LOMBA KOMPETENSI SISWA

SEKOLAH MENENGAH KEJURUAN TINGKAT NASIONAL XXII – 2014

PALEMBANG

BIDANG LOMBA IT NETWORK SYSTEM ADMINISTRATION

KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN DIREKTORAT JENDERAL PENDIDIKAN MENENGAH

DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN JALAN JENDERAL SUDIRMAN GEDUNG E LT.12-13

SENAYAN - JAKARTA

LEMBAR SOAL

MODUL 3

KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN DIREKTORAT JENDERAL PENDIDIKAN MENENGAH

DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN PALEMBANG 2014

LKS XXII – Palembang 2014 2/5

DAY 2: NETWORK SECURITY CONTENTS This Test Project proposal consists ofthe following document/file:

1. LKS_PALEMBANG_2014_MODUL3 INTRODUCTION Warning: SAVE ALL YOUR CONFIGURATIONS!!! Every device will be rebooted before marking. The competition has a fixed start and finish time. You must decide how to best divide your time. Please carefully read the following instructions! DESCRIPTION OF PROJECT AND TASKS SecureNet is a company that develops computer network security.

KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN DIREKTORAT JENDERAL PENDIDIKAN MENENGAH

DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN PALEMBANG 2014

LKS XXII – Palembang 2014 3/5

1. EXAM Part 1 – Network Installation Setup networks according to the figure 2 below:

Figure 2. Network topology

Part 2 – Debian 6.0 Operating system Installation Note: Please use default configuration if you are not given detail

1. Install Linux Debian 6.0 operating system in PC Router and PC server. Don’t install graphical user interface (GUI) such as KDE, GNOME, etc.

2. Install Linux Debian 6.0 operating system in Laptop Client with user interface (GUI) such as KDE, GNOME, etc.

Part 3 – Work task debian router configuration Note: Please use the default configuration if you are not given the details.

1. Configure the server with the hostname, domain and IP specified in the appendix. 2. Configure Debian Router to allow Debian server for access from Internet. 3. Routing Configuration.

a. Enable routing b. Configure connection among Debian client, Debian Router and Debian

Server

4. Firewall Configuration. a. Configure Packet Filtering Firewall to allow DNS, HTTPS from outside

to scrServer b. Configure PAT for HTTP using port 8080 from outside to scrServer

KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN DIREKTORAT JENDERAL PENDIDIKAN MENENGAH

DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN PALEMBANG 2014

LKS XXII – Palembang 2014 4/5

c. Configure PAT for SSH using port 14022 from outside to scrServer d. Deny all other services. e. Configure Circuit Level Firewall as follow:

- Allow Internet area connect to Server. - Allow Local Network area connect to Internet and Server. - Deny Internet area connection to Local Network. - Deny Server Farm area connection to Local Network area.

Part 4 – Work task debian server configuration Note: Please use the default configuration if you are not given the details.

1. Configure the server with the hostname, domain and IP specified in the appendix. 2. Install and configure the service:

DNS Configuration. a. Configure DNS Server with two domain secure.net and netsecure.org b. Each domain contain: www, db, intranet

Example: www.secure.net, www.netsecure.org, db.secure.net, db.netsecure.org, intranet.secure.net, intranet.netsecure.org,

Web Server Configuration.

a. Install Apache2 b. Modify the default page with the code in appendix c. Create websites http://www.secure.net and http://www.netsecure.org d. Enable https access

https://www.secure.net and https://www.netsecure.org e. Make sure “intranet.secure.net” and “intranet.netsecure.org” is

protected by authentication Use user “intranet” with password ”secure2014”

SSH Server Configuration. a. Install ssh server b. Change SSH port default to 2244

Data Center (MySQL) configuration

a. Install MySQL server b. Change port default MySQL to 4033 c. Install phpmyadmin d. phpmyadmin access should be available under

http://db.secure.net/_dbmin

KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN DIREKTORAT JENDERAL PENDIDIKAN MENENGAH

DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN PALEMBANG 2014

LKS XXII – Palembang 2014 5/5

2. APPENDIX

2.1 Debian router specification Domain member: secure.net

Hostname scrRouter

rootpassword: Palembang2014

Default Account: Competitor

Password competitor2014

IP address: 172.16.x.1/25 10.10.x.2/29 ( x is number competitor)

2.2 Debian server specification Domain member: secure.net

Hostname scrServer

rootpassword: Palembang2014

Default Account: Competitor

Password competitor2014

IP address: 10.10.x.1/29 ( x is number competitor)

2.3 Debian client specification Domain member: secure.net

Hostname jakabaringPC

rootpassword: Palembang2014

Default Account: Competitor

Password competitor2014

IP address: 172.16.x.10/25 (Don’t enter Gateway)