LOMBA KOMPETENSI SISWA

SEKOLAH MENENGAH KEJURUAN

TINGKAT PROVINSI JAWA BARAT
TAHUN 2016

NASKAH SOAL MODUL 2

(TERBUKA)

Bidang Lomba
IT NETWORKING SUPPORT

PEMERINTAH PROVINSI JAWA BARAT

DINAS PENDIDIKAN
Jl. Dr. Radjiman No. 6 Telp. (022) 4264813 Fax. (022) 4264881
Wisselbord (022) 4264944, 4264957, 4264973
Bandung
 LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN
TINGKAT PROVINSI JAWA BARAT
TAHUN 2016

1. MATERIAL TEST PROJECT

1.1. CONTENTS
This Test Project refers to the following document/file:
“MODUL 2 – SYSTEM INTEGRATION ISLAND”

1.2. INTRODUCTION
The competition has a fixed start and finish time. You must decide how to best divide your
time.

Please carefully read the following instructions!

Due to the problem of VMWare freezing, please do not connect the DVD drives (.iso)
when they are not in use.

Note: Please use the default configuration if you are not given the details.

1.3. DESCRIPTION OF PROJECT AND TASKS

You are a network engineer and system integrator hired by lksjabar.net. You are hired to
deploy advanced infrastructure at the company as planned. Please install the network
design as planned by your network architects. You’ll find additional information as
attached.

Use the password “Skills39” if nothing other is specified.

LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support 2 2

 LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN
TINGKAT PROVINSI JAWA BARAT
TAHUN 2016

1.3.1. PART 1

1.3.1.1. Working Tasks Windows Virtual Server – WINSRV1

• Please configure the server with the settings specified in the appendix
• Modify the default Firewall rules to allow ICMP (ping) traffic
• Install Active Directory Domain Services for lksjabar.net.
o Create a new Organization Unit named JABAR2016. All new users and
groups must be created in this OU.
o Create the user and security global group with members as indicated in the
table in Appendix. Use Skills39 as the password for all user accounts.
• DNS
o Create a forward zone called “lksjabar.net”
o Create a reverse zone for the IP range.
o Create Record and Alias
 lksjabar.net  WINSRV1
 mail.lksjabar.net  LNXSRV
 internal.lksjabar.net  LNXSRV
o Create Alias
 www.lksjabar.net for lksjabar.net
• GPO – Password Policies
o Ensure the company user password must meet the following criteria:
 Domain passwords will be at least 6 characters.
 Strong passwords need not be enforced.
 Passwords will not be stored with reversible encryption.
 Passwords will be changed exactly every 90 days.
 Accounts will be locked out for 30 minutes after three invalid logon
attempts.
o The password of the users in IT group must meet the following criteria:
 Domain passwords will be at least 8 characters.
 Strong passwords will be enforced.
 Passwords will not be stored with reversible encryption.
 Passwords will be changed exactly every 30 days.
 Accounts will be locked out for 15 minutes after two invalid logon
attempts.
• GPO – Security Policies
o At logon on WINCLT, users should see this message before logging in:
Message Title: “Welcome to JabarSkills2016” with Message Text “Only
authorized personnel allowed to access.” and prohibit this message on all
servers.
o All users, except the IT group, are not allowed to access the display settings
on the Control Panel.

LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support 3 3

 LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN
TINGKAT PROVINSI JAWA BARAT
TAHUN 2016

o Include the IT group to the local Administrators group for all Windows 8.1
clients
o disable "First Sign-in Animation" for all Windows 8.1 clients
o disable the use of “cmd” and “run” for the Visitor group
o hide all local drives for the Visitor group
• Limit the storage space to every home folder to 20 MB.
• Prevent any .exe and .bat files to be stored on the home folder.
 Redirect the Documents folder to
\\lksjabar.net\skills\rfolders\username\Documents.
 Create departmental share folders on \\lksjabar.net\skills\IT,
\\lksjabar.net\skills\Marketing and map the respective share folder to Y: at
logon, depending on the department the user is in. Users should not be
allowed to access other departments’ or users’ home shares.
• Install IIS
o Setup the company web server http://www.lksjabar.net
o Use an Active Directory Users for IIS basic authentication.
• DHCP Server
o Range : 172.16.10.51 – 172.16.10.100
o Gateway : 172.16.10.1
o Netmask : /25
o DNS : 10.200.11.2

1.3.1.2. Working Tasks Linux Virtual Server – LNXSRV

Note: Please use the default configuration if you are not given the details.
• Configure the server with the hostname, domain and IP specified in the
diagrams shown in appendix
• Create local users from “user01” to “user20” with password “Skills39”.
• Install the services
• CA (openssl)
o Configure as CA
o CA attributes should be set as follows
 Country code is set to ID
 Organization is set to LKSJABAR
o Create a root CA certificate
o Store the certificate in directory /cert.

• Install apache2 including php5

o Create websites “mail.lksjabar.net” and “internal.lksjabar.net”.
o Enable HTTPS for both sites.
 Use a certificate signed by CA
 Make sure no certificate warning is shown

LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support 4 4

 LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN
TINGKAT PROVINSI JAWA BARAT
TAHUN 2016

 Create virtual webpages for user01 to user20 ex.

http://internal.lksjabar.net /~user19
o FTP (proftpd)
 Enable FTPS
o Use a certificate signed by CA
 Each user (user01 to user20) will have a home directory. User must
have access to update their own virtual webpage via FTP.
 Make sure the users are jailed in their respective website document
root directories.
 Make sure file transfer to the server is possible.
o Mail (Squirrel Mail Server)
 Create users peter and mary
 Make sure they have access via POP3, IMAP and SMTP.
 Ensure user can access web mail server using
http://mail.lksjabar.net
 Before you finish your project make sure you send an email message
from peter to mary and another message from mary to peter.
 Do not delete these email messages.
o Install and Configure Monitoring (Cacti)
 Install Cacti
 Create an admin-user “master” with password “Skills39”
 Create a graph showing the statistics of the CPU, Memory and
interfaces traffic of the LNXRTR1 and LNXSRV
o Configure and Install NTP
 Set NTP server service. Use local clock as time server source
 Synchronize WINSRV1 , LNXRTR1, WINCLT time with the NTP
server.
1.3.1.3. Working Tasks Linux Virtual Router – LNXRTR1
Note: Please use the default configuration if you are not given the details.
• Configure the server with the hostname, domain and IP specified in the
diagrams shown in appendix
• Enable Routing
• Configure DHCP Relay to WINSRV1 Server
• Reverse Proxy (squid)
o Configure a reverse proxy for www.lksjabar.net, which is hosted by
WINSRV1
1.3.2. PART 2
1.3.2.1. Working Tasks Windows Virtual Client – WINCLT
• Configure the client with the settings specified in the appendix
• Join the WINCLT to lksjabar.net domain
• Modify the default Firewall rules to allow ICMP (ping) traffic
• Use this client for testing user logon, profiles, home drive and GPO settings

LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support 5 5

 LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN
TINGKAT PROVINSI JAWA BARAT
TAHUN 2016

2. APPENDIX
2.1. Specifications
2.1.1. WINDOWS SERVER SPECIFICATIONS – WINSRV01

Computer name: WINSRV1

Operating System MS Windows 2012 R2
Domain Name: lksjabar.net
Administrator User name: Administrator
Administrator password: Skills39
IP address: 10.200.11.2/29
Domain NetBIOS Name: INASKILLS

2.1.1. LINUX SERVER SPESIFICATIONS - LNXSRV

Computer name: LNXSRV
Operating System Linux Debian 7.8
User name: root
Password: Skills39
Domain name: lksjabar.net
IP address: 10.200.11.3/29

2.1.2. LINUX ROUTER SPECIFICATIONS – LNXRTR1

Computer name: LNXRTR1
Operating System Linux Debian 7.8
Domain Name: root
Administrator User name: Skills39
Administrator password: lksjabar.net
IP address: eth0 : 10.200.11.1/29
eth1 : 172.16.10.1/25

2.1.3. WINDOWS CLIENT SPECIFICATIONS – WINCLT

Computer name: WINCLT
Operating System MS Windows 8.1
User name: Administrator
Password: Skills39
Domain name: lksjabar.net
IP address: DHCP

LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support 6 6

 LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN
TINGKAT PROVINSI JAWA BARAT
TAHUN 2016

2.1.4. DOMAIN USER LIST (lksjabar.net)

Group Members
IT itXX (01 – 50)
Marketing mktXX (01 – 50)
Visitors vtrXX (01 - 30)
Employees IT, Marketing

LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support 7 7

 LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN
TINGKAT PROVINSI JAWA BARAT
TAHUN 2016

2.1.5. Network Diagram

NETWORK DIAGRAM
MODUL 2 SYSTEM INTEGRATION
SWICTH UNMANAGE

Bridge
Bridge

Bridge

Windows 8.1 Hostmachine (PC 1) Windows 8.1 Hostmachine (PC 2)

Virtual Windows Server Virtual Linux Server Virtual Windows Client Virtual Linux Router
Windows Server Windows 8.1 Debian 7.8
2012 R2 Debian 7.8
LNXRTR1
WINCLT
WINSRV1 LNXSRV Host only
eth0:
Eth0: 10.200.11.1/29
Eth0: Eth0:
DHCP eth1:
10.200.11.2/29 10.200.11.3/29
172.16.10.1/25
System Functions: System Functions:
- Active Directory - CA System Functions: System Functions:
- DNS - HTTP & HTTPS - Join Domain - DHCP Relay
- IIS - FTP Server - NTP Client - Reverse Proxy
- GPO - Mail & Webmail Server
- DHCP Server - Monitoring (Cacti)
OS Pre-Install - NTP Server OS Pre-Install

LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support 8 8

 LOMBA KOMPETENSI SISWA
SEKOLAH MENENGAH KEJURUAN
TINGKAT PROVINSI JAWA BARAT
TAHUN 2016

2.2. INSTRUCTIONS

2.2.1. INSTRUCTIONS TO THE COMPETITOR

• Competitor’ lateness will not be given time extension.

• Check your materials and equipment provided during familiarization
• Do not bring any study materials or communication devices to the area competition.
• Read the whole competition script, diagram and appendix prior to you starting work.
• Do not disclose any competition material / information to any person during each day’s
competition.
• Be aware of different tasks attract a percentage of the overall mark. Plan your time
carefully.
• Raise your hand to ask question or report any technical problems.
• Warning : SAVE ALL YOUR CONFIGURATIONS!!! Every device will be
rebooted before marking.

2.2.2. EQUIPMENT, MACHINERY, INSTALLATIONS (PREINSTALLED) AND

MATERIALS REQUIRED

PC 1 (1 for each competitor) :

• Win 7 Enterprise 64 Bit preinstalled
• Ms. Office 2013 preinstalled
• VMWare Workstation 11 preinstalled
• Virtual Machine for Windows Server preinstalled by Jury, configured by
competitors
• ISO DVD 1 – 3 Debian 7.8
PC 2 (1 for each competitor) :
• Win 7 Enterprise 64 Bit preinstalled
• Ms. Office 2013 preinstalled
• VMWare Workstation 11 preinstalled
• Virtual Machine for Windows 8.1 preinstalled by Jury, configured by
competitors
• ISO DVD 1 – 3 Debian 7.8
Network (1 for each competitor) :
• 1x Un-Managed Switch min. 8 port with Adapter

Network Cable (2 for each competitor) :

• 1.5 Metres straight-through cable

Additional equipment:
• None

LKS Tingkat Provinsi Jawa Barat Bidang Lomba IT Networking Support 9 9