Soal LKS 2021- IT Network System Administration

 NASKAH SOAL LKS TINGKAT INDRAMAYU

BIDANG LOMBA

MODUL A – LINUX ENVIRONMENT

IT NETWORK SYSTEMS ADMINISTRATION

 

Alat

Hardware :   -    2 PC Server minimal i3

-     Kabel Straight 3 pieces (2 meter)

-     Switch manageable

Software:      -    Linux Debian 10 (buster)

 

                                                                                                   

Soal

1.    Buat Virtual Machine pada PC Server 1

-       lks-im

Load balancer,

·         konfigurasi HTTP & HTTPS untuk www.jabarjuara.id yang di hosting di lks-srv1 dan lks-srv2

·         Gunakan roundrobin

DNS (bind9),

·         fordward zone “jabarjuara.id”,

·         CNAME record “www”,

·         Record “mail”,

·         MX records,

·         Reverse zone 10.1.1.0/24

·         Buat multiple DNS untuk ekternal client dan internal client

Test eksternal client resolve www.jabarjuara.id to 172.17.1.253

Test internal client resolve www.jabarjuara.id to 10.1.1.10

SSH

·         Disable root login

·         Buat New local user “cloudops” password: skill39

·         Install sudo dan buat sudo groups “cloudops”

·         Ubah port ke 2021

·         Buat user “competitor” masuk ke SSH lks-im tanpa password

 

-       lks-srv1

LDAP (OPENLDAP)

·         Konfigurasi layanan direktori jabarjuara.id

·         Buat user

·         Layanan mail

Mail (POSTFIX, Dovecot)

·         Konfigurasi SMTPS dan IMAPS server

·         Autentifikasi melalui LDAP

·         Limit mailbox 5 MB

 

-       lks-srv2 dan lks-srv1

WEB Server (Apache)

·         Tampilan HTML “ Selamat Datang di JabarJuara cloud on (hostname)”

·         Tambahkan hostname dinamically dengan PHP

·         Disable HTTP dan enable HTTPS

·         Gunakan sertifikat sesuai pada CA di lks-1-srv

 

2.    Buat Virtual Machine pada PC Server 2

-       lks-i-srv

CA (openssl)

·         Konfigurasi CA dengan openssl

·         CA atribut : country set to ID, organization to LKSJABAR, name “LKSJABAR CA”

DHCP

·         Konfigurasi DHCP: range 10.2.3.100 – 10.2.3.200, netmask /24, gateway 10.2.3.254, DNS 10.1.1.10

-       lks-i-client

·         CA sertifikat ter install

·         Install icedove mail client

-       lks-e-client

·         CA sertifikat ter install

·         Install icedove mail client

 

 Lampiran

lks-im
Sistem operasi	Linux Debian 10
FQDN	lks-im.jabarjuara.id
Root Password	Skill39
Local Username	competitor
User Passsword	Skil39
Network Adapter 1	10.1.1.10/24

 

 

lks-srv1
Sistem operasi	Linux Debian 10
FQDN	lks-srv1.jabarjuara.id
Root Password	Skill39
Local Username	competitor
User Passsword	Skil39
Network Adapter 1	10.1.1.20/24

 

 

lks-srv2
Sistem operasi	Linux Debian 10
FQDN	lks-srv2.jabarjuara.id
Root Password	Skill39
Local Username	competitor
User Passsword	Skil39
Network Adapter 1	10.1.1.30/24

 

 

lks-i-srv
Sistem operasi	Linux Debian 10
FQDN	lks-i-srv.jabarjuara.id
Root Password	Skill39
Local Username	competitor
User Passsword	Skil39
Network Adapter 1	10.2.2.10/24

 

 

lks-i-client
Sistem operasi	Linux Debian 10
FQDN	lks-i-client.jabarjuara.id
Root Password	Skill39
Local Username	competitor
User Passsword	Skil39
Network Adapter 1	DHCP

 

 

lks-e-client
Sistem operasi	Linux Debian 10
FQDN	lks-i-client.jabarjuara.id
Root Password	Skill39
Local Username	competitor
User Passsword	Skil39
Network Adapter 1	172.17.1.10/24