konfigurasi Legacy inter-VLAN routing

Topology

switch0>enable
switch0#config terminal
switch0(config)#vlan 10
switch0(config-vlan)#name marketing
switch0(config-vlan)#exit
switch0(config)#interface range fastEthernet 0/1-24
switch0(config-if-range)#switchport mode access
switch0(config-if-range)#switchport access vlan 10
switch0(config-if-range)#exit
switch0(config)#exit
switch0#copy running-config startup-config


switch1>enable
switch1#config terminal
switch1(config)#vlan 10
switch1(config-vlan)#name marketing
switch1(config-vlan)#exit
switch1(config)#vlan 20
switch1(config-vlan)#name produksi
switch1(config-vlan)#exit
switch1(config)#interface fastEthernet 0/1
switch1(config-if)#switchport mode access
switch1(config-if)#switchport access vlan 10
switch1(config-if)#exit
switch1(config)#interface fastEthernet 0/2
switch1(config-if)#switchport mode access
switch1(config-if)#switchport access vlan 20
switch1(config-if)#exit
switch1(config)#interface fastEthernet 0/10
switch1(config-if)#switchport mode access
switch1(config-if)#switchport access vlan 10
switch1(config-if)#exit
switch1(config)#interface fastEthernet 0/20
switch1(config-if)#switchport mode access
switch1(config-if)#switchport access vlan 20
switch1(config-if)#exit
switch1(config)#exit
switch2#copy running-config startup-config


switch2>enable
switch2#config terminal
switch2(config)#vlan 20
switch2(config-vlan)#name produksi
switch2(config-vlan)#exit
switch2(config)#
switch2(config)#interface range fastEthernet 0/1-24
switch2(config-if-range)#switchport mode access
switch2(config-if-range)#switchport access vlan 20
switch2(config-if-range)#exit
switch2(config)#exit
switch2#copy running-config startup-config


router0>enable
router0#config terminal
router0(config)#interface fastEthernet 0/0
router0(config-if)#ip address 192.168.10.1 255.255.255.0
router0(config-if)#no shutdown
router0(config-if)#exit
router0(config)#
router0(config)#interface fastEthernet 0/1
router0(config-if)#ip address 192.168.20.1 255.255.255.0
router0(config-if)#no shutdown
router0(config-if)#exit
switch2#copy running-config startup-config

Format Tugas Akhir XIISMK

HALAMAN COVER
HALAMAN PERSETUJUAN
HALAMAN PENGESAHAN
HALAMAN PERNYATAAN
MOTTO
HALAMAN RINGKASAN
HALAMAN PENGANTAR
DAFTAR ISI
DAFTAR GAMBAR
DAFTAR TABEL
BAB I PENDAHULUAN
A. Latar Belakang
B. Rumusan
C. Batasan
D. Tujuan
E. Waktu Pelaksanaan
BAB II LANDASAN TEORI
A. Umum
B. Khusus
BAB III PERENCANAAN SYSTEM KERJA
A. Konsep Gambar System
B. Rincian Kebutuhan Alat dan Biaya
BAB IV IMPLEMENTASI
A. Langkah IMPLEMENTASI
B. Hasil
C. Temuan Faktor Pendukung & Penghambat
BAB V PENUTUP
A. Kesimpulan
B. Saran
DAFTAR PUSTAKA
LAMPIRAN

Konfigurasi 10Nov2015

Langkah Konfigurasi FTP Server

1. Buat direktori untuk direktori FTP
   root@debian:~#cd /home
   root@debian:/home#mkdir SISWA
 
2. buat group

   root@debian:/home#groupadd -g 500 siswa
 
3. buat user

   root@debian:/home#useradd -u 501 -d /home/SISWA -g siswa
               -s /bin/bash namasiswa  

   root@debian:/home#passwd namasiswa
Enter new UNIX password:
Retype new UNIX password:
 
4. Ubahlah kepemilikan direktori "SISWA"
   dari root ke user
 
   root@debian:/home#chown user:groupuser SISWA/ -R

5. Ubahlah hak pakai direktori "SISWA" sebagai berikut
   root@debian:/home#chmod 644 SISWA/ -R
 
6. letakkan file paket instalasi PROFTP pada direktori /home
   menggunakan applikasi WINSCP
 
7. Install

   root@debian:/home#dpkg -i proftpd....
 
   root@debian:/home#apt-get install -f
 
8. Konfigurasi
 
   root@debian:/home#nano /etc/proftpd/proftpd.conf
 
   tambahkanpada akhir script
 
   <Anonymous /home/SISWA >
   User namasiswa
   Group siswa
   </Anonymous>
 
9. Restart service FTP
   
   root@debian:/home#/etc/init.d/proftpd restart
 
10. buka windows explorer pada LAPTOP anda, ketikkan text berikut ini pada
    address bar

ftp://alamat ip address server ftp

11. it's done, Alhamdulillah...
 

latihan 7 Februari 2015 Simple Router Mikrotik Config via CLI

Download Materi berikut, praktekkan pada PC Server LAB atau menggunakan Virtual Box

http://www.4shared.com/rar/uY9gDpANce/SIMULASI_UKK_2015_latihan_Mikr.html

Konfigurasi VLAN catatan 6Feb2015

ON SWITCH1
-----------------------------------------------

switch1>enable
switch1>config t
switch1(config)#
switch1(config)#vlan 10
switch1(config-vlan)#name marketing
switch1(config-vlan)#exit
switch1(config)#interface fa0/0
switch1(config-if)#switchport mode access
switch1(config-if)#switchport access vlan 10
switch1(config-if)#exit
switch1(config)#

switch1(config)#vlan 20
switch1(config-vlan)#name produksi
switch1(config-vlan)#exit
switch1(config)#interface fa0/1
switch1(config-if)#switchport mode access
switch1(config-if)#switchport access vlan 20
switch1(config-if)#exit

switch2(config)#
switch2(config)#interface fa0/3
switch2(config-if)#switchport mode trunk



ON SWITCH2
----------------------------------------------

switch2>enable
switch2>config t
switch2(config)#
switch2(config)#vlan 10
switch2(config-vlan)#name marketing
switch2(config-vlan)#exit
switch2(config)#interface fa0/0
switch2(config-if)#switchport mode access
switch2(config-if)#switchport access vlan 10
switch2(config-if)#exit
switch2(config)#



switch2(config)#vlan 20
switch2(config-vlan)#name produksi
switch2(config-vlan)#exit
switch2(config)#interface fa0/1
switch2(config-if)#switchport mode access
switch2(config-if)#switchport access vlan 20
switch2(config-if)#exit

switch2(config)#
switch2(config)#interface fa0/3
switch2(config-if)#switchport mode trunk




ON SWITCH0
----------------------------------------------

switch0>enable
switch0#configure
switch0(config)vlan 10
switch0(config-vlan)name marketing
switch0(config-vlan)#exit

switch0(config)#vlan 20
switch0(config-vlan)#name produksi
switch0(config-vlan)#exit
switch0(config)#

switch2(config)#
switch2(config)#interface fa0/1
switch2(config-if)#switchport mode trunk

switch2(config)#
switch2(config)#interface fa0/2
switch2(config-if)#switchport mode trunk

Praktikum UKK TKJ XIISMK 2O14 simulasi

Silahkan download link berikut ini,


http://www.4shared.com/rar/dUrOCxFNba/Materi_Pembimbingan_UKK__XIISM.html?

TUGAS tgl 31 Januari 2015


Task!
Instalasi Debian Server

membangun Router, DNS server, Web Server dan Proxy Server


Topologi

   Internet  
   Gateway Internet    DNS  
   192.168.150.254/24    202.134.1.10,202.134.2.5,8.8.8.8
   |
   |
   |
   PC Server
   eth0 : 192.168.150.X/24
   ------------------------
   eth1 : 192.168.125.125/27
   |
   |
   |
   PC Client
   IP Lan : X.X.X.X/X


   (X : tentukan sendiri!)


Konfigurasi PC Server
a. OS          = Debian 7
b. Domain      = assalaam.net 192.168.125.125/27
c. SubDomain   = smk.assalaam.net
d. Domain baru = alvocat.com  (gunakan IP alias 10.10.10.1/24)
e. Virtual Directory = assalaam.net/~datasekolah
f. NAT
g. Port Proxy  = 3128
h. Cache mgr   = namasiswa@assalaam.net
i. Transparent Proxy
j. Blocking Website = www.youtube.com




halaman website

This Site "website" works Properly
________________________________________






admin : namasiswa@assalaam.net

Instruksi Praktikum 25 Januari ( XIISMK pa) dan 26 Januari (XIISMK pi)

Materi : Instalasi SQUID pada Server Debian

A. Topologi

     Internet 192.168.150.254/24
                            |
                            |
     PC Server     eth0  192,168,150.(no.urut PC Server) /24
                          eth1   192.168.125.1/24
                           |
                           |
     PC Client     eth0   192.168.125.(terserah....) /24

B.   Langkah Kerja

1. Install OS Debian
2. Buat Partisi [swap : 2048 MB], [root system 40 GB] dan [/home 40 GB]
3. Konfigurasi Interface

   ~:#nano /etc/network/interfaces
   
    |   ........
    |   auto eth0
    |   iface eth0 inet static
    |             address 192.168.150.X
    |             netmask 255.255.255.0
    |             gateway 192.168.150.254
    |             dns-nameservers 202.134.1.10,202.134.2.5,8.8.8.8
    |
    |   auto eth1
    |   iface eth1 inet static
    |           address 192.168.125.1
    |           netmask 255.255.255.0
    |
 
4. Konfigurasi Hosts dan Hostname
 
    nama host = namasiswa
    nama domain = namasiswa

    ex. 192.168.5,1     rezki

   ~:#nano /etc/hosts

   |    .......
   |    127.0.0.1               localhost
   |    192.168.125.X      rezki                         #gunakan interface eth1
   |    ......

   ~:#nano /etc/hostname

   |   kadal

5. Konfigurasi NAT dan /etc/resolv.conf

   ~:#iptables -t nat -A POSTROUTING -s 192.168.125.0/24 -j MASQUERADE
   ~:#iptables-save > /etc/iptables
   ~:#echo "up command iptables-restore < /etc/iptables" >> /etc/network/interfaces

   ~:#nano /etc/resolv.conf

   |  search kadal.net
   |  nameserver 192.168.125.1
   |  nameserver 202.134.1.10
   |  nameserver 202.134.2.5
   |  nameserver 8.8.8.8
 
6. Reboot System!

7. konfigurasi PC Client anda, pastikan dapat melakukan ping ke alamat berikut ini
    192.168.125.1
    192.168.150.254
    202.134.1.10

    lakukan diagnosa dan troubleshoot jika terjadi masalah,
    laporkan hasil pekerjaan anda pada instruktur,

    Install SSH server supaya Server dapat dikonfigurasi secara remote menggunakan\
    applikasi putty dari PC Client

    langkah kerja berikutnya anda disarankan untuk mengupdate list repository
    untuk melengkapi applikasi pendukung praktikum ini.

    ~:#nano /etc/apt/source.list

#tambahkan list berikut ini dibagian akhir file
deb http://kambing.ui.ac.id/debian/ wheezy main non-free contrib
deb-src http://kambing.ui.ac.id/debian/ wheezy main non-free contrib
deb http://kebo.vlsm.org/debian/ wheezy main non-free contrib
deb-src http://kebo.vlsm.org/debian/ wheezy main non-free contrib
deb http://security.debian.org/ wheezy/updates main contrib non-free
deb-src http://security.debian.org/ wheezy/updates main contrib non-free
deb http://mirror.kioss.undip.ac.id/debian wheezy main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian-volatile wheezy/volatile main contrib
deb http://mirror.kioss.undip.ac.id/debian-security wheezy/updates main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian wheezy main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian-volatile wheezy/volatile main contrib
deb http://mirror.kioss.undip.ac.id/debian-security wheezy/updates main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian stable-proposed-updates main non-free contrib
deb http://mirror.poliwangi.ac.id/debian wheezy main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-lts main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-proposed-updates main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-updates main contrib non-free
deb http://mirror.poliwangi.ac.id/debian-security wheezy/updates main contrib non-free

  

     lakukan update list repository
      ~:#apt-get update

l8.  Lakukan instalasi SQUID
       ~:#apt-get install squid

      langkah Konfigurasi Squid
   
       ~:#nano /etc/squid/squid.conf

#. . .

http_port 3128 transparent                                              #tambahkan “transparent”

cache_mem 16 MB                                                             #kurang-lebih ¼ dari kapasitas RAM

cache_mgr namasiswad@kadal.net                                #sesuaikan nama siswa peserta ujian

visible_hostname proxy.kadal.net                                   #tambahkan secara lengkap

#. . .

#. . .

acl url dstdomain “/etc/squid/url”                                   #url domain yang di blok

acl key url_regex –i “/etc/squid/key”                              #url kata yang di blok

http_access deny url

http_access deny key

acl lan src 192.168.125.0/24                                               #ip network lokal

http_access allow lan

http_access allow all

#....

19. Konfigurasi ulang IPTABLES
 
     ~:#iptables -t nat -a PREROUTING -s 192.168.125.0/24 -p tcp --dport 80 -j REDIRECT --to-port 3128


20. Membuat file "url" dan file "key"

~:#:nano /etc/squid/url

www.kadal.com

www.iwak.com

~:#nano /etc/squid/key

coro

jerapah

21. Restart layanan squid
      ~:#/etc/init.d/squid restart

     ~:#squid -z


optional!
anda dapat modifikasi tampilan peringatan akses web yang dilarang

/usr/share/squid/errors/English/ERR_ACCESS_DENIED

22. Setting manual pada PC Client
   
Control Panel à Network & Internet connection à  internet option à tab  Connectionà LAN  Setting à Use proxy [address] port [3128]
     
 

Daftar Source List Repository Linux Debian

# Salin list berikut ini ke dalam file /etc/apt/source.list

# deb cdrom:[Debian GNU/Linux 7.0.0 _Wheezy_ - Official i386 DVD Binary-1 20130504-15:20]/ wheezy contrib main

#deb cdrom:[Debian GNU/Linux 7.0.0 _Wheezy_ - Official i386 DVD Binary-1 20130504-15:20]/ wheezy contrib main

# Line commented out by installer because it failed to verify:
deb http://security.debian.org/ wheezy/updates main contrib
# Line commented out by installer because it failed to verify:
deb-src http://security.debian.org/ wheezy/updates main contrib

# wheezy-updates, previously known as 'volatile'
# A network mirror was not selected during install.  The following entries
# are provided as examples, but you should amend them as appropriate
# for your mirror of choice.
#
 deb http://ftp.debian.org/debian/ wheezy-updates main contrib
 deb-src http://ftp.debian.org/debian/ wheezy-updates main contrib



deb http://kambing.ui.ac.id/debian/ wheezy main non-free contrib
deb-src http://kambing.ui.ac.id/debian/ wheezy main non-free contrib
deb http://kebo.vlsm.org/debian/ wheezy main non-free contrib
deb-src http://kebo.vlsm.org/debian/ wheezy main non-free contrib
deb http://security.debian.org/ wheezy/updates main contrib non-free
deb-src http://security.debian.org/ wheezy/updates main contrib non-free
deb http://mirror.kioss.undip.ac.id/debian wheezy main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian-volatile wheezy/volatile main contrib
deb http://mirror.kioss.undip.ac.id/debian-security wheezy/updates main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian wheezy main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian-volatile wheezy/volatile main contrib
deb http://mirror.kioss.undip.ac.id/debian-security wheezy/updates main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian stable-proposed-updates main non-free contrib
deb http://mirror.poliwangi.ac.id/debian wheezy main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-lts main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-proposed-updates main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-updates main contrib non-free
deb http://mirror.poliwangi.ac.id/debian-security wheezy/updates main contrib non-free

Konfigurasi Disk Quota

Disk Quota berfungsi untuk mengatur dan mengawasi pemakaian kapasitas media penyimpanan yang digunakan oleh user

download paket instalasi dari alamat ini, 

https://packages.debian.org/squeeze/i386/quotatool/download

lakukan instalasi dengan cara 

~:#dpkg -i <nama paket>

atau anda bisa dengan cara berikut dengan catatan anda telah terhubung ke server repository!

~:#apt-get install quota quotatool

Konfigurasi

---------------------------

Memberikan script pada direktory /home (direktory home terpisah dari partisi / )

~:#nano /etc/fstab

# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point>   <type>  <options>       <dump>  <pass>
# / was on /dev/sda5 during installation
UUID=556f39e0-c5fc-4c08-9a05-77fc3414298e /            ext4    errors=remount-ro        0       1
# /home was on /dev/sda6 during installation
UUID=4d5a3bda-1851-45cd-a449-27a90af293bd /home  ext4    defaults,usrquota,grpquota   0       2
# swap was on /dev/sda1 during installation
UUID=c6986195-c51e-401b-b04a-90c2c767419f none    swap    sw                       0       0
/dev/sr0        /media/cdrom0   udf,iso9660 user,noauto                                    0       0

simpan konfigurasi kemudian reboot system,

Konfigurasi quoata pada direktory /home

~:#quotacheck -um /home

~:#quotaon -uv /home

| output --> /dev/mapper/vg_target 00 ........ [/home] = userquotas turned on

Melakukan pemeriksaan hasi konfigurasi quota

~:#quotaon -p -a

| out put 

| group quota on /dev/mapper/vg_target 00 ........ is off

| user quota on /dev/mapper/vg_target 00 .......... is on

|

Mengatur quota untuk user

~:#edquota -u mardjito

| Disk Quota for user mardjito .......

|       file system                    block         soft          hard          inodes       soft           hard

| /dev/mapper/.........            32          1024000   2048000        8              0               0

|

Melihat hasil konfigurasi

~:#repquota -a

|Menerapkan konfigurasi suatu user ke user lainnya

~:#edquota -p mardjito lukman

instalasi dan konfigurasi samba server

Instalasi dan Konfigurasi Samba Server

Konfigurasi interface
~:#nano /etc/network/interfaces
| .....
| auto eth0
| iface eth0 inet static
| address 192.168.1.10
| netmask 255.255.255.0

Restart layanan network
~:# /etc/init.d/networking restart

Instalasi paket aplikasi samba
~:#apt-get install samba

Konfigurasi
~:# nano /etc/samba/smb.conf

|  === Global ===
| workgroup = WORKGROUP
| interface = 127.0.0.0/8 eth0
| bind interface only = yes
|
| === Authentication ==
| security = user                   # untuk mengaktifkan valid user access
|
| === Share Definition ==
| ....
| #tambahkan script berikut ini!
| [siswa]
|  path = /home/siswa
|  wiriteable = yes
|  create mode = 0770
|  directory mode = 0770
|  share modes = yes
|  guest ok = no
|  valid users = @siswa
| ....

simpan konfigurasi dengan menekan tombol ctrl X


konfigurasi samba selesai, selanjutnya bikin Grup

~:# groupadd siswa

buat direktory untuk group siswa

~:#mkdir /home/siswa

ganti group /home/siswa dari root menjadi siswa

~:#chgrp siswa /home/siswa

ganti mode direktry siswa ke mode 0770

~:#chmod 777 /home/siswa/ -R


Selanjutnya buat user,

~:#useradd mardjito
~:#smbpasswd -a mardjito
     new smb password = *******  (konfirmasi 2x)

memasukkan user mardjito ke group siswa

~:#usermod -G siswa mardjito


restart layanan samba

~:#/etc/init.d/samba restart

akses layanan samba dari PC Client dengan memberikan identitas IP Address satu kelas dengan PC Server
ex. PC Server (192.168.1.10/24) ---------- PC Client (192.168.1.11/24)

buka windows Explorer pada PC client, kolom address bar isikan text berikut ini

| \\192.168.1.10

masukkan username dan password.

note :

setiap mengakses layanan samba, maka username dan password anda akan direkam oleh system PC Client,
untuk menghapus session, ketik script berikut pada CMD

net use \\ipserver\direktory yang diakses /delete


semoga berhasil!