LKSN TKJ 2019 Modul D
LKSN TKJ 2019 Modul D
LKSN TKJ 2019 Modul D
Submitted by:
ITNSA-ID Team
LKSN2019_ITNSA
Contents
INTRODUCTION ............................................................................................................................................ 3
PART I BASIC CONFIGURATION .....................................................................................................................4
PART II (CLOUD) ............................................................................................................................................4
PART III (EDGE) ............................................................................................................................................ 6
PART IV (INTERNAL & CLIENT) ...................................................................................................................... 7
APPENDIX ................................................................................................................................................... 8
SPECIFICATION ............................................................................................................................................ 8
NETWORK DIAGRAM .................................................................................................................................. 11
Introduction
The competition has a fixed start and finish time. You must decide how to best divide your time.
Please carefully read the following instructions!
When the competition time ends, please leave your station in a running state.
FOLDER PATHS
Virtual Machines : D:\KOMPETISI\VM
ISO Images : D:\KOMPETISI\ISO
PART II (CLOUD)
WORK TASK SERVER LKS-LB
DNS (bind9)
Configure a forward zone called “itnsaskills.cloud”
Create for each host an A record to the respective IP in the cloud zones.
Create a CNAME record for ‘www’ that point to the appropriate host that serves websites for all
clients.
Create A record for ‘mail’ that points to the mail server.
Create the appropriate MX records.
Configure a reverse zone for each host defined for network 10.1.1.0/24.
Configure multiple views DNS for external and internal client, with the specification below:
External client will resolve www.itnsaskills.cloud to 172.17.1.253.
Internal client will resolve www.itnsaskills.cloud to 10.1.1.10.
SSH
Use key based for SSH authentication.
Disable root login.
Create a new Local User named “cloudops” with password: Skill39.
Install sudo and then add Local User named “cloudops” to sudo group.
Change SSH port default to 2019.
Make sure user “competitor” in lks-i-client and lks-e-client can SSH to user “cloudops” in lks-lb
without password
DHCP
Create DHCP for internal client with the following requirement below:
o Range: 10.2.3.100 – 10.2.3.200
o Netmask: /24
o Gateway 10.2.3.254
o DNS: 10.1.1.10
The clients should automatically register their name with the DNS server after they have been
assigned with an IP address by the DHCP server.
SPECIFICATION
LKS-LB
Operating System Linux Debian 9.6
FQDN: lks-lb.itnsaskills.cloud
LKS-SRV1
Operating System Linux Debian 9.6
FQDN: lks-srv1.itnsaskills.cloud
FQDN: lks-srv2.itnsaskills.cloud
LKS-CLOUD-EDGE
Operating System Linux Debian 9.6
FQDN: lks-cloud-edge.itnsaskills.cloud
LKS-I-SRV
Operating System Linux Debian 9.6
FQDN: lks-i-srv.itnsaskills.cloud
FQDN: lks-internal-edge.itnsaskills.cloud
LKS-I-CLIENT
Operating System Linux Debian 9.6 (GUI)
FQDN: lks-i-client.itnsaskills.cloud
LKS-E-CLIENT
Operating System Linux Debian 9.6 (GUI)
FQDN: lks-e-client.itnsaskills.cloud
lks-e-client
vSwitch-Internet (172.17.1.10/24)
Port-Group: Internet