indonesiahebat.net and
competition.indonesiahebat.net
- Use the following code for index.html in the http://training.indonesiahebat.net
<html>
<h1>Welcome in the TRAINING Indonesia Hebat</h1>
</html>

- Use the following code for index.html in the http://competition.indonesiahebat.net


<html>
<h1>Welcome in the COMPETITION Indonesia Hebat</h1>
</html>
o NTP Server
Set NTP server service. Use local clock as time server source

Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
o Cacti
 Install Cacti
 Create an admin-user “master” with password “InaSkills2017”
 Create a graph showing the statistics of the CPU, Memory and interfaces traffic of the
WINSRV1, WINSRV2, RO1 and SW1

o FreeRadius Server
Create following Radius users:
Username NetAdmin with password InaSkills2017
Username NetManager with password InaSkills2017
Configure RO1 and SW1 as radius client using LKSN2017 as share key.

Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
6

PART II
WORK TASK NETWORK CONFIGURATION (RO1, SW1)
Note Please use the default configuration if you are not given details.

WORK TASK ROUTER (RO1) & SWITCH (SW1)


o Use the Indonesia2017 as secret password
o Line console must login with the password InaSkills2017
o Configure AAA login with the lnxsrv1 as Radius Server
o Create username admin and password InaSkills2017 for failover user if RADIUS server is not
available
o Enable SSH Access with authentication using user radius server (lnxsrv1)
o Encrypt all clear text password
o Configure banner MOTD “AUTHORIZED ACCESS ONLY”
o Configure VLAN and IP Address

Device Interface VLAN ID IP Address Connect to

Fa0/0 - 200.132.45.5/25 WINCLT1-Cloud VMNet2


Fa0/1.320 320 (ISCLNT) 172.20.32.1/26 SW1-Fa1/0
Fa0/1.331 331 (BRSRV) 172.20.33.1/25 SW1-Fa1/0
RO1 Fa0/1.332 332 (ISSRV2) 172.20.33.65/25 SW1-Fa1/0

Fa1/0
Trunk - RO1-Fa0/1
Fa1/1
331 (BRSRV) 172.20.33.62/26 BRSRV Network-Cloud Bridged
SW1
Fa1/2 332 (ISSRV2) - ISSRV2 Network-Cloud Bridged
Fa1/3
320 (ISCLNT) - ISCLNT Network-Cloud Bridged

WORK TASK ROUTER (RO1)


o Configure the router with the hostname RO1
o Configure DHCP Relay for VLAN “ISCLNT” to WINSRV2
o Configure NAT / PAT
 Configure Static NAT
Static NAT to winsrv1 with IP address 202.132.45.12
Static NAT to lnxsrv1 with IP address 202.132.45.9
Static NAT to winsrv2 with IP address 202.132.45.10
o Telephony Service
 Configure max 5 ephone and max 10 ephone-dn
 Number 999 is used for paging all phones of the company
o Access Control List (ACL)
 Configure Access List with name “DEVICE_ACCESS” for SSH access control wirh following rule:
- Allow only BRSRV and ISSRV2 network to SSH RO1
 Apply ACL to RO1 on line vty.
o SNMP
 Enable SNMP v2c with “LKSN” as the read-only community string

Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
7

WORK TASK SWITCH (SW1)


o Configure the switch with the hostname SW1
o Configure port interface connection based on diagram

Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
8

PART III
WORK TASK WINDOWS CLIENT (WINCLNT1, WINCLNT2,
IP PHONE)
Note Please use the default configuration if you are not given details.

WORK TASK WINDOWS EXTERNAL (WINCLNT1)


Configure the server with the hostname, domain and IP specified in the appendix.
o Connect the WINCLNT1 to the interface Fa0/0 on RO1
o Configure VPN client for connect to winsrv1
o Install and configure Cisco IP Communicator, make sure IP Communicator registered and assigned
with number 1008

WORK TASK WINDOWS INTERNAL (WINCLNT2)


Configure the server with the hostname, domain and IP specified in the appendix.
o Connect the WINCLNT to the switch VLAN ISCLNT
o Join the notebook to the domain
o Install and configure Cisco IP Communicator, make sure IP Communicator registered and assigned
with number 1007
o Set the time for use NTP Server LNXSRV1

WORK TASK IP PHONE (HQVPH1)


Note: Please use the default configuration if you are not given the details.
o Install Softphone on PC2
o Make sure IP Communicator registered and assigned with number 1006

Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
9

APPENDIX
SPECIFICATIONS

WINSRV1
Computer name: WINSRV1
Operating System MS Windows 2012 R2
Domain Name: indonesiahebat.net
Administrator User name: Administrator
Administrator password: InaSkills2017
IP address: 172.20.33.2/26
Domain NetBIOS Name: HEBAT

WINSRV2
Computer name: WINSRV2
Operating System MS Windows 2012 R2
Domain Name: indonesiahebat.net
Administrator User name: Administrator
Administrator password: InaSkills2017
IP address: 172.20.33.67/26
Domain NetBIOS Name: HEBAT

LNXSRV1
Computer name: LNXSRV1
Operating System Linux Debian 7.8
User name: root
Password: InaSkills2017

IP address: 172.20.33.3/26

Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
WINCLNT1 (EXTERNAL)
Computer name: WINCLNT 1
Operating System MS Windows 8.1
User name: Administrator
Password: InaSkills2017
Domain name: Indonesiahebat.net

IP address: 202.132.45.28/27

WINCLNT2
Computer name: WINCLNT 2
Operating System MS Windows 8.1
User name: Administrator
Password: InaSkills2017
Domain name: indonesiahebat.net

IP address: DHCP (172.23.32.x/25)

NETWORK SPESIFICATION
VLAN ISCLNT (VLAN 320) 172.20.32.0/25
VLAN BRSRV (VLAN 331) 172.20.33.0/26
VLAN ISSRV2 (VLAN 332) 172.20.33.64/26
OUTSIDE 200.132.45.0/25

Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2
NETWORK SPESIFICATION
NETWORK SPESIFICATION (GNS3)

 RO1 using C7200 with IOS c7200-advipservicesk9-mz.150-1.M


 RO1 using C7200-IO-FE module for slot 0
 SW1 using C3725 as EtherSwitch with IOS c3725-adventerprisek9-mz.124-25d
 SW1 using default GT96100-FE for slot 0 and NM-16ESW for slot 1
 Connection to VM and Physical network using cloud mapped to respective interface

You might also like