Contoh Soal LKS IT Network 2014 Di Palembang Modul 3

1. LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN
TINGKAT NASIONAL XXII – 2014
PALEMBANG
LEMBAR SOAL
MODUL 3
BIDANG LOMBA
IT NETWORK SYSTEM ADMINISTRATION
KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN
DIREKTORAT JENDERAL PENDIDIKAN MENENGAH
DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN
JALAN JENDERAL SUDIRMAN GEDUNG E LT.12-13
SENAYAN - JAKARTA

2. KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN
DIREKTORAT JENDERAL PENDIDIKAN MENENGAH
DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN
PALEMBANG 2014
DAY 2:
NETWORK SECURITY
CONTENTS
This Test Project proposal consists ofthe following document/file:
1. LKS_PALEMBANG_2014_MODUL3
INTRODUCTION
Warning: SAVE ALL YOUR CONFIGURATIONS!!! Every device will be rebooted
before marking.
The competition has a fixed start and finish time. You must decide how to best divide
your time.
Please carefully read the following instructions!
DESCRIPTION OF PROJECT AND TASKS
SecureNet is a company that develops computer network security.
LKS XXII – Palembang 2014 2/5

3. KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN
DIREKTORAT JENDERAL PENDIDIKAN MENENGAH
DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN
PALEMBANG 2014
1. EXAM
Part 1 – Network Installation
Setup networks according to the figure 2 below:
Figure 2. Network topology
Part 2 – Debian 6.0 Operating system Installation
Note: Please use default configuration if you are not given detail
1. Install Linux Debian 6.0 operating system in PC Router and PC server. Don’t
install graphical user interface (GUI) such as KDE, GNOME, etc.
2. Install Linux Debian 6.0 operating system in Laptop Client with user interface
(GUI) such as KDE, GNOME, etc.
Part 3 – Work task debian router configuration
Note: Please use the default configuration if you are not given the details.
1. Configure the server with the hostname, domain and IP specified in the appendix.
2. Configure Debian Router to allow Debian server for access from Internet.
3. Routing Configuration.
a. Enable routing
b. Configure connection among Debian client, Debian Router and Debian
Server
4. Firewall Configuration.
a. Configure Packet Filtering Firewall to allow DNS, HTTPS from outside
to scrServer
b. Configure PAT for HTTP using port 8080 from outside to scrServer
LKS XXII – Palembang 2014 3/5

4. KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN
DIREKTORAT JENDERAL PENDIDIKAN MENENGAH
DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN
PALEMBANG 2014
c. Configure PAT for SSH using port 14022 from outside to scrServer
d. Deny all other services.
e. Configure Circuit Level Firewall as follow:
- Allow Internet area connect to Server.
- Allow Local Network area connect to Internet and Server.
- Deny Internet area connection to Local Network.
- Deny Server Farm area connection to Local Network area.
Part 4 – Work task debian server configuration
Note: Please use the default configuration if you are not given the details.
1. Configure the server with the hostname, domain and IP specified in the appendix.
2. Install and configure the service:
 DNS Configuration.
a. Configure DNS Server with two domain secure.net and netsecure.org
b. Each domain contain: www, db, intranet
Example:
www.secure.net, www.netsecure.org,
db.secure.net, db.netsecure.org,
intranet.secure.net, intranet.netsecure.org,
 Web Server Configuration.
a. Install Apache2
b. Modify the default page with the code in appendix
c. Create websites http://www.secure.net and http://www.netsecure.org
d. Enable https access
https://www.secure.net and https://www.netsecure.org
e. Make sure “intranet.secure.net” and “intranet.netsecure.org” is
protected by authentication
Use user “intranet” with password ”secure2014”
 SSH Server Configuration.
a. Install ssh server
b. Change SSH port default to 2244
 Data Center (MySQL) configuration
a. Install MySQL server
b. Change port default MySQL to 4033
c. Install phpmyadmin
d. phpmyadmin access should be available under
http://db.secure.net/_dbmin
LKS XXII – Palembang 2014 4/5

5. KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN
DIREKTORAT JENDERAL PENDIDIKAN MENENGAH
DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN
PALEMBANG 2014
2. APPENDIX
2.1 Debian router specification
Domain member: secure.net
Hostname scrRouter
rootpassword: Palembang2014
Default Account: Competitor
Password competitor2014
IP address: 172.16.x.1/25
10.10.x.2/29
( x is number competitor)
2.2 Debian server specification
Domain member: secure.net
Hostname scrServer
rootpassword: Palembang2014
Default Account: Competitor
Password competitor2014
IP address: 10.10.x.1/29
( x is number competitor)
2.3 Debian client specification
Domain member: secure.net
Hostname jakabaringPC
rootpassword: Palembang2014
Default Account: Competitor
Password competitor2014
IP address: 172.16.x.10/25 (Don’t enter Gateway)
LKS XXII – Palembang 2014 5/5