[{"data":1,"prerenderedAt":742},["ShallowReactive",2],{"navigation":3,"\u002Fadministrasi-server-jaringan\u002Fremote-server-management":113,"\u002Fadministrasi-server-jaringan\u002Fremote-server-management-surround":737},[4,8,54,71,92],{"title":5,"path":6,"stem":7},"Pendahuluan & Panduan LMS","\u002Fintroduction","0.introduction",{"title":9,"path":10,"stem":11,"children":12,"page":53},"Administrasi Server Jaringan","\u002Fadministrasi-server-jaringan","1.administrasi-server-jaringan",[13,17,21,25,29,33,37,41,45,49],{"title":14,"path":15,"stem":16},"Pengantar Administrasi Server Jaringan","\u002Fadministrasi-server-jaringan\u002Fintroduction","1.administrasi-server-jaringan\u002F1.introduction",{"title":18,"path":19,"stem":20},"Pengenalan & Instalasi Debian Server","\u002Fadministrasi-server-jaringan\u002Fpengenalan-dan-instalasi-debian","1.administrasi-server-jaringan\u002F2.pengenalan-dan-instalasi-debian",{"title":22,"path":23,"stem":24},"Pengenalan & Instalasi Ubuntu Server","\u002Fadministrasi-server-jaringan\u002Fpengenalan-dan-instalasi-ubuntu","1.administrasi-server-jaringan\u002F3.pengenalan-dan-instalasi-ubuntu",{"title":26,"path":27,"stem":28},"Konfigurasi IP Address (Debian & Ubuntu)","\u002Fadministrasi-server-jaringan\u002Fkonfigurasi-ip-address","1.administrasi-server-jaringan\u002F4.konfigurasi-ip-address",{"title":30,"path":31,"stem":32},"Perintah Dasar Linux CLI (Debian\u002FUbuntu)","\u002Fadministrasi-server-jaringan\u002Fperintah-dasar-linux","1.administrasi-server-jaringan\u002F5.perintah-dasar-linux",{"title":34,"path":35,"stem":36},"Remote Server Management (OpenSSH)","\u002Fadministrasi-server-jaringan\u002Fremote-server-management","1.administrasi-server-jaringan\u002F6.remote-server-management",{"title":38,"path":39,"stem":40},"DHCP Server (Kea DHCP & ISC-DHCP)","\u002Fadministrasi-server-jaringan\u002Fdhcp-server","1.administrasi-server-jaringan\u002F7.dhcp-server",{"title":42,"path":43,"stem":44},"DHCP Server Modern (Kea DHCPv4)","\u002Fadministrasi-server-jaringan\u002Fdhcp-server-kea","1.administrasi-server-jaringan\u002F7.dhcp-server-kea",{"title":46,"path":47,"stem":48},"DHCP Server Classic (ISC-DHCP)","\u002Fadministrasi-server-jaringan\u002Fdhcp-server-isc","1.administrasi-server-jaringan\u002F8.dhcp-server-isc",{"title":50,"path":51,"stem":52},"DNS Server (BIND9)","\u002Fadministrasi-server-jaringan\u002Fdns-server","1.administrasi-server-jaringan\u002F9.dns-server",false,{"title":55,"path":56,"stem":57,"children":58,"page":53},"Keamanan Jaringan","\u002Fkeamanan-jaringan","2.keamanan-jaringan",[59,63,67],{"title":60,"path":61,"stem":62},"Pengantar Keamanan Jaringan","\u002Fkeamanan-jaringan\u002Fintroduction","2.keamanan-jaringan\u002F1.introduction",{"title":64,"path":65,"stem":66},"MikroTik Firewall & NAT","\u002Fkeamanan-jaringan\u002Fmikrotik-firewall-nat","2.keamanan-jaringan\u002F2.mikrotik-firewall-nat",{"title":68,"path":69,"stem":70},"ZeroTier + MikroTik dst-nat","\u002Fkeamanan-jaringan\u002Fzerotier-mikrotik-dst-nat","2.keamanan-jaringan\u002F3.zerotier-mikrotik-dst-nat",{"title":72,"path":73,"stem":74,"children":75,"page":53},"Mata Pelajaran Pilihan","\u002Fmata-pelajaran-pilihan","3.mata-pelajaran-pilihan",[76,80,84,88],{"title":77,"path":78,"stem":79},"Pengantar Mata Pelajaran Pilihan & Materi Tambahan","\u002Fmata-pelajaran-pilihan\u002Fintroduction","3.mata-pelajaran-pilihan\u002F1.introduction",{"title":81,"path":82,"stem":83},"Docker Container Management","\u002Fmata-pelajaran-pilihan\u002Fdocker-management","3.mata-pelajaran-pilihan\u002F2.docker-management",{"title":85,"path":86,"stem":87},"Proxmox VE Setup","\u002Fmata-pelajaran-pilihan\u002Fproxmox-setup","3.mata-pelajaran-pilihan\u002F3.proxmox-setup",{"title":89,"path":90,"stem":91},"XCP-NG Setup","\u002Fmata-pelajaran-pilihan\u002Fxcpng-setup","3.mata-pelajaran-pilihan\u002F4.xcpng-setup",{"title":93,"path":94,"stem":95,"children":96,"page":53},"Uji Kompetensi","\u002Fuji-kompetensi","4.uji-kompetensi",[97,101,105,109],{"title":98,"path":99,"stem":100},"Uji Kompetensi Keahlian (UKK) Kelas 12","\u002Fuji-kompetensi\u002Fintroduction","4.uji-kompetensi\u002F1.introduction",{"title":102,"path":103,"stem":104},"UKK Paket 1 - Rancang Bangun Jaringan & Server","\u002Fuji-kompetensi\u002Fpaket-1-rancang-bangun-jaringan","4.uji-kompetensi\u002F2.paket-1-rancang-bangun-jaringan",{"title":106,"path":107,"stem":108},"UKK Paket 2 - Server & Keamanan Jaringan","\u002Fuji-kompetensi\u002Fpaket-2-server-dan-keamanan-jaringan","4.uji-kompetensi\u002F3.paket-2-server-dan-keamanan-jaringan",{"title":110,"path":111,"stem":112},"Checklist Verifikasi & Lembar Penilaian UKK","\u002Fuji-kompetensi\u002Fchecklist-dan-lembar-penilaian","4.uji-kompetensi\u002F4.checklist-dan-lembar-penilaian",{"id":114,"title":34,"body":115,"description":729,"extension":730,"links":731,"meta":732,"navigation":734,"path":35,"seo":735,"stem":36,"__hash__":736},"docs\u002F1.administrasi-server-jaringan\u002F6.remote-server-management.md",{"type":116,"value":117,"toc":708},"minimark",[118,122,134,156,159,164,180,190,192,196,201,204,246,250,261,279,282,301,303,307,311,314,326,331,343,350,354,391,393,397,403,410,425,429,438,455,459,465,474,478,484,493,507,523,528,546,548,552,555,559,672,674,678,704],[119,120,34],"h1",{"id":121},"remote-server-management-openssh",[123,124,125,129,130,133],"p",{},[126,127,128],"strong",{},"Remote Server Management"," adalah metode mengendalikan dan mengadministrasikan server dari jarak jauh tanpa harus berada di depan mesin fisik server. Pada sistem operasi Linux, standar protokol keamanan remote management yang digunakan secara global adalah ",[126,131,132],{},"SSH (Secure Shell)",".",[135,136,137],"note",{},[123,138,139,142,143,146,149,150,152,155],{},[126,140,141],{},"Jobsheet Praktikum 05:"," Administrasi Server Jaringan",[144,145],"br",{},[126,147,148],{},"Waktu Praktikum:"," 4 x 45 Menit",[144,151],{},[126,153,154],{},"Tingkat SMK:"," XI \u002F XII TJKT (TKJ)",[157,158],"hr",{},[160,161,163],"h2",{"id":162},"_1-konsep-dasar-ssh-vs-telnet","1. Konsep Dasar SSH vs Telnet",[123,165,166,167,170,171,175,176,179],{},"Sebelum adanya SSH, pengelola server menggunakan protokol ",[126,168,169],{},"Telnet",". Namun Telnet bersifat ",[172,173,174],"em",{},"unencrypted"," (plain text) sehingga data password dan komando dapat disadap (",[172,177,178],{},"eavesdropping",").",[123,181,182,185,186,189],{},[126,183,184],{},"SSH (Port Default 22)"," menggunakan enkripsi ",[172,187,188],{},"kriptografi kunci publik"," yang menjamin keamanan data selama transit di jaringan.",[157,191],{},[160,193,195],{"id":194},"_2-instalasi-pengujian-openssh-server","2. Instalasi & Pengujian OpenSSH Server",[197,198,200],"h3",{"id":199},"a-instalasi-paket-openssh-server","A. Instalasi Paket OpenSSH Server",[123,202,203],{},"Jalankan perintah berikut pada server Debian\u002FUbuntu:",[205,206,211],"pre",{"className":207,"code":208,"language":209,"meta":210,"style":210},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","sudo apt update\nsudo apt install openssh-server -y\n","bash","",[212,213,214,230],"code",{"__ignoreMap":210},[215,216,219,223,227],"span",{"class":217,"line":218},"line",1,[215,220,222],{"class":221},"sBMFI","sudo",[215,224,226],{"class":225},"sfazB"," apt",[215,228,229],{"class":225}," update\n",[215,231,233,235,237,240,243],{"class":217,"line":232},2,[215,234,222],{"class":221},[215,236,226],{"class":225},[215,238,239],{"class":225}," install",[215,241,242],{"class":225}," openssh-server",[215,244,245],{"class":225}," -y\n",[197,247,249],{"id":248},"b-verifikasi-status-service-ssh","B. Verifikasi Status Service SSH",[123,251,252,253,256,257,260],{},"Memastikan service ",[212,254,255],{},"ssh"," aktif dan berjalan (",[172,258,259],{},"running","):",[205,262,264],{"className":207,"code":263,"language":209,"meta":210,"style":210},"sudo systemctl status ssh\n",[212,265,266],{"__ignoreMap":210},[215,267,268,270,273,276],{"class":217,"line":218},[215,269,222],{"class":221},[215,271,272],{"class":225}," systemctl",[215,274,275],{"class":225}," status",[215,277,278],{"class":225}," ssh\n",[123,280,281],{},"Jika service belum aktif, jalankan:",[205,283,285],{"className":207,"code":284,"language":209,"meta":210,"style":210},"sudo systemctl enable --now ssh\n",[212,286,287],{"__ignoreMap":210},[215,288,289,291,293,296,299],{"class":217,"line":218},[215,290,222],{"class":221},[215,292,272],{"class":225},[215,294,295],{"class":225}," enable",[215,297,298],{"class":225}," --now",[215,300,278],{"class":225},[157,302],{},[160,304,306],{"id":305},"_3-remote-access-dari-client-machine","3. Remote Access dari Client Machine",[197,308,310],{"id":309},"a-melalui-terminal-linux-macos-windows-powershell","A. Melalui Terminal (Linux \u002F macOS \u002F Windows PowerShell)",[123,312,313],{},"Format perintah remote SSH:",[205,315,317],{"className":207,"code":316,"language":209,"meta":210,"style":210},"ssh username@ip_address_server\n",[212,318,319],{"__ignoreMap":210},[215,320,321,323],{"class":217,"line":218},[215,322,255],{"class":221},[215,324,325],{"class":225}," username@ip_address_server\n",[123,327,328],{},[172,329,330],{},"Contoh:",[205,332,334],{"className":207,"code":333,"language":209,"meta":210,"style":210},"ssh admin-tkj@192.168.100.10\n",[212,335,336],{"__ignoreMap":210},[215,337,338,340],{"class":217,"line":218},[215,339,255],{"class":221},[215,341,342],{"class":225}," admin-tkj@192.168.100.10\n",[123,344,345,346,349],{},"Ketik ",[212,347,348],{},"yes"," saat konfirmasi Fingerprint Key pertama kali, kemudian masukkan password user server.",[197,351,353],{"id":352},"b-melalui-aplikasi-client-putty-windows","B. Melalui Aplikasi Client PuTTY (Windows)",[355,356,357,364,374,384],"ol",{},[358,359,360,361,133],"li",{},"Buka aplikasi ",[126,362,363],{},"PuTTY",[358,365,366,367,370,371,133],{},"Isikan ",[126,368,369],{},"Host Name (or IP address)",": ",[212,372,373],{},"192.168.100.10",[358,375,376,377,380,381,179],{},"Port: ",[212,378,379],{},"22"," (Connection type: ",[212,382,383],{},"SSH",[358,385,386,387,390],{},"Klik ",[126,388,389],{},"Open",", lalu masukkan username dan password saat prompt muncul.",[157,392],{},[160,394,396],{"id":395},"_4-ssh-hardening-pengamanan-server-remote","4. SSH Hardening (Pengamanan Server Remote)",[123,398,399,400,133],{},"File konfigurasi utama OpenSSH Server terletak di ",[212,401,402],{},"\u002Fetc\u002Fssh\u002Fsshd_config",[123,404,405,406,409],{},"Buka file konfigurasi SSH dengan ",[212,407,408],{},"nano",":",[205,411,413],{"className":207,"code":412,"language":209,"meta":210,"style":210},"sudo nano \u002Fetc\u002Fssh\u002Fsshd_config\n",[212,414,415],{"__ignoreMap":210},[215,416,417,419,422],{"class":217,"line":218},[215,418,222],{"class":221},[215,420,421],{"class":225}," nano",[215,423,424],{"class":225}," \u002Fetc\u002Fssh\u002Fsshd_config\n",[197,426,428],{"id":427},"a-mengubah-port-default-ssh-port-security","A. Mengubah Port Default SSH (Port Security)",[123,430,431,432,434,435,260],{},"Secara default SSH berjalan di Port ",[212,433,379],{}," yang sering menjadi target bot brute-force. Ubah ke port kustom (misal ",[212,436,437],{},"2222",[205,439,443],{"className":440,"code":441,"language":442,"meta":210,"style":210},"language-ini shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","# Ganti Port 22\nPort 2222\n","ini",[212,444,445,450],{"__ignoreMap":210},[215,446,447],{"class":217,"line":218},[215,448,449],{},"# Ganti Port 22\n",[215,451,452],{"class":217,"line":232},[215,453,454],{},"Port 2222\n",[197,456,458],{"id":457},"b-mematikan-root-login-direct","B. Mematikan Root Login Direct",[123,460,461,462,409],{},"Mencegah hacker mencoba login langsung sebagai user ",[212,463,464],{},"root",[205,466,468],{"className":440,"code":467,"language":442,"meta":210,"style":210},"PermitRootLogin no\n",[212,469,470],{"__ignoreMap":210},[215,471,472],{"class":217,"line":218},[215,473,467],{},[197,475,477],{"id":476},"c-pembatasan-user-yang-boleh-remote","C. Pembatasan User yang Boleh Remote",[123,479,480,481,260],{},"Hanya mengizinkan user tertentu (misal: ",[212,482,483],{},"admin-tkj",[205,485,487],{"className":440,"code":486,"language":442,"meta":210,"style":210},"AllowUsers admin-tkj\n",[212,488,489],{"__ignoreMap":210},[215,490,491],{"class":217,"line":218},[215,492,486],{},[123,494,495,496,499,500,503,504,409],{},"Simpan file (",[212,497,498],{},"Ctrl + O",", ",[212,501,502],{},"Enter","), lalu ",[126,505,506],{},"restart service SSH",[205,508,510],{"className":207,"code":509,"language":209,"meta":210,"style":210},"sudo systemctl restart ssh\n",[212,511,512],{"__ignoreMap":210},[215,513,514,516,518,521],{"class":217,"line":218},[215,515,222],{"class":221},[215,517,272],{"class":225},[215,519,520],{"class":225}," restart",[215,522,278],{"class":225},[123,524,525],{},[172,526,527],{},"Uji coba remote menggunakan port baru:",[205,529,531],{"className":207,"code":530,"language":209,"meta":210,"style":210},"ssh -p 2222 admin-tkj@192.168.100.10\n",[212,532,533],{"__ignoreMap":210},[215,534,535,537,540,544],{"class":217,"line":218},[215,536,255],{"class":221},[215,538,539],{"class":225}," -p",[215,541,543],{"class":542},"sbssI"," 2222",[215,545,342],{"class":225},[157,547],{},[160,549,551],{"id":550},"_5-remote-login-tanpa-password-ssh-key-based-authentication","5. Remote Login Tanpa Password (SSH Key-Based Authentication)",[123,553,554],{},"Otentikasi kunci publik jauh lebih aman dibanding otentikasi password.",[197,556,558],{"id":557},"langkah-langkah-pembuatan-ssh-key","Langkah-langkah Pembuatan SSH Key:",[560,561,562,566,569,598,604,608,614,629,633,636,650,653,657,663],"steps",{},[197,563,565],{"id":564},"generate-key-pair-di-laptop-client","Generate Key Pair di Laptop Client",[123,567,568],{},"Jalankan perintah berikut di Terminal Laptop Client (Bukan di Server!):",[205,570,572],{"className":207,"code":571,"language":209,"meta":210,"style":210},"ssh-keygen -t ed25519 -C \"laptop-siswa-tkj\"\n",[212,573,574],{"__ignoreMap":210},[215,575,576,579,582,585,588,592,595],{"class":217,"line":218},[215,577,578],{"class":221},"ssh-keygen",[215,580,581],{"class":225}," -t",[215,583,584],{"class":225}," ed25519",[215,586,587],{"class":225}," -C",[215,589,591],{"class":590},"sMK4o"," \"",[215,593,594],{"class":225},"laptop-siswa-tkj",[215,596,597],{"class":590},"\"\n",[123,599,600,601,603],{},"Tekan ",[212,602,502],{}," untuk lokasi default dan passphrase.",[197,605,607],{"id":606},"salin-public-key-ke-server-target","Salin Public Key ke Server Target",[123,609,610,611,409],{},"Gunakan utilitas ",[212,612,613],{},"ssh-copy-id",[205,615,617],{"className":207,"code":616,"language":209,"meta":210,"style":210},"ssh-copy-id -p 2222 admin-tkj@192.168.100.10\n",[212,618,619],{"__ignoreMap":210},[215,620,621,623,625,627],{"class":217,"line":218},[215,622,613],{"class":221},[215,624,539],{"class":225},[215,626,543],{"class":542},[215,628,342],{"class":225},[197,630,632],{"id":631},"uji-coba-login-tanpa-password","Uji Coba Login Tanpa Password",[123,634,635],{},"Cobalah remote kembali:",[205,637,638],{"className":207,"code":530,"language":209,"meta":210,"style":210},[212,639,640],{"__ignoreMap":210},[215,641,642,644,646,648],{"class":217,"line":218},[215,643,255],{"class":221},[215,645,539],{"class":225},[215,647,543],{"class":542},[215,649,342],{"class":225},[123,651,652],{},"Jika sukses, sistem akan langsung dapat diakses tanpa meminta password lagi.",[197,654,656],{"id":655},"disable-password-authentication-opsional-security-high","Disable Password Authentication (Opsional Security High)",[123,658,659,660,662],{},"Buka file ",[212,661,402],{}," pada server, ubah:",[205,664,666],{"className":440,"code":665,"language":442,"meta":210,"style":210},"PasswordAuthentication no\n",[212,667,668],{"__ignoreMap":210},[215,669,670],{"class":217,"line":218},[215,671,665],{},[157,673],{},[160,675,677],{"id":676},"_6-tugas-laporan-praktikum-siswa","6. Tugas & Laporan Praktikum Siswa",[679,680,682],"callout",{"icon":681},"i-lucide-check-square",[355,683,684,692,698],{},[358,685,686,687,133],{},"Ubah port SSH server Debian\u002FUbuntu Anda menjadi ",[126,688,689],{},[212,690,691],{},"Port 5022",[358,693,694,695,133],{},"Lakukan pengujian koneksi dari PuTTY \u002F Terminal Client menggunakan Port ",[212,696,697],{},"5022",[358,699,700,701,133],{},"Tunjukkan log koneksi masuk pada server menggunakan perintah ",[212,702,703],{},"tail -f \u002Fvar\u002Flog\u002Fauth.log",[705,706,707],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}",{"title":210,"searchDepth":218,"depth":232,"links":709},[710,711,716,720,725,728],{"id":162,"depth":232,"text":163},{"id":194,"depth":232,"text":195,"children":712},[713,715],{"id":199,"depth":714,"text":200},3,{"id":248,"depth":714,"text":249},{"id":305,"depth":232,"text":306,"children":717},[718,719],{"id":309,"depth":714,"text":310},{"id":352,"depth":714,"text":353},{"id":395,"depth":232,"text":396,"children":721},[722,723,724],{"id":427,"depth":714,"text":428},{"id":457,"depth":714,"text":458},{"id":476,"depth":714,"text":477},{"id":550,"depth":232,"text":551,"children":726},[727],{"id":557,"depth":714,"text":558},{"id":676,"depth":232,"text":677},"Panduan praktikum konfigurasi Remote Server menggunakan OpenSSH-Server, otentikasi SSH Key, ubah port default, dan security hardening pada Debian\u002FUbuntu.","md",null,{"icon":733},"i-lucide-lock",true,{"title":34,"description":729},"EmjwESF6IOxbVHi6VPLjfz43O7Ipcr2oVW38IJXT2Fo",[738,740],{"title":30,"path":31,"stem":32,"description":739,"children":-1},"Panduan praktikum baris perintah dasar (CLI Linux) untuk pengelolaan file, direktori, hak akses, dan manajemen paket pada Debian\u002FUbuntu Server.",{"title":38,"path":39,"stem":40,"description":741,"children":-1},"Panduan praktikum instalasi dan konfigurasi DHCP Server modern menggunakan Kea DHCP (kea-dhcp4-server) dan ISC DHCP di Debian 12 & Ubuntu Server. Mencakup proses DORA, konfigurasi JSON, pool scope, static lease reservation, monitoring lease CSV, dan troubleshooting.",1789020724484]