LOMBA KOMPETENSI SISWA SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
NASKAH SOAL MODUL 4 (TERBUKA) Bidang Lomba IT NETWORKING SUPPORT
PEMERINTAH PROVINSI JAWA BARAT DINAS PENDIDIKAN Jl. Dr. Radjiman No. 6 Telp. (022) 4264813 Fax. (022) 4264881 Wisselbord (022) 4264944, 4264957, 4264973 Bandung
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
1.
MATERIAL TEST PROJECT
1.1. CONTENTS This Test Project proposal consists of the following document/file: “MODUL 4 – LINUX ISLAND”
1.2. INTRODUCTION The competition has a fixed start and finish time. You must decide how to best divide your time. Please carefully read the following instructions! Due to the problem of VMWare freezing, please do not connect the DVD drives (.iso) when they are not in use. Note: Please use the default configuration if you are not given the details.
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
2
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
1.3. PART 1 Working Tasks Linux Virtual Server1 (BOGORSRV) Note: Please use the default configuration if you are not given the details.
Install and Setup Server with the Debian 7 Operating System with the settings specified in the appendix for BOGORSRV (hostname, password, IP, etc.). Ensure that all components are correctly installed (Don’t install Graphical User Interface (GUI) such as KDE, GNME, etc) Configure the disk and partitions
Add three virtual disks with a size of your choosing. If you will be asked about administrator permissions just click ‘no’ (this will work as expected) Use the three virtual disks to create a software RAID 5. Mount it as /data
Install and configure the services
Configure and Install DNS Server Configure DNS Server with two domain - bogor.net to BOGORSRV - sentul-city.id to SENTULSRV Create subdomain files.bogor.net and ntp.bogor.net Create subdomain www.sentul-city.id and ftp.sentul-city.id
Configure and Install File Server (Samba) Share “internal” - Path is /var/internal - Give access only user “manager” with password “access” Share “public” - Path /var/public - Enable read-only access to everyone
Configure and Install NTP Set NTP server service. Use local clock as time server source Synchronize debian client time with the NTP server time in the BOGORSRV
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
3
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
Working tasks Linux Virtual Server2 (SENTULSRV) Install and Set up server with the Debian 7 operating system with the settings specified in the appendix for SENTULSRV (hostname, password, IP, etc.). Ensure that all components are correctly installed (Don’t install Graphical User Interface (GUI) such as KDE, GNOME, etc)
Install and configure the services
Webserver (apache2) Install apache2 Modify the default page with the code in appendix Users access to this server by: http://www.sentul-city.id Enable HTTPs Create virtual webpages for user01 to user05 ex. http://www.sentul-city.id/~user03
Install and Configure FTP Server Install FTP server Each user (user01 to user05) will have a home directory. User must have access to update their own webpage via FTP. Note: the file website for users will be share if your client already.
Install and Configure SSH Server Install SSH Server Change SSH port default to 2016
o
Install and Configure Monitoring (Cacti)
Install Cacti
Create an admin-user “master” with password “Skills2016”
Create a graph showing the traffic statistics of the CPU, Memory and interfaces of the SENTULSRV
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
4
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
1.4. PART 2 Working Tasks Linux Router (SNTRO) Note: Please use the default configuration if you are not given the details. Install and Set up server with the Debian 7 operating system with the settings o specified in the appendix for SENTULSRV (hostname, password, IP, etc.). Ensure that all components are correctly installed (Don’t install Graphical User Interface (GUI) such as KDE, GNOME, etc) o
Install and Configure DHCP Server Install DHCP Server DHCP Server Scope: : 10.10.8.10 – 10.10.8.50 - Range - Netmask : 255.255.255.192 - Gateway : 10.10.8.62 - DNS : 10.10.0.2
o
Install and Configure Squid Proxy Server Install proxy server Configure Proxy Server to allow only ‘whitelist accessed’ of website from Debian client using ACL (access control list). Whitelist accessed: - *.bogor.net - *.sentul-city.id - debian.org Configure Proxy Server to access Internet using username and password (non-transparent mode). Using username “access“ and password “secret“. Configure Proxy Server to limit bandwidth for download more than 20 MB.
o
Configure Firewall Configure packet filtering Firewall to allow HTTP, HTTPs, FTP and SSH to SENTULSRV from outside and deny all other services. Ensure the outside can access any service on BOGORSRV.
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
5
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
1.5. PART 4 Working Tasks Linux Client (SNTCLIENT) Note: Use the default configuration if you are not given the details. Install and Set up server with the Debian 7 Desktop operating system with the o settings specified in the appendix for SNTCLIENT (hostname, password, IP, etc.). Install a Graphical User Interface (GUI) of your choice. o Install and configure samba client Make sure the share “public” on BOGORSRV is being mounted to /mnt/share at startup. o Synchronize time to NTP server with the NTP server time in the BOGORSRV.
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
6
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
2. APPENDIX 2.1. Specifications 2.1.1. LINUX SERVER1 SPECIFICATIONS (BOGORSRV) Computer name: BOGORSRV Root password:
Bogor2016
Default User name:
Competitor
Default User password:
Bogor2016
Domain name:
bogor.net
IP address:
10.10.0.2/30
Virtual network card bridged to:
vmnet0
2.1.2. LINUX SERVER2 SPECIFICATIONS (SENTULSRV) Computer name: SENTULSRV Root password:
Bogor2016
Default User name:
Competitor
Default User password:
Bogor2016
Domain name:
sentul-city.id
IP address:
10.10.0.6/30
Virtual network card bridged to:
vmnet1
2.1.3. LINUX ROUTER SPESIFIKCATIONS (SNTRO) Computer name: SNTRO Root password:
Bogor2016
Default User name:
Competitor
Default User password:
Bogor2016
Domain name:
sentul-city.id
IP address:
10.10.0.1/30 10.10.0.5/30 10.10.8.62/26
2.1.4. NETWORK SPECIFICATIONS SNTRO – BOGORSRV
10.10.0.0/30
SNTRO – SENTULSRV
10.10.0.4/30
SNTRO outside
10.10.8.0/26
2.1.5. LINUX CLIENT SPECIFICATIONS (SNTCLIENT) Computer name: SNTCLIENT Domain:
bogor.net
User name:
Competitor
Password:
Bogor2016
IP address
DHCP
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
7
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
2.1.6. HTML code
Index.html page for www.sentul-city.id :
Welcome on www.sentul-city.id Web Site
Personal page :
Welcome on the ”user01 to user05”personal page
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
8
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
2.1.7. NETWORK DIAGRAM Windows 8.1 Hostmachine (PC 2)
NETWORK DIAGRAM MODUL 4 LINUX ISLAND
Vi rt ual Linux Rout er
Vi rt ual Linux Cl ient
SNTRO eth0: 10.10.0.1/30 Host Only eth1: 10.10.0.5/30 eth2: 10.10.8.62/26
Virtual Linux Server
Virtual Linux Server
BOGORSRV eth0: 10.10.0.2/30
SENTULSRV eth0: 10.10.0.6/30
System Functions: - DNS - File Server - NTP - RAID
System Functions: - Samba Client - NTP Client
System Functions: - DHCP Server - Proxy Server - Firewall
Windows 8.1 Hostmachine (PC 1)
System Functions: - System Monitoring - Web Server - FTP Server - SSH
SNTCLIENT eth0: DHCP Client
Bridge
Bridge
Switch Unmanage
9
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
2.2. INSTRUCTIONS 2.2.1. INSTRUCTIONS TO THE COMPETITOR •
•
•
•
•
•
•
•
Competitor’ lateness will not be given time extension. Check your materials and equipment provided during familiarization Do not bring any study materials or communication devices to the area competition. Read the whole competition script, diagram and appendix prior to you starting work. Do not disclose any competition material / information to any person during each day’s competition. Be aware of different tasks attract a percentage of the overall mark. Plan your time carefully. Raise your hand to ask question or report any technical problems. Warning : SAVE ALL YOUR CONFIGURATIONS!!! Every device will be rebooted before marking.
2.2.2. EQUIPMENT, MACHINERY, INSTALLATIONS (PREINSTALLED) AND MATERIALS REQUIRED
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
2.2. INSTRUCTIONS 2.2.1. INSTRUCTIONS TO THE COMPETITOR •
•
•
•
•
•
•
•
Competitor’ lateness will not be given time extension. Check your materials and equipment provided during familiarization Do not bring any study materials or communication devices to the area competition. Read the whole competition script, diagram and appendix prior to you starting work. Do not disclose any competition material / information to any person during each day’s competition. Be aware of different tasks attract a percentage of the overall mark. Plan your time carefully. Raise your hand to ask question or report any technical problems. Warning : SAVE ALL YOUR CONFIGURATIONS!!! Every device will be rebooted before marking.
2.2.2. EQUIPMENT, MACHINERY, INSTALLATIONS (PREINSTALLED) AND MATERIALS REQUIRED PC 1 (1 for each competitor) : Win 7 Enterprise 64 Bit preinstalled Ms. Office 2013 preinstalled VMWare Workstation 11 preinstalled ISO DVD 1 – 3 Debian 7.8 ISO DVD Update 1 and 2 Debian 7.8 PC 2 (1 for each competitor) : Win 7 Enterprise 64 Bit preinstalled Ms. Office 2013 preinstalled VMWare Workstation 11 preinstalled ISO DVD 1 – 3 Debian 7.8 ISO DVD Update 1 and 2 Debian 7.8 Network (1 for each competitor) : 1x Un-Managed Switch min. 8 port with Adapter •
•
•
•
•
•
•
•
•
•
•
Network Cable (2 for each competitor) : 1.5 Metres straight-through cable •
Additional equipment: None •
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
10