Documente Academic
Documente Profesional
Documente Cultură
Integration Island
1|fb.com/bhuanatejasaputra | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
CONTENTS
NOTE ............................................................................................................... 3
TOPOLOGI........................................................................................................ 4
ROUTER CISCO................................................................................................. 5
SWITCH CISCO.................................................................................................. 7
WINDOWS SERVER........................................................................................... 9
DEBIAN SERVER................................................................................................ 43
WINDOWS CLIENT............................................................................................ 51
2|fb.com/bhuanatejasaputra | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
NOTE :
Jangan sekedar meniru gambar, dan meniru konfigurasi. Pahami apa arti konfigurasi
tersebut. More info hubungi :
TOPOLOGI
3|fb.com/bhuanatejasaputra | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
By GNS3 ,Virtualbox - fb.com/bhuanatejasaputra
WindowsClient (VLAN113)
IP : DHCP Client
GW: 192.168.111.190/26
DebianServer (VLAN111)
VPN-Client IP : 192.168.111.198/29
IP : DHCP from router GW: 192.168.111.193/29
GW: 110.202.130.252/24
F0/13
F0/3
F0/1
F0/0
Switch Cisco Catalyst F0/2
telnet vlan 113
F0/1 192.168.111.189/26
Router Cisco ----------------------------
F0/0 : 110.202.130.252/24 VLAN : 111,112,113 Windows Server (VLAN112)
F0/1.111 : 192.168.111.193/29 F0/1 = TRUNK IP : 192.168.111.202/30
F0/1.112 : 192.168.111.201/30 F0/2 = VLAN112 GW: 192.168.111.201/30
F0/1.113 : 192.168.111.190/26 F0/3 = VLAN111
F0/13 = VLAN113
NAT STATIC
Public : 110.202.130.254
Private : 192.168.111.198
Public : 110.202.130.253
Private : 192.168.111.202
PEMBAHASAN
SHOW RUNNING CONFIG
4|fb.com/bhuanatejasaputra | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
ROUTER CISCO
1. IP ADDRESS
A. F0/0
interface FastEthernet0/0
ip address 110.202.130.252 255.255.255.0
ip access-group out-srv in
ip nat outside
speed auto
duplex auto
interface FastEthernet0/1
no ip address
speed auto
duplex auto
!
interface FastEthernet0/1.111
encapsulation dot1Q 111
ip address 192.168.111.193 255.255.255.248
ip nat inside
!
interface FastEthernet0/1.112
encapsulation dot1Q 112
ip address 192.168.111.201 255.255.255.252
ip nat inside
!
interface FastEthernet0/1.113
encapsulation dot1Q 113
ip address 192.168.111.190 255.255.255.192
ip helper-address 192.168.111.198
A. F0/0
3. NAT
5|fb.com/bhuanatejasaputra | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
A. STATIC
4. ACL
A. EXTENDED ACL
6|fb.com/bhuanatejasaputra | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
PEMBAHASAN
SHOW RUNNING CONFIG
SWITCH CISCO CATALYST
1. VLAN and PORT MODE
A. VLAN
Switch(config)#vlan 111
Switch(config-vlan)#name debian
Switch(config-vlan)#exit
Switch(config)#vlan 112
Switch(config-vlan)#name ws
Switch(config-vlan)#exit
Switch(config)#vlan 113
Switch(config-vlan)#name client
Switch(config-vlan)#exit
B. F0/1
interface FastEthernet0/1
switchport mode trunk
C. F0/2
interface FastEthernet0/2
switchport access vlan 112
D. F0/3
interface FastEthernet0/3
switchport access vlan 111
E. F0/13
interface FastEthernet0/13
switchport access vlan 113
interface Vlan113
ip address 192.168.111.189 255.255.255.192
2. TELNET
7|fb.com/bhuanatejasaputra | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
G. F0/0
PEMBAHASAN
WINDOWS SERVER 2008 R2
8|fb.com/bhuanatejasaputra | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
1. IP ADDRESS
A. Setting ip address pada Network adapter LAN Card sesuai dengan topologi
9|fb.com/bhuanatejasaputra | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
2. Active Directory
A. Klik Start Klik kanan Computer Klik Properties sebelah kanan klik Change
Settings ubah sesuai gambar (dari kiri ke kanan)
10 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
11 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
12 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
13 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
14 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
15 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
D. Pengecekan domain, jika ping host.com sudah di reply langkah berikutnya tinggal
join domain dari client
16 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
F. Klik host.com lalu klik kanan dan ikuti seperti petunjuk gambar
17 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
G. Untuk user pertama pada OU user, tambahkan user admin terlebih dahulu.
tujuannya jika terjadi masalah pada client, login user admin digunakan untuk
menyelesaikan masalah yang ada pada sisi client. Ikuti petunjuk gambar.
18 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
19 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
H. Add user admin pada group domain admin agar menjadi user admin menjadi user
administrator. Ikuti petunjuk gambar
20 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
I. Setelah membuat user admin. Lanjut membuat group user. Saya membuat 2 group
diantaranya Workers dan Managers. Masing-masing group terdiri dari beberapa
user. Tujuan membuat group adalah agar administrator mudah dalam memanage
user user nantinya. Ikuti petunjuk gambar.
21 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
22 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
J. Setelah users group sudah dibuat. Lanjut dengan membuat user untuk masing
masing group. Dimulai dengan group managers dengan username managers01. Ikuti
petunjuk gambar
23 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
24 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
25 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
3. DNS Server
26 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
B. Klik HOSTSRV1 Klik kanan Reverse Lookup Pilih New Zone. Ikuti petunjuk
gambar
27 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
28 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
C. Klik Forward Lookup Zones klik host.com klik kanan pada bagian host.com
29 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
30 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
folder baru pada drive C. Create folder user dan subfolder profiles, homes. ( profiles
= Roaming Profiles, home = Home Directory user). Ikuti petunjuk gambar.
31 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
B. Setelah membuat folder, sharing folder profiles dan homes dengan permision
Authenticated User yang artinya setiap user yang login dengan username dan
password yang valid dapat mengakses folder profiles dan home ( Read and Write).
Klik kanan folder homes properties pilih tab Sharing Advanced Sharing
Permissions.
32 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
Klik Remove setelah Remove klik Add lalu ketik authe centang Full Control
OK ( Lakukan langkah yang sama pada folder profiles )
33 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
C. Sharing folder sudah disetting, lanjut dengan setting Group Policy Management
D. Klik Domains host.com klik kanan user Create a GPO.. Ikuti petunjuk
gambar
34 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
35 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
36 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
37 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
Klik kanan account Dewa Ayu... dan Diah ... pilih tab Profile ketik Profile path (
untuk folder roaming profiles ) dan Home folder (untuk map drive home directory)
38 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
F. Ingat Drag and Drop Domain Clients yang berada di OU Computers menuju OU yang
sudah diterapkan Group Policy Folder Redirection ( OU user)
39 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
A. Buat 2 folder, Workers akses untuk group Workers dan Managers akses untuk group
Managers
Klik kanan folder managers atau workers (lakukan hal yang sama pada kedua folder)
properties pilih tab Sharing Advanced Sharing Permissions Klik
Remove setelah Remove klik Add lalu ketik managers (untuk folder managers),
workers (untuk folder workers) centang Full Control OK
40 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
41 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
PEMBAHASAN
DEBIAN 7 SERVER
1. IP Address
A.
B.
C.
D. ping ke gateway
42 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
2. DHCP Server
A.
B.
C. Tekan ctrl + w ketik No service will untuk menemukan gambar seperti dibawah ini
dan ubah bagian subnet ...
D. Tekan ctrl + w ketik A sli untuk menemukan gambar seperti dibawah ini dan ubah
bagian subnet ...
E.
43 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
3. OpenVPN Server
A.
B.
C.
D.
E.
G. Ketik ./build-key-server server dan enter terus, jika ada pilihan y/n ? pilih y saja.
H. Ketik ./build-key client dan enter terus, jika ada pilihan y/n ? pilih y saja
44 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
I.
K. Tekan ctrl + w ketik ca ca untuk menemukan gambar seperti dibawah ini dan ubah
bagian ca, cert, key, dh, dan push redirect....... seperti petunjuk gambar
L.
M.
N.
O.
45 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
A.
B.
C.
D.
46 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
E.
F.
G.
H.
47 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
I.
J.
K.
48 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
L.
M.
N.
O.
P.
49 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
PEMBAHASAN
WINDOWS 7 CLIENT
1. IP Address
A. Ingat ! DHCP Server dari Debian Server, dan di router cisco menggunakan ip
A.
50 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
3. Join Domain
51 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
A. Klik Start klik kanan Computer properties change settings. Ikuti petunjuk
gambar.
B. Login dengan user yang sudah dibuat, dan restart setelah login sukses.
C. Tekan ctrl + alt + del. Login dengan users managers01 dengan full name Diah...
52 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
Pada Client
53 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
54 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
55 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
A.
56 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
B.
C.
57 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
D. Mengapa perlu langkah gpupdate /force ?? agar service service yang sudah di
konfigurasi pada windows server bisa diterapkan pasda windows client, seperti GPO
folder redirection, roaming profiles, map drive home directory, dsb.
Klik start ketik cmd ketik gpupdate /force (artinya group policy update ).
Setelah windows client log off kemudia di restart dan login kembali
58 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
59 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
PEMBAHASAN
WINDOWS OPENVPN CLIENT
1. IP Address
60 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
B. Ping check
61 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
C. Webserver
3. Checking firewall
62 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
B. VPN client cant ping routers IP, but allow ping Debian Server IP
4. OpenVPN Client
63 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
D. Buka OpenVPN pada startup klik kanan Openvpn lalu klik Connect. Success !
64 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
E. Jika openvpn sudah terkoneksi, Windows Openvpn Client bisa mengakses resource
yang ada pada Debian Server, seperti SSH, Web,dsb.
65 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox
Modul 1 Integration Island
66 | f b . c o m / b h u a n a t e j a s a p u t r a | 0 8 1 9 3 6 6 0 6 0 0 0 G N S 3 ,V i r t u a l b ox