LOMBA KOMPETENSI SISWA SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
NASKAH SOAL MODUL 2 (TERBUKA) Bidang Lomba IT NETWORKING SUPPORT
PEMERINTAH PROVINSI JAWA BARAT DINAS PENDIDIKAN Jl. Dr. Radjiman No. 6 Telp. (022) 4264813 Fax. (022) 4264881 Wisselbord (022) 4264944, 4264957, 4264973 Bandung
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
1.
MATERIAL TEST PROJECT 1.1. CONTENTS This Test Project refers to the following document/file: “MODUL 2 – SYSTEM INTEGRATION ISLAND”
1.2. INTRODUCTION The competition has a fixed start and finish time. You must decide how to best divide your time. Please carefully read the following instructions! Due to the problem of VMWare freezing, please do not connect the DVD drives (.iso) when they are not in use. Note: Please use the default configuration if you are not given the details.
1.3. DESCRIPTION OF PROJECT AND TASKS You are a network engineer and system integrator hired by lksjabar.net. You are hired to deploy advanced infrastructure at the company as planned. Please install the network design as planned by your network architects. You’ll find additional information as attached. Use the password “ Skills39” if nothing other is specif ied.
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
2
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
1.3.1. PART 1 1.3.1.1. Working Tasks Windows Virtual Server – WINSRV1 Please configure the server with the settings specified in the appendix Modify the default Firewall rules to allow ICMP (ping) traffic Install Active Directory Domain Services for lksjabar.net . Create a new Organization Unit named JABAR2016. All new users and o groups must be created in this OU. •
•
•
o
•
Create the user and security global group with members as indicated in the table in Appendix. Use Skills39 as the password for all user accounts.
DNS Create a forward zone called “lksjabar.net ” Create a reverse zone for the IP range. o Create Record and Alias o lksjabar.net WINSRV1 mail.lksjabar.net LNXSRV internal.lksjabar.net LNXSRV Create Alias o www.lksjabar.net for lksjabar.net GPO – Password Policies Ensure the company user password must meet the following criteria: o Domain passwords will be at least 6 characters. Strong passwords need not be enforced. Passwords will not be stored with reversible encryption. Passwords will be changed exactly every 90 days. Accounts will be locked out for 30 minutes after three invalid logon attempts. The password of the users in IT group must meet the following criteria: o o
•
Domain passwords will be at least 8 characters. Strong passwords will be enforced. Passwords will not be stored with reversible encryption. Passwords will be changed exactly every 30 days. Accounts will be locked out for 15 minutes after two invalid logon attempts. GPO – Security Policies
•
o
At logon on WINCLT, users should see this message before logging in: Message Title: “Welcome to JabarSkills2016” with Message Text “Only authorized personnel allowed to access.” and prohibit this message on all servers.
o
All users, except the IT group, are not allowed to access the display settings on the Control Panel.
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
3
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
o
•
•
Include the IT group to the local Administrators group for all Windows 8.1 clients
o
disable "First Sign-in Animation" for all Windows 8.1 clients
o
disable the use of “cmd” and “run” for the Visitor group
o
hide all local drives for the Visitor group
Limit the storage space to every home folder to 20 MB. Prevent any .exe and .bat files to be stored on the home folder. Redirect the Documents folder to \\lksjabar.net\skills\rfolders\username\Documents. Create departmental share folders on \\lksjabar.net\skills\IT, \\lksjabar.net\skills\Marketing and map the respective share folder to Y: at logon, depending on the department the user is in. Users should not be allowed to access other departments’ or users’ home shares.
•
•
Install IIS o
Setup the company web server http://www.lksjabar.net
o
Use an Active Directory Users for IIS basic authentication.
DHCP Server o Range o Gateway o Netmask o DNS
: 172.16.10.51 – 172.16.10.100 : 172.16.10.1 : /25 : 10.200.11.2
1.3.1.2. Working Tasks Linux Virtual Server – LNXSRV Note: Please use the default configuration if you are not given the details. Configure the server with the hostname, domain and IP specified in the diagrams shown in appendix Create local users from “user01” to “user20” with password “Skills39”. Install the services CA (openssl) Configure as CA o CA attributes should be set as follows o Country code is set to ID Organization is set to LKSJABAR Create a root CA certificate o Store the certificate in directory /cert. o •
•
•
•
•
Install apache2 including php5 o o
Create websites “mail.lksjabar.net” and “internal.lksjabar.net”. Enable HTTPS for both sites. Use a certificate signed by CA Make sure no certificate warning is shown
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
4
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
Create virtual webpages for user01 http://internal.lksjabar.net /~user19 FTP (proftpd) Enable FTPS o Use a certificate signed by CA
o
to
user20
ex.
Each user (user01 to user20) will have a home directory. User must have access to update their own virtual webpage via FTP. Make sure the users are jailed in their respective website document root directories. Make sure file transfer to the server is possible. Mail (Squirrel Mail Server) Create users peter and mary Make sure they have access via POP3, IMAP and SMTP. Ensure user can access web mail server using http://mail.lksjabar.net Before you finish your project make sure you send an email message from peter to mary and another message from mary to peter. Do not delete these email messages. Install and Configure Monitoring (Cacti)
o
o
Install Cacti
Create an admin-user “master” with password “Skills39” Create a graph showing the statistics of the CPU, Memory and interfaces traffic of the LNXRTR1 and LNXSRV Configure and Install NTP
o
Set NTP server service. Use local clock as time server source Synchronize WINSRV1 , LNXRTR1, WINCLT time with the NTP server. 1.3.1.3. Working Tasks Linux Virtual Router – LNXRTR1 Note: Please use the default configuration if you are not given the details. Configure the server with the hostname, domain and IP specified in the diagrams shown in appendix Enable Routing Configure DHCP Relay to WINSRV1 Server Reverse Proxy (squid) Configure a reverse proxy for www.lksjabar.net, which is hosted by o WINSRV1 1.3.2. PART 2 1.3.2.1. Working Tasks Windows Virtual Client – WINCLT Configure the client with the settings specified in the appendix Join the WINCLT to lksjabar.net domain Modify the default Firewall rules to allow ICMP (ping) traffic Use this client for testing user logon, profiles, home drive and GPO settings
•
•
•
•
•
•
•
•
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
5
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
2.
APPENDIX 2.1.
Specifications 2.1.1. WINDOWS SERVER SPECIFICATIONS – WINSRV01
Computer name:
WINSRV1
Operating System
MS Windows 2012 R2
Domain Name:
lksjabar.net
Administrator User name:
Administrator
Administrator password:
Skills39
IP address:
10.200.11.2/29
Domain NetBIOS Name:
INASKILLS
2.1.1. LINUX SERVER SPESIFICATIONS - LNXSRV Computer name:
LNXSRV
Operating System
Linux Debian 7.8
User name:
root
Password:
Skills39
Domain name:
lksjabar.net
IP address:
10.200.11.3/29
2.1.2. LINUX ROUTER SPECIFICATIONS – LNXRTR1 Computer name:
LNXRTR1
Operating System
Linux Debian 7.8
Domain Name:
root
Administrator User name:
Skills39
Administrator password:
lksjabar.net
IP address:
eth0 : 10.200.11.1/29 eth1 : 172.16.10.1/25
2.1.3. WINDOWS CLIENT SPECIFICATIONS – WINCLT Computer name:
WINCLT
Operating System
MS Windows 8.1
User name:
Administrator
Password:
Skills39
Domain name:
lksjabar.net
IP address:
DHCP
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
6
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
2.1.4. DOMAIN USER LIST (lksjabar.net) Group Members IT itXX (01 – 50) Marketing mktXX (01 – 50) Visitors vtrXX (01 - 30) Employees IT, Marketing
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
7
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
2.1.5. Network Diagram
NETWORK DIAGRAM MODUL 2 SYSTEM INTEGRATION SWICTH UNMANAGE Bridge Bridge Bridge
Windows 8.1 Hostmachine (PC 2)
Windows 8.1 Hostmachine (PC 1) Virtual Windows Server
Virtual Linux Server
Windows Server 2012 R2
Debian 7.8
WINSRV1
LNXSRV
Debian 7.8 LNXRTR1
WINCLT
Host only
System Functions: - CA - HTTP & HTTPS - FTP Server - Mail & Webmail Server - Monitoring (Cacti) - NTP Server
OS Pre-Install
Virtual Linux Router
Windows 8.1
eth0: 10.200.11.1/29 eth1: 172.16.10.1/25
Eth0: DHCP
Eth0: 10.200.11.3/29
Eth0: 10.200.11.2/29
System Functions: - Active Directory - DNS - IIS - GPO - DHCP Server
Virtual Windows Client
System Functions: - DHCP Relay - Reverse Proxy
System Functions: - Join Domain - NTP Client
OS Pre-Install
8
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
2.2. INSTRUCTIONS 2.2.1. INSTRUCTIONS TO THE COMPETITOR •
•
•
•
•
•
•
•
Competitor’ lateness will not be given time extension. Check your materials and equipment provided during familiarization Do not bring any study materials or communication devices to the area competition. Read the whole competition script, diagram and appendix prior to you starting work. Do not disclose any competition material / informa tion to any person during each day’s competition. Be aware of different tasks attract a percentage of the overall mark. Plan your time carefully. Raise your hand to ask question or report any technical problems. Warning : SAVE ALL YOUR CONFIGURATIONS!!! Every device will be rebooted before marking.
2.2.2. EQUIPMENT, MACHINERY, INSTALLATIONS (PREINSTALLED) AND MATERIALS REQUIRED
LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN TINGKAT PROVINSI JAWA BARAT TAHUN 2016
2.2. INSTRUCTIONS 2.2.1. INSTRUCTIONS TO THE COMPETITOR •
•
•
•
•
•
•
•
Competitor’ lateness will not be given time extension. Check your materials and equipment provided during familiarization Do not bring any study materials or communication devices to the area competition. Read the whole competition script, diagram and appendix prior to you starting work. Do not disclose any competition material / informa tion to any person during each day’s competition. Be aware of different tasks attract a percentage of the overall mark. Plan your time carefully. Raise your hand to ask question or report any technical problems. Warning : SAVE ALL YOUR CONFIGURATIONS!!! Every device will be rebooted before marking.
2.2.2. EQUIPMENT, MACHINERY, INSTALLATIONS (PREINSTALLED) AND MATERIALS REQUIRED PC 1 (1 for each competitor) : Win 7 Enterprise 64 Bit preinstalled Ms. Office 2013 preinstalled VMWare Workstation 11 preinstalled Virtual Machine for Windows Server preinstalled by Jury, configured by competitors ISO DVD 1 – 3 Debian 7.8 PC 2 (1 for each competitor) : Win 7 Enterprise 64 Bit preinstalled Ms. Office 2013 preinstalled VMWare Workstation 11 preinstalled Virtual Machine for Windows 8.1 preinstalled by Jury, configured by competitors ISO DVD 1 – 3 Debian 7.8 Network (1 for each competitor) : 1x Un-Managed Switch min. 8 port with Adapter •
•
•
•
•
•
•
•
•
•
•
Network Cable (2 for each competitor) : 1.5 Metres straight-through cable •
Additional equipment: None •
LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support
9