Scribd Logo
Importer

Bienvenue sur Scribd !

  • Lks

    Transféré par

    Anonymous 3u7CYeSZBu
    55 vues5 pages
    lks smd

    Titre original

    lks

    Copyright

    © © All Rights Reserved

    Formats disponibles

    PDF, TXT ou lisez en ligne sur Scribd

    Avez-vous trouvé ce document utile ?

    Ce contenu est-il inapproprié ?

    Signaler ce document
    lks smd

    Droits d'auteur :

    © All Rights Reserved
    Téléchargez comme PDF, TXT ou lisez en ligne sur Scribd
    Signaler comme contenu inapproprié
    55 vues5 pages

    Lks

    Transféré par

    Anonymous 3u7CYeSZBu
    lks smd

    Droits d'auteur :

    © All Rights Reserved
    Téléchargez comme PDF, TXT ou lisez en ligne sur Scribd
    Signaler comme contenu inapproprié
    sur 5

    LOMBA KETERAMPILAN SISWA

    SEKOLAH MENENGAH KEJURUAN


    KOTA SAMARINDA 2018

    IT NETWORK SYSTEMS
    ADMINISTRATION
    LKS2018 KOTA SAMARINDA

    MODUL A
    NETWORKING SUPPORT

    KEMENTERIAN PENDIDIKAN DAN KEBUDAYAAN


    DIREKTORAT JENDERAL PENDIDIKAN MENENGAH
    DIREKTORAT PEMBINAAN SEKOLAH MENENGAH KEJURUAN
    LINUX ISLAND
    INTRODUCTION
    The competition has a fixed start and finish time. You must decide how to best divide your
    time.
    Please carefully read the following instructions!
    When the competition time ends, please leave your station in a running state.

    LKSMD2018- Version: 1.0


    ITNSA Date: 26.02.2018
    PART I
    WORK TASK INSTALLATION (LNX-RTR,
    LNX-CLT)
    Note Please use the default configuration if you are not given details.

    WORK TASK ROUTER (LNX-RTR)


    o Configure the server with the hostname LNX-RTR
    o Create username admin and password lkssmd2018
    o Enable SSH access
     Configure SSH authentication
     Root account is not allowed for login
     Create username lkssmd2018 and password lkssmd2018
     Change SSH port default to 2018
    o Configure eth0 with IP Address 100.100.50.1/24
    o Configure eth1 with IP Address 10.10.10.1/24
    o Enable DHCP Server
     Configure IP Address Range 100.100.50.2 – 100.100.50.100/24
     DNS to proper DNS’s Gateway
     Gateway to proper IP Gateway
     Enable Firewall
     Block ICMP packet from client to all interface
     Ensure client can access to any service on LNX-SVR and LNX-SVR_B
    o Install Cacti
     Create an admin-user master with password lkssmd2018
     Create a graph showing the statistics of the CPU, Memory and interfaces traffic of the
    LNXRTR, LNX-SVR and LNX-SVR_B
    o VPN Server
     Configure VPN access to Internal network.
     For login create a user vpn with password lkssmd2018

    WORK TASK SERVER LNX-SVR


    Configure the server with the hostname, domain and IP specified in the appendix.
    o Web Server (apache2)
     Install apache2 including php5
    Create 3 virtual webhost for info.lkssmd2018.net; training.lkssmd2018.net;
    competition.lkssmd2018.net


    o Create info.php in the http://lkssmd2018.net/info.php to check the php version installed. Use the
    following code for info.php
    <?php
    phpinfo();
    ?>
    o Create website http://internal.lkssmd2018.net and http://modul.lkssmd2018.net
    - Use the following code for index.html in the http://internal.lkssmd2018.net

    <html>
    <h1>Welcome in the internal LKS SMD 2018</h1>
    </html>

    - Use the following code for index.html in the http://modul.lkssmd2018.net

    <html>
    <h1>Welcome in the Modul LKS SMD 2018</h1>
    </html>

    o Enable HTTPs for both sites


    - Use a certificate signed by CA
    - Make sure no certificate warning is shown.

    WORK TASK SERVER LNX-SVR-B

    o DNS (bind9)
     Configure and install DNS Server with two domain
    - lkssmd2018.net to LNX-SVR
    - lkssmd2018.id to LNX-SVR-B
     Create subdomain mail.lkssmd2018.net and remote.lkssmd2018.net
     Create a host www.lkssmd2018.net to LNX-SVR.

    o Mail and Webmail (Squirrelmail)


     Create users budi and ani
     Make sure they have access via POP3, IMAP and SMTP
     Before you finish your project make sure you send an email message from budi to ani
    and another message from ani to budi
     Do not delete these email messages.

    o CA (openssl)
     Configure as CA
     CA attributes should be set as follows
    - Country code is set to ID
    - Organization is set to LKS2016
     Create a root CA certificate
     Store the certificate in directory /cert
    o FTP (proftpd)
     Enable FTPS
    - Use a certificate signed by CA
     Each user (user01 to user20) will have a home directory. User must have access to
    update their own virtual webpage via FTP
     Make sure the user are jailed in their respective website document root directories.
     Make sure file transfer to the server is possible.
    Windows Hostmachine (PC1) Windows Hostmachine (PC2)

    Virtual Linux Server


    Virtual Linux Client Hostname : LNX-SVR
    IP Address :
    Hostname : LNX-CLT - eth0 : 10.20.20.100/24
    IP Address : DHCP
    System Function :
    System Function: - Web Server 1
    - Open VPN Client

    Virtual Linux Router


    Hostname : LNX-RTR
    IP Addresses:
    Eth0 : 10.10.10.1/24
    Eth1: 100.100.50.1/24
    Bridge Virtual Linux Server
    eth1 (vmnet0)
    System Function:
    eth0
    - DHCP Server
    Bridge
    - Firewall (IP Tables)
    (vmnet1)
    - Monitoring (Cacti)
    Hostname : LNX-SVR-B
    - Open VPN Server
    IP Address : 10.20.20.200/24
    - SSH Server
    System Function :
    - CA
    - Mail Server
    - DNS Server
    - FTP Server

    Vous aimerez peut-être aussi