8/10/2019 lkspalembang2014modul3-140829003105-phpapp01

1/5

LOMBA KOMPETENSI SISWA

SEKOLAH MENENGAH KEJURUANTINGKAT NASIONAL XXII 2014

PALEMBANG

BIDANG LOMBA

IT NETWORK SYSTEM ADMINISTRATION

KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN

DIREKTORAT JENDERAL PENDIDIKAN MENENGAH

DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN

JALAN JENDERAL SUDIRMAN GEDUNG E LT.12-13SENAYAN - JAKARTA

LEMBAR SOAL

MODUL 3

8/10/2019 lkspalembang2014modul3-140829003105-phpapp01

2/5

KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN

DIREKTORAT JENDERAL PENDIDIKAN MENENGAH

DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN

PALEMBANG 2014

LKS XXII Palembang 2014 2/5

DAY 2:

NETWORK SECURITY

CONTENTSThis Test Project proposal consists ofthe following document/file:

1. LKS_PALEMBANG_2014_MODUL3

INTRODUCTIONWarning: SAVE ALL YOUR CONFIGURATIONS!!! Every device will be rebooted

before marking.

The competition has a fixed start and finish time. You must decide how to best divide

your time.

Please carefullyread the following instructions!

DESCRIPTION OF PROJECT AND TASKSSecureNet is a company that develops computer network security.

8/10/2019 lkspalembang2014modul3-140829003105-phpapp01

3/5

KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN

DIREKTORAT JENDERAL PENDIDIKAN MENENGAH

DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN

PALEMBANG 2014

LKS XXII Palembang 2014 3/5

1. EXAM

Part 1 Network Installation

Setup networks according to the figure 2 below:

Figure 2. Network topology

Part 2 Debian 6.0 Operating system InstallationNote: Please use default configuration if you are not given detail

1. Install Linux Debian 6.0 operating system in PC Router and PC server. Dont

install graphical user interface (GUI) such as KDE, GNOME, etc.2.

Install Linux Debian 6.0 operating system in Laptop Client with user interface

(GUI) such as KDE, GNOME, etc.

Part 3 Work task debian router configuration

Note: Please use the default configuration if you are not given the details.

1. Configure the server with the hostname, domain and IP specified in the appendix.

2. Configure Debian Router to allow Debian server for access from Internet.

3.

Routing Configuration.

a. Enable routing

b.

Configure connection among Debian client, Debian Router and Debian

Server

4. Firewall Configuration.

a.

Configure Packet Filtering Firewall to allow DNS, HTTPS from outsideto scrServer

b. Configure PAT for HTTP using port 8080 from outside to scrServer

8/10/2019 lkspalembang2014modul3-140829003105-phpapp01

4/5

KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN

DIREKTORAT JENDERAL PENDIDIKAN MENENGAH

DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN

PALEMBANG 2014

LKS XXII Palembang 2014 4/5

c.

Configure PAT for SSH using port 14022 from outside to scrServer

d. Deny all other services.

e.

Configure Circuit Level Firewall as follow:

- Allow Internet area connect to Server.- Allow Local Network area connect to Internet and Server.

- Deny Internet area connection to Local Network.

- Deny Server Farm area connection to Local Network area.

Part 4 Work task debian server configurationNote: Please use the default configuration if you are not given the details.

1.

Configure the server with the hostname, domain and IP specified in the appendix.

2. Install and configure the service:

DNS Configuration.

a.

Configure DNS Server with two domain secure.net andnetsecure.orgb. Each domain contain: www, db, intranet

Example:

www.secure.net, www.netsecure.org,

db.secure.net, db.netsecure.org,

intranet.secure.net, intranet.netsecure.org,

Web Server Configuration.

a. Install Apache2

b. Modify the default page with the code in appendix

c. Create websites http://www.secure.netand http://www.netsecure.org

d.

Enable https accesshttps://www.secure.netand https://www.netsecure.org

e.

Make sure intranet.secure.net and intranet.netsecure.org is

protected by authenticationUse user intranet with password secure2014

SSH Server Configuration.

a. Install ssh server

b. Change SSH port default to 2244

Data Center (MySQL) configuration

a.

Install MySQL serverb. Change port default MySQL to 4033

c.

Install phpmyadmin

d. phpmyadmin access should be available under

http://db.secure.net/_dbmin

http://www.secure.net/http://www.netsecure.org/http://mail.secure.net/http://www.netsecure.org/http://intranet.secure.net/http://www.netsecure.org/http://www.secure.net/http://www.netsecure.org/http://www.netsecure.org/https://www.secure.net/https://www.secure.net/https://www.netsecure.org/https://www.netsecure.org/http://db.secure.net/_dbminhttp://db.secure.net/_dbminhttps://www.netsecure.org/https://www.secure.net/http://www.netsecure.org/http://www.secure.net/http://www.netsecure.org/http://intranet.secure.net/http://www.netsecure.org/http://mail.secure.net/http://www.netsecure.org/http://www.secure.net/

8/10/2019 lkspalembang2014modul3-140829003105-phpapp01

5/5

KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN

DIREKTORAT JENDERAL PENDIDIKAN MENENGAH

DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN

PALEMBANG 2014

LKS XXII Palembang 2014 5/5

2. APPENDIX

2.1

Debian router specificationDomain member: secure.net

Hostname scrRouter

rootpassword: Palembang2014

Default Account: Competitor

Password competitor2014

IP address: 172.16.x.1/25

10.10.x.2/29

( x is number competitor)

2.2

Debian server specificationDomain member: secure.net

Hostname scrServer

rootpassword: Palembang2014

Default Account: Competitor

Password competitor2014

IP address: 10.10.x.1/29

( x is number competitor)

2.3 Debian client specificationDomain member: secure.net

Hostname jakabaringPC

rootpassword: Palembang2014

Default Account: Competitor

Password competitor2014

IP address: 172.16.x.10/25 (Dont enter Gateway)