KRITERIA PENILAIAN LOMBA KETE

BIDANG IT NETWORK
Criteria
Home and Small Bussiness
Cisco Packet Tracer
Network Security

A
B
C

Sub Criteria ID Sub - Criteria Name or Description

A1

Debian Router

A2

Debian Server

A3

Wireless Access Point

A4

Windows Client

A5

Cabling
Packet Tracer Activities

B1

Subneting

C1

Debian Router

C2

Debian Server

C3

Debian Client

RIA PENILAIAN LOMBA KETERAMPILAN SISWA (LKS) XXII TAHUN 20

BIDANG IT NETWORK SYSTEM ADMINISTRATION
Mark
50
20
30

Aspect - Description
Installation Debian Router
Hostname
IP Address
Username and Password
Enable routing configuration
DHCP Relay Configuration
Proxy server: Configure Proxy Server to allow only whitelist
accessed of website from Laptop client using ACL (access control list)
Proxy server: Configure Proxy Server to access Internet using
username and password (non-transparent mode).
Proxy server: Configure Proxy Server to limit bandwidth for download
Proxy server: Add web-based tool to monitor user proxy activity
Installation Debian Server
Hostname
IP Address
Username and Password
Create Groups
Create all Users and password
Configure Home Directory each users
DNS Configuration
Domain jakabaring.org available
Subdomain www, mail and ftp available for jakabaring.org
Domain sportcenter.net avaliable
Subdomain www, mail and ftp available for sportcenter.net
DHCP Server Configuration
Web Server Configuration: Support html
Web Server Configuration: Support php
Web Server Configuration: virtual webpages user

Website www.jakabaring.org available

Website www.sportcenter.net available
FTP Server Configuration: Can be accessed for anonymous
FTP Server Configuration: Set first directory that guest can upload to
and download file from it
FTP Server Configuration: Set second directory that guest can only
download file from it
Configuration File server (samba)
share "internal" available
share "internel" with user: pengelola and password: access
share "public" avaibale
share "public" can access for everyone (no username and password)
Mail Server Configuration: SMTP no relay
Mail Server Configuration: Create user client, Create e-mail address
Mail Server Configuration: IMAP/POP
Mailbox available for all users (user01 to user15)
Mail Server Configuration: Set quota 20 Mb for each user.
Web mail configuration: Webmail Apps
Web mail configuration: domain is http://mail.jakabaring.org
Web mail configuration: domain https://mail.jakabaring.org available
(secure)
NTP Server configuration: Set NTP server services. Use local clock as
time server source
NTP Server configuration: Synchronize Windows client time with the
NTP Server time in PC Server
Set WPA-PSK authentication.
Set SSID.
Set MAC address filtering to allow only Laptop client
Install Windows Operating System
Set Windows client : Hostname : jakabaringPC
Set Windows client : username and password
Packet Tracer Installation
Straighthrough cable with standard T568B
Crossthrough cable with standard T568A and T568B
Precentage Grade Packet Tracer Activities (mak 100 * 0.15)
Calculation subneting for vlan 33, 34, 35 and 36
Installation

Hostname
Username and Password
IP Address
Enable routing configuration
Firewall Configuration: Configure Packet Filtering Firewall to allow
DNS, HTTPS form outside
Configure PAT for HTTP using port 8080 to scrServer
Configure PAT for SSH using port 14022 to scrServer
Deny All ather services
Allow internet area connection to Debian server
Deny debian server fo open session connection to Internet
Installation
Hostname
Username and Password
IP Address
Domain secure.net available
Subdomain www, db, intranet for secure.net available
Domain netsecure.org available
Subdomain www, db, intranet for netsecure.org available
website http://www.secure.net and http://www.netsecure.org available
Website secure mode for https://www.secure.net available
Website secure mode for https://www.netsecure.org available
intranet.secure.net and intranet.netsecure.org protected by
authentication
Username and password for protection website
SSH server configured on server
Port ssh change to 2244
Remote server using ssh
MySQL server configured on server
Port MySQL change to 4033
phpmyadmin server configured on server
phpmyadmin avalable under http://db.secure.net/_dbmin
Debian GUI installed
Hostname
Username and password

N SISWA (LKS) XXII TAHUN 2014

ADMINISTRATION

Extra Aspect Information

Debian router running
hostname (routerJB)
/etc/network/interface
login
sysctl net.ipv4.ip_forward
client get IP from Debian server

Max Mark
1
0.5
1
1
0.5
1
1

username password requirement

1
1

Debian server running

hostname (serverJB)
/etc/network/interface
login
/etc/group
/etc/passwd and login random user
ls /home/userdir
nslookup jakabaring.org

1
1
0.5
1
1
0.5
1.5
1.5
0.5
1

nslookup www.jakabaring.org, etc

nslookup sportcenter.net

0.75
1

nslookup www.sportcenter.net

0.75
1.5
0.75
0.75
1.5

http://10.10.x.1 or http://jakabaring.org
http://jakabaring.org/~user01

1
1

http://www.jakabaring.org
http://www.sportcenter.net

ftp to 10.10.x.1 username password no requirement

can upload and download file to first_directory
can download but can't upload to second_directory
\\10.10.x.1\internal

login

0.75
1
1
0.5
1.5
0.75
1.5

\\10.10.x.1\public

username password no requirement

0.75
0.5
1
0.5
1.5
1
0.5
1.5

http://mail.jakabaring.org

https://mail.jakabaring.org

sportcenter@cyber_xw

Windows client running

hostname
login
running

Sub Total A:
172.17.18.0/26 -- 172.17.18.64/27 -- 172.17.18.96/28 -172.17.18.112/29
Sub Total B:
Debian router running

1
0.75
0.75
0.5
1
0.5
1
0.25
1.5
0.5
50
15
5
20
1

hostname (scrRouter)
login
/etc/network/interface
sysctl net.ipv4.ip_forward

0.5
1
1
0.5

debian client can resolve domain using scrDebian and can

akses https

1.5

debian client can access http using port 8080

debian client can access ssh using port 14022

can't access other service
debian client can access debians server

1
0.5
0.75

server can't access to debian client

Debian server running
hostname (scrServer)
login
/etc/network/interface
nslookup secure.net
nslookup www.secure.net, etc
nslookup netsecure.org

0.75
1
0.5
1
1
0.5
1
0.5

nslookup www.netsecure.org, etc

http://www.secure.net and http://www.netsecure.org

https://www.secure.net

https://www.netsecure.org

intranet.secure.net and intranet.netsecure.org should be

login
username : intranet password: secure2014
ssh server configured
debian client can ssh using port 2244
debian client can remote server using ssh
MySQL server configured
remote MySQL server can access using 4033
phpmyadmin configured
http://db.secure.net/_dbmin

Debian client running

hostname (securePC)
login
Sub Total C:
TOTAL:

1.5
0.5
0.75
1
0.25
0.75
1
0.75
1
1
0.5
1
30
100

KRITERIA PENILAIAN LOMBA KETERAMPILAN SIS

BIDANG IT NETWORK SYSTEM ADMI
Criteria
Home and Small Bussiness
Cisco Packet Tracer
Network Security

A
B
C

Sub
Criteria
ID

A1

Sub - Criteria Name or

Description

Debian Router

A2

Debian Server

A3

Wireless Access Point

A4

Windows Client

A5

Cabling

TERIA PENILAIAN LOMBA KETERAMPILAN SISWA (LKS) XXII TAHUN 2

BIDANG IT NETWORK SYSTEM ADMINISTRATION
Mark
50
20
30

Aspect - Description
Installation Debian Router
Hostname
IP Address

Username and Password

Enable routing configuration
DHCP Relay Configuration
Proxy server: Configure Proxy Server to allow only whitelist accessed of website
from Laptop client using ACL (access control list)
Proxy server: Configure Proxy Server to access Internet using username and
password (non-transparent mode).
Proxy server: Configure Proxy Server to limit bandwidth for download
Proxy server: Add web-based tool to monitor user proxy activity
Installation Debian Server
Hostname
IP Address
Username and Password
Create Groups
Create all Users and password
Configure Home Directory each users
DNS Configuration
Domain jakabaring.org available
Subdomain www, mail and ftp available for jakabaring.org
Domain sportcenter.net avaliable

Subdomain www, mail and ftp available for sportcenter.net

DHCP Server Configuration
Web Server Configuration: Support html
Web Server Configuration: Support php
Web Server Configuration: virtual webpages user
Website www.jakabaring.org available
Website www.sportcenter.net available
FTP Server Configuration: Can be accessed for anonymous
FTP Server Configuration: Set first directory that guest can upload to and
download file from it
FTP Server Configuration: Set second directory that guest can only download file
from it
Configuration File server (samba)
share "internal" available
share "internel" with user: pengelola and password: access
share "public" avaibale
share "public" can access for everyone (no username and password)
Mail Server Configuration: SMTP no relay
Mail Server Configuration: Create user client, Create e-mail address
Mail Server Configuration: IMAP/POP
Mailbox available for all users (user01 to user15)
Mail Server Configuration: Set quota 20 Mb for each user.
Web mail configuration: Webmail Apps
Web mail configuration: domain is http://mail.jakabaring.org
Web mail configuration: domain https://mail.jakabaring.org available (secure)
NTP Server configuration: Set NTP server services. Use local clock as time server
source
NTP Server configuration: Synchronize Windows client time with the NTP Server
time in PC Server
Set WPA-PSK authentication.
Set SSID.
Set MAC address filtering to allow only Laptop client
Install Windows Operating System
Set Windows client : Hostname : jakabaringPC
Set Windows client : username and password
Packet Tracer Installation
Straighthrough cable with standard T568B
Crossthrough cable with standard T568A and T568B

ISWA (LKS) XXII TAHUN 2014

MINISTRATION

Extra Aspect Information

Max
Mark

Actual
Mark

Debian router running

hostname, should "routerJB"

1
0.5

/etc/network/interface, (172.16.x.1, 255.255.255.128)

and (10.10.x.2, 255.255.255.248)
login
sysctl net.ipv4.ip_forward

1
1
0.5

client get IP from Debian server and stop service dhcp

debian server don't get IP

1
1

username password requirement

1
1

Debian server running

hostname (serverJB)
/etc/network/interface
login
/etc/group
/etc/passwd and login random user
ls /home/userdir
bind9 configured
nslookup jakabaring.org
nslookup www.jakabaring.org, etc
nslookup sportcenter.net

1
1
0.5
1
1
0.5
1.5
1.5
0.5
1
0.75
1

nslookup www.sportcenter.net
isc-dhcp-server configured
http://10.10.x.1 or http://jakabaring.org

http://www.sportcenter.net

0.75
1.5
0.75
0.75
1.5
1
1

ftp to 10.10.x.1 username password no requirement

0.75

http://jakabaring.org/~user01
http://www.jakabaring.org

can upload and download file to first_directory

can download but can't upload to second_directory
samba configured

\\10.10.x.1\public

1
0.5
1.5
0.75
1.5

username password no requirement

configured smtp no relay on postfix

0.75
0.5

\\10.10.x.1\internal

login

configured mail server

configured imap/pop
success random login and can send mail
outlook send > 20Mb
webmail configured
http://mail.jakabaring.org
https://mail.jakabaring.org

1
0.5
1.5
1
0.5
1.5
2
1

sportcenter@cyber_xw

1
0.75
0.75

only windows client can connect to wireless access

point
Windows client running
hostname
login
Packet Tracer running
Standard Cabling TIA
Standard Cabling TIA

0.5
1
0.5
1
0.25
1.5
0.5

autentication requirement

Sub Total A:

50

KRITERIA PENILAIAN LOMBA KETER

BIDANG IT NETWORK S
Criteria
Home and Small Bussiness
Cisco Packet Tracer
Network Security

A
B
C

Sub
Criteria
ID

Sub - Criteria Name or

Description
Packet Tracer Activities

B1

Subneting

RITERIA PENILAIAN LOMBA KETERAMPILAN SISWA (LKS) XXII TAHU

BIDANG IT NETWORK SYSTEM ADMINISTRATION
Mark
50
20
30

Aspect - Description
Precentage Grade Packet Tracer Activities (mak 100 * 0.15)
Calculation subneting for vlan 33, 34, 35 and 36

WA (LKS) XXII TAHUN 2014

NISTRATION

Extra Aspect Information

Max Mark
15

172.17.18.0/26 -- 172.17.18.64/27 -- 172.17.18.96/28

-- 172.17.18.112/29
Sub Total B:

5
20

KRITERIA PENILAIAN LOMBA KETER

BIDANG IT NETWORK S
Criteria
Home and Small Bussiness
Cisco Packet Tracer
Network Security

A
B
C

Sub
Criteria
ID

Sub - Criteria Name or

Description

C1

Debian Router

C2

Debian Server

C2

Debian Server

C3

Debian Client

RITERIA PENILAIAN LOMBA KETERAMPILAN SISWA (LKS) XXII TAHU

BIDANG IT NETWORK SYSTEM ADMINISTRATION
Mark
50
20
30

Aspect - Description
Installation
Hostname
Username and Password
IP Address
Enable routing configuration
Firewall Configuration: Configure Packet Filtering Firewall to allow DNS, HTTPS form
outside
Configure PAT for HTTP using port 8080 to scrServer
Configure PAT for SSH using port 14022 to scrServer
Deny All ather services
Allow internet area connection to Debian server
Deny debian server fo open session connection to Internet
Installation
Hostname
Username and Password
IP Address
Domain secure.net available
Subdomain www, db, intranet for secure.net available
Domain netsecure.org available
Subdomain www, db, intranet for netsecure.org available
website http://www.secure.net and http://www.netsecure.org available
Website secure mode for https://www.secure.net available
Website secure mode for https://www.netsecure.org available
intranet.secure.net and intranet.netsecure.org protected by authentication
Username and password for protection website

SSH server configured on server

Port ssh change to 2244
Remote server using ssh
MySQL server configured on server
Port MySQL change to 4033
phpmyadmin server configured on server
phpmyadmin avalable under http://db.secure.net/_dbmin
Debian GUI installed
Hostname
Username and password

WA (LKS) XXII TAHUN 2014

NISTRATION

Extra Aspect Information

Max Mark

Debian router running

hostname (scrRouter)
login
/etc/network/interface
sysctl net.ipv4.ip_forward

1
0.5
1
1
0.5

debian client can resolve domain using scrDebian and

can akses https

1.5

debian client can access http using port 8080

debian client can access ssh using port 14022

can't access other service
debian client can access debians server
server can't access to debian client
Debian server running
hostname (scrServer)
login
/etc/network/interface
nslookup secure.net
nslookup www.secure.net, etc
nslookup netsecure.org
nslookup www.netsecure.org, etc

1
0.5
0.75
0.75
1
0.5
1
1
0.5
1
0.5
1

http://www.secure.net and http://www.netsecure.org

https://www.secure.net
https://www.netsecure.org

intranet.secure.net and intranet.netsecure.org should be

login
username : intranet password: secure2014

2
1
1
1.5
0.5

ssh server configured

debian client can ssh using port 2244
debian client can remote server using ssh
MySQL server configured

0.75
1
0.25
0.75

remote MySQL server can access using 4033

phpmyadmin configured

1
0.75
1
1
0.5
1
30

http://db.secure.net/_dbmin

Debian client running

hostname (securePC)
login
Sub Total C: