Scribd Logo
Upload

Welcome to Scribd!

  • 21 views

    Sekolah Menengah Kejuruan: Lomba Kompetensi Siswa Tingkat Nasional Xxii - 2014 Palembang

    Uploaded by

    VAN BECKER
    This document provides instructions for a competition involving setting up a secure computer network. Competitors must install Linux operating systems on a router, server, and client. They then need to configure the router for routing and firewalls, and the server for DNS, web, SSH, and database services. The network topology diagram and specifications for the router, server, and client are provided in appendices for the competitors to reference during the competition.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Sekolah Menengah Kejuruan: Lomba Kompetensi Siswa Tingkat Nasional Xxii - 2014 Palembang

    Uploaded by

    VAN BECKER
    21 views5 pages
    This document provides instructions for a competition involving setting up a secure computer network. Competitors must install Linux operating systems on a router, server, and client. They then need to configure the router for routing and firewalls, and the server for DNS, web, SSH, and database services. The network topology diagram and specifications for the router, server, and client are provided in appendices for the competitors to reference during the competition.

    Original Description:

    couse

    Original Title

    lkspalembang2014modul3-140829003105-phpapp01

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document provides instructions for a competition involving setting up a secure computer network. Competitors must install Linux operating systems on a router, server, and client. They then need to configure the router for routing and firewalls, and the server for DNS, web, SSH, and database services. The network topology diagram and specifications for the router, server, and client are provided in appendices for the competitors to reference during the competition.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    21 views5 pages

    Sekolah Menengah Kejuruan: Lomba Kompetensi Siswa Tingkat Nasional Xxii - 2014 Palembang

    Uploaded by

    VAN BECKER
    This document provides instructions for a competition involving setting up a secure computer network. Competitors must install Linux operating systems on a router, server, and client. They then need to configure the router for routing and firewalls, and the server for DNS, web, SSH, and database services. The network topology diagram and specifications for the router, server, and client are provided in appendices for the competitors to reference during the competition.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 5

    LOMBA KOMPETENSI SISWA

    SEKOLAH MENENGAH KEJURUAN


    TINGKAT NASIONAL XXII 2014
    PALEMBANG
    LEMBAR SOAL
    MODUL 3

    BIDANG LOMBA
    IT NETWORK SYSTEM ADMINISTRATION

    KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN


    DIREKTORAT JENDERAL PENDIDIKAN MENENGAH
    DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN
    JALAN JENDERAL SUDIRMAN GEDUNG E LT.12-13
    SENAYAN - JAKARTA

    KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN


    DIREKTORAT JENDERAL PENDIDIKAN MENENGAH
    DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN
    PALEMBANG 2014
    DAY 2:
    NETWORK SECURITY
    CONTENTS
    This Test Project proposal consists ofthe following document/file:
    1. LKS_PALEMBANG_2014_MODUL3
    INTRODUCTION
    Warning: SAVE ALL YOUR CONFIGURATIONS!!! Every device will be rebooted
    before marking.
    The competition has a fixed start and finish time. You must decide how to best divide
    your time.
    Please carefully read the following instructions!
    DESCRIPTION OF PROJECT AND TASKS
    SecureNet is a company that develops computer network security.

    LKS XXII Palembang 2014

    2/5

    KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN


    DIREKTORAT JENDERAL PENDIDIKAN MENENGAH
    DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN
    PALEMBANG 2014

    1. EXAM
    Part 1 Network Installation
    Setup networks according to the figure 2 below:

    Figure 2. Network topology

    Part 2 Debian 6.0 Operating system Installation


    Note: Please use default configuration if you are not given detail
    1. Install Linux Debian 6.0 operating system in PC Router and PC server. Dont
    install graphical user interface (GUI) such as KDE, GNOME, etc.
    2. Install Linux Debian 6.0 operating system in Laptop Client with user interface
    (GUI) such as KDE, GNOME, etc.
    Part 3 Work task debian router configuration
    Note: Please use the default configuration if you are not given the details.
    1. Configure the server with the hostname, domain and IP specified in the appendix.
    2. Configure Debian Router to allow Debian server for access from Internet.
    3. Routing Configuration.
    a. Enable routing
    b. Configure connection among Debian client, Debian Router and Debian
    Server
    4. Firewall Configuration.
    a. Configure Packet Filtering Firewall to allow DNS, HTTPS from outside
    to scrServer
    b. Configure PAT for HTTP using port 8080 from outside to scrServer
    LKS XXII Palembang 2014

    3/5

    KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN


    DIREKTORAT JENDERAL PENDIDIKAN MENENGAH
    DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN
    PALEMBANG 2014
    c. Configure PAT for SSH using port 14022 from outside to scrServer
    d. Deny all other services.
    e. Configure Circuit Level Firewall as follow:
    - Allow Internet area connect to Server.
    - Allow Local Network area connect to Internet and Server.
    - Deny Internet area connection to Local Network.
    - Deny Server Farm area connection to Local Network area.

    Part 4 Work task debian server configuration


    Note: Please use the default configuration if you are not given the details.
    1. Configure the server with the hostname, domain and IP specified in the appendix.
    2. Install and configure the service:
    DNS Configuration.
    a. Configure DNS Server with two domain secure.net and netsecure.org
    b. Each domain contain: www, db, intranet
    Example:
    www.secure.net, www.netsecure.org,
    db.secure.net, db.netsecure.org,
    intranet.secure.net, intranet.netsecure.org,

    Web Server Configuration.


    a. Install Apache2
    b. Modify the default page with the code in appendix
    c. Create websites http://www.secure.net and http://www.netsecure.org
    d. Enable https access
    https://www.secure.net and https://www.netsecure.org
    e. Make sure intranet.secure.net and intranet.netsecure.org is
    protected by authentication
    Use user intranet with password secure2014

    SSH Server Configuration.


    a. Install ssh server
    b. Change SSH port default to 2244

    Data Center (MySQL) configuration


    a. Install MySQL server
    b. Change port default MySQL to 4033
    c. Install phpmyadmin
    d. phpmyadmin access should be available under
    http://db.secure.net/_dbmin

    LKS XXII Palembang 2014

    4/5

    KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN


    DIREKTORAT JENDERAL PENDIDIKAN MENENGAH
    DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN
    PALEMBANG 2014

    2. APPENDIX
    2.1

    Debian router specification

    Domain member:
    Hostname
    rootpassword:
    Default Account:
    Password
    IP address:

    2.2

    Debian server specification

    Domain member:
    Hostname
    rootpassword:
    Default Account:
    Password
    IP address:

    2.3

    secure.net
    scrRouter
    Palembang2014
    Competitor
    competitor2014
    172.16.x.1/25
    10.10.x.2/29
    ( x is number competitor)

    secure.net
    scrServer
    Palembang2014
    Competitor
    competitor2014
    10.10.x.1/29
    ( x is number competitor)

    Debian client specification

    Domain member:
    Hostname
    rootpassword:
    Default Account:
    Password
    IP address:

    LKS XXII Palembang 2014

    secure.net
    jakabaringPC
    Palembang2014
    Competitor
    competitor2014
    172.16.x.10/25 (Dont enter Gateway)

    5/5

    You might also like