Professional Documents
Culture Documents
SOAL-TERBUKA-IT-Network. MODUL A Dan B
SOAL-TERBUKA-IT-Network. MODUL A Dan B
SOAL
MODUL A – LINUX ISLAND
(TERBUKA)
BIDANG LOMBA
IT NETWORK SYSTEM ADMIN
(IT NETWORK)
INTRODUCTION
The competition has a fixed start and finish time. You must decide how to best divide your
time.
Please carefully read the following instructions!
When the competition time ends, please leave your station in a running state.
Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
2
PART I
WORK TASK INSTALLATION (SOLOSRV, SEMARANGSRV)
Note Please use the default configuration if you are not given details.
3. FTP (proftpd)
Enable FTPS
- Use a certificate signed by SEMARANGSRV
Each user (user21 to user30) will have a home directory.
Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
3
Make sure the user is jailed in their respective website document root directories.
Make sure file transfer to the server is possible.
4. Mail
Make sure user11 to user20 have access via POP3, IMAP and SMTP
Before you finish your project make sure you send an email message from user14 to
user19 and another message from user19 to user14.
Do not delete these email messages.
6. SSH Server
Install SSH Server
Use RADIUS SEMARANGSRV to authentication users.
Change SSH port default to 1945
3. RADIUS (FreeRadius)
Create 5 users with password “InaSkills2017” for SSH login SOLOSRV
o Username: user[31-35]. ex: user31, user32, …, user35
Use “InaSkills2017” as share key
Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
4
4. DHCP
o Create DHCP Pool INTERNAL:
Range: 192.168.150.51 – 192.168.150.100
Netmask: /25
Gateway: 192.168.150.1
DNS: 172.23.199.3
o DNS-Suffix: skills4future.net
o SOLOCLT should always receive the following IP: 192.168.150.88
o The clients should automatically register their name with the DNS server after they
have been assigned with an IP address by the DHCP server.
Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
5
PART II
WORK TASK NETWORK CONFIGURATION (JATENGRO)
Note Please use the default configuration if you are not given details.
2. DHCP Relay
Configure DHCP Relay to SEMARANGSRV for internal client
4. VPN Server
External clients should connect to 212.99.45.65
Use address range 10.20.0.1 to 10.20.0.10 and DNS SOLOSRV for VPN clients
For login create a user “remote” with password “InaSkills2017”
Configure VPN for access to SOLOSRV and SEMARANGSRV.
External network can access to SOLOSRV and SEMARANGSRV after the VPN established
5. Firewall
External network allows the ICMP packet to interface external JATENGRO
Ensure the vpn client can’t access to internal client (SOLOCLT) when the vpn established.
(Can only access to SOLOSRV and SEMARANGSRV)
Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
6
PART III
WORK TASK LINUX CLIENT (JEPARACLT, SOLOCLT)
Note Please use the default configuration if you are not given details.
Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
7
APPENDIX
SPECIFICATIONS
SOLOSRV
Operating System Linux Debian 7.8
Computer name: SOLOSRV
Root password InaSkills2017
User Name: competitor
User Password: InaSkills2017
eth0: 172.23.199.3/29
SEMARANGSRV
Operating System Linux Debian 7.8
Computer name: SEMARANGSRV
Root password Nasional2017
User Name: competitor
User Password: InaSkills2017
IP address: 172.23.199.4/29
JATENGRO
Operating System Linux Debian 7.8
Computer name: JATENGRO
Root password InaSkills2017
User Name: competitor
User Password: InaSkills2017
eth0: 212.99.45.65/28
eth1: 172.23.199.1/29
eth2: 192.168.150.1/25
JEPARACLT
Operating System Linux Debian 7.8 (GUI)
Computer name: JEPARACLT
Root password InaSkills2017
User Name: competitor
User Password: InaSkills2017
IP address: 212.99.45.70/28
Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
8
SOLOCLT
Operating System Linux Debian 7.8 (GUI)
Computer name: SOLOCLT
Root password InaSkills2017
User Name: competitor
User Password: InaSkills2017
IP address: DHCP
Version: 1.0
LKS-JABAR_ITNSA
Date: 16.08.2017
NETWORK SPESIFICATION
L0MBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN
TINGKAT PROVINSI JAWA BARAT
SOAL
MODUL B – SYSTEM INTEGRATION
(TERBUKA)
BIDANG LOMBA
IT NETWORK SYSTEM ADMIN
(IT NETWORK)
INTRODUCTION
The competition has a fixed start and finish time. You must decide how to best divide your
time.
Please carefully read the following instructions!
When the competition time ends, please leave your station in a running state.
Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
2
PART I
WORK TASK INSTALLATION (WINSRV1, WINSRV2,
LNXSRV1, LNXSRV2)
Note Please use the default configuration if you are not given details.
o DNS
Create a forward zone called “indonesiahebat.net”
Create a host info.indonesiahebat.net for WINSRV2
Create 2 hosts for LNXSRV1:
- training.indonesiahebat.net
- competition.indonesiahebat.net
Create reverse zones for the created DNS record
Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
3
o DHCP Server
Create Pool ISCLNT
- Range: 172.20.32.51– 172.20.32.100
- Netmask: /25
- Gateway: 172.20.32.1
- DNS: 172.20.31.3
- Option 150 (TFTP) 172.20.32.1
Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
4
WORK TASK SERVER WINSRV1 & WINSRV2
o Install Distributed File System
Create “skills” as the root DFS Namespace in a Domain-based namespace in 2008 mode.
Create DFS share folders and configure the folder targets as indicated in the following table.
Enable DFS Replication between WINSRV1 and WINSRV2.
DFS Namespace Share Folders Folder Target Local Folder on both Servers Description
\\indonesiahebat.net\skills\rfolder \\WINSRV1\rfolder C:\share\rfolders On WINSRV1 Folder
s s C:\share\rfolders On WINSRV2 Redirection &
\\WINSRV2\rfolder home folder
s
\\indonesiahebat.net\skills\IT \\WINSRV1\IT C:\share\IT On WINSRV1 Departmental
\\WINSRV2\IT C:\share\IT On WINSRV2 Share for IT
\\indonesiahebat.net\skills\Sales \\WINSRV1\Sales C:\share\Sales On WINSRV1 Departmental
\\WINSRV2\Sales C:\share\Sales On WINSRV2 Share for Sales
\\indonesiahebat.net\skills\Market \\WINSRV1\Mkt C:\share\Mkt On WINSRV1 Departmental
ing \\WINSRV2\Mkt C:\share\Mkt On WINSRV2 Share for
Marketing
o Configure users profiles and share folders:
Create users’ home folder \\indonesiahebat.net\skills\rfolders\%username% and ensure it is
mapped to Z: at each logon automatically.
- limit the storage space to every home folder to 50MB
- Prevent any .exe and .bat files to be stored on the home folder.
Redirect the Documents folder to
\\indonesiahebat.net\skills\rfolders\username\Documents.
Create departmental share folders on \\indonesiahebat.net\skills\IT,
\\indonesiahebat.net\skills\Sales and \\indonesiahebat.net\skills\Marketing and map the
respective share folder to Y: at logon, depending on the department the user is in. Users
should not be allowed to access other departments’ or users home shares.
Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
o Cacti
Install Cacti
Create an admin-user “master” with password “InaSkills2017”
Create a graph showing the statistics of the CPU, Memory and interfaces traffic of the
WINSRV1, WINSRV2, RO1 and SW1
o FreeRadius Server
Create following Radius users:
Username NetAdmin with password InaSkills2017
Username NetManager with password InaSkills2017
Configure RO1 and SW1 as radius client using LKSN2017 as share key.
Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
6
PART II
WORK TASK NETWORK CONFIGURATION (RO1, SW1)
Note Please use the default configuration if you are not given details.
Fa1/0
Trunk - RO1-Fa0/1
Fa1/1
331 (BRSRV) 172.20.33.62/26 BRSRV Network-Cloud Bridged
SW1
Fa1/2 332 (ISSRV2) - ISSRV2 Network-Cloud Bridged
Fa1/3
320 (ISCLNT) - ISCLNT Network-Cloud Bridged
Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
7
Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
8
PART III
WORK TASK WINDOWS CLIENT (WINCLNT1, WINCLNT2,
IP PHONE)
Note Please use the default configuration if you are not given details.
Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
9
APPENDIX
SPECIFICATIONS
WINSRV1
Computer name: WINSRV1
Operating System MS Windows 2012 R2
Domain Name: indonesiahebat.net
Administrator User name: Administrator
Administrator password: InaSkills2017
IP address: 172.20.33.2/26
Domain NetBIOS Name: HEBAT
WINSRV2
Computer name: WINSRV2
Operating System MS Windows 2012 R2
Domain Name: indonesiahebat.net
Administrator User name: Administrator
Administrator password: InaSkills2017
IP address: 172.20.33.67/26
Domain NetBIOS Name: HEBAT
LNXSRV1
Computer name: LNXSRV1
Operating System Linux Debian 7.8
User name: root
Password: InaSkills2017
IP address: 172.20.33.3/26
Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2017
WINCLNT1 (EXTERNAL)
Computer name: WINCLNT 1
Operating System MS Windows 8.1
User name: Administrator
Password: InaSkills2017
Domain name: Indonesiahebat.net
IP address: 202.132.45.28/27
WINCLNT2
Computer name: WINCLNT 2
Operating System MS Windows 8.1
User name: Administrator
Password: InaSkills2017
Domain name: indonesiahebat.net
NETWORK SPESIFICATION
VLAN ISCLNT (VLAN 320) 172.20.32.0/25
VLAN BRSRV (VLAN 331) 172.20.33.0/26
VLAN ISSRV2 (VLAN 332) 172.20.33.64/26
OUTSIDE 200.132.45.0/25
Version: 1.1
LKS-JABAR_ITNSA
Date: 16.08.2
NETWORK SPESIFICATION
NETWORK SPESIFICATION (GNS3)