[{"data":1,"prerenderedAt":942},["ShallowReactive",2],{"navigation":3,"\u002Fuji-kompetensi\u002Fpaket-2-server-dan-keamanan-jaringan":113,"\u002Fuji-kompetensi\u002Fpaket-2-server-dan-keamanan-jaringan-surround":937},[4,8,54,71,92],{"title":5,"path":6,"stem":7},"Pendahuluan & Panduan LMS","\u002Fintroduction","0.introduction",{"title":9,"path":10,"stem":11,"children":12,"page":53},"Administrasi Server Jaringan","\u002Fadministrasi-server-jaringan","1.administrasi-server-jaringan",[13,17,21,25,29,33,37,41,45,49],{"title":14,"path":15,"stem":16},"Pengantar Administrasi Server Jaringan","\u002Fadministrasi-server-jaringan\u002Fintroduction","1.administrasi-server-jaringan\u002F1.introduction",{"title":18,"path":19,"stem":20},"Pengenalan & Instalasi Debian Server","\u002Fadministrasi-server-jaringan\u002Fpengenalan-dan-instalasi-debian","1.administrasi-server-jaringan\u002F2.pengenalan-dan-instalasi-debian",{"title":22,"path":23,"stem":24},"Pengenalan & Instalasi Ubuntu Server","\u002Fadministrasi-server-jaringan\u002Fpengenalan-dan-instalasi-ubuntu","1.administrasi-server-jaringan\u002F3.pengenalan-dan-instalasi-ubuntu",{"title":26,"path":27,"stem":28},"Konfigurasi IP Address (Debian & Ubuntu)","\u002Fadministrasi-server-jaringan\u002Fkonfigurasi-ip-address","1.administrasi-server-jaringan\u002F4.konfigurasi-ip-address",{"title":30,"path":31,"stem":32},"Perintah Dasar Linux CLI (Debian\u002FUbuntu)","\u002Fadministrasi-server-jaringan\u002Fperintah-dasar-linux","1.administrasi-server-jaringan\u002F5.perintah-dasar-linux",{"title":34,"path":35,"stem":36},"Remote Server Management (OpenSSH)","\u002Fadministrasi-server-jaringan\u002Fremote-server-management","1.administrasi-server-jaringan\u002F6.remote-server-management",{"title":38,"path":39,"stem":40},"DHCP Server (Kea DHCP & ISC-DHCP)","\u002Fadministrasi-server-jaringan\u002Fdhcp-server","1.administrasi-server-jaringan\u002F7.dhcp-server",{"title":42,"path":43,"stem":44},"DHCP Server Modern (Kea DHCPv4)","\u002Fadministrasi-server-jaringan\u002Fdhcp-server-kea","1.administrasi-server-jaringan\u002F7.dhcp-server-kea",{"title":46,"path":47,"stem":48},"DHCP Server Classic (ISC-DHCP)","\u002Fadministrasi-server-jaringan\u002Fdhcp-server-isc","1.administrasi-server-jaringan\u002F8.dhcp-server-isc",{"title":50,"path":51,"stem":52},"DNS Server (BIND9)","\u002Fadministrasi-server-jaringan\u002Fdns-server","1.administrasi-server-jaringan\u002F9.dns-server",false,{"title":55,"path":56,"stem":57,"children":58,"page":53},"Keamanan Jaringan","\u002Fkeamanan-jaringan","2.keamanan-jaringan",[59,63,67],{"title":60,"path":61,"stem":62},"Pengantar Keamanan Jaringan","\u002Fkeamanan-jaringan\u002Fintroduction","2.keamanan-jaringan\u002F1.introduction",{"title":64,"path":65,"stem":66},"MikroTik Firewall & NAT","\u002Fkeamanan-jaringan\u002Fmikrotik-firewall-nat","2.keamanan-jaringan\u002F2.mikrotik-firewall-nat",{"title":68,"path":69,"stem":70},"ZeroTier + MikroTik dst-nat","\u002Fkeamanan-jaringan\u002Fzerotier-mikrotik-dst-nat","2.keamanan-jaringan\u002F3.zerotier-mikrotik-dst-nat",{"title":72,"path":73,"stem":74,"children":75,"page":53},"Mata Pelajaran Pilihan","\u002Fmata-pelajaran-pilihan","3.mata-pelajaran-pilihan",[76,80,84,88],{"title":77,"path":78,"stem":79},"Pengantar Mata Pelajaran Pilihan & Materi Tambahan","\u002Fmata-pelajaran-pilihan\u002Fintroduction","3.mata-pelajaran-pilihan\u002F1.introduction",{"title":81,"path":82,"stem":83},"Docker Container Management","\u002Fmata-pelajaran-pilihan\u002Fdocker-management","3.mata-pelajaran-pilihan\u002F2.docker-management",{"title":85,"path":86,"stem":87},"Proxmox VE Setup","\u002Fmata-pelajaran-pilihan\u002Fproxmox-setup","3.mata-pelajaran-pilihan\u002F3.proxmox-setup",{"title":89,"path":90,"stem":91},"XCP-NG Setup","\u002Fmata-pelajaran-pilihan\u002Fxcpng-setup","3.mata-pelajaran-pilihan\u002F4.xcpng-setup",{"title":93,"path":94,"stem":95,"children":96,"page":53},"Uji Kompetensi","\u002Fuji-kompetensi","4.uji-kompetensi",[97,101,105,109],{"title":98,"path":99,"stem":100},"Uji Kompetensi Keahlian (UKK) Kelas 12","\u002Fuji-kompetensi\u002Fintroduction","4.uji-kompetensi\u002F1.introduction",{"title":102,"path":103,"stem":104},"UKK Paket 1 - Rancang Bangun Jaringan & Server","\u002Fuji-kompetensi\u002Fpaket-1-rancang-bangun-jaringan","4.uji-kompetensi\u002F2.paket-1-rancang-bangun-jaringan",{"title":106,"path":107,"stem":108},"UKK Paket 2 - Server & Keamanan Jaringan","\u002Fuji-kompetensi\u002Fpaket-2-server-dan-keamanan-jaringan","4.uji-kompetensi\u002F3.paket-2-server-dan-keamanan-jaringan",{"title":110,"path":111,"stem":112},"Checklist Verifikasi & Lembar Penilaian UKK","\u002Fuji-kompetensi\u002Fchecklist-dan-lembar-penilaian","4.uji-kompetensi\u002F4.checklist-dan-lembar-penilaian",{"id":114,"title":106,"body":115,"description":930,"extension":931,"links":932,"meta":933,"navigation":402,"path":107,"seo":935,"stem":108,"__hash__":936},"docs\u002F4.uji-kompetensi\u002F3.paket-2-server-dan-keamanan-jaringan.md",{"type":116,"value":117,"toc":921},"minimark",[118,123,140,162,165,170,181,183,187,192,292,296,354,356,360,788,790,794,917],[119,120,122],"h1",{"id":121},"ukk-paket-2-server-keamanan-jaringan","UKK Paket 2: Server & Keamanan Jaringan",[124,125,126,127,131,132,135,136,139],"p",{},"Modul ini berfokus pada ",[128,129,130],"strong",{},"Soal UKK Paket 2"," yang menitikberatkan pada aspek ",[128,133,134],{},"Keamanan Jaringan (Network Security)",", pemisahan segmen jaringan menggunakan ",[128,137,138],{},"VLAN (Virtual Local Area Network)",", filtering konten web terlarang, serta pengamanan akses remote server.",[141,142,143],"note",{},[124,144,145,148,149,152,155,156,158,161],{},[128,146,147],{},"Nama Paket:"," UKK Paket 2 — Administrasi Server & Keamanan Jaringan Enterprise",[150,151],"br",{},[128,153,154],{},"Alokasi Waktu:"," 3 Jam (180 Menit)",[150,157],{},[128,159,160],{},"Tingkat:"," Kelas XII SMK Konsentrasi Keahlian TJKT \u002F TKJ",[163,164],"hr",{},[166,167,169],"h2",{"id":168},"topologi-vlan-security-hardening","📐 Topologi VLAN & Security Hardening",[171,172,177],"pre",{"className":173,"code":175,"language":176},[174],"language-text","                      [ ISP \u002F Internet Gateway ]\n                                  │\n                                  │ (ether1 - WAN)\n                       ┌──────────┴──────────┐\n                       │ Router MikroTik     │\n                       │ (VLAN Trunking)     │\n                       └──────────┬──────────┘\n                                  │ (ether2 - Trunk Port VLAN 10,20)\n                       ┌──────────┴──────────┐\n                       │ Switch Managed \u002F    │\n                       │ Smart Switch        │\n                       └────┬────────────┬───┘\n     (Access Port VLAN 10)  │            │ (Access Port VLAN 20)\n                            │            │\n             ┌──────────────┴──┐      ┌──┴──────────────┐\n             │ VLAN 10 (GURU)  │      │ VLAN 20 (SISWA) │\n             │ 192.168.10.0\u002F24 │      │ 192.168.20.0\u002F24 │\n             └─────────────────┘      └─────────────────┘\n","text",[178,179,175],"code",{"__ignoreMap":180},"",[163,182],{},[166,184,186],{"id":185},"spesifikasi-kebutuhan-parameter-konfigurasi","📋 Spesifikasi Kebutuhan & Parameter Konfigurasi",[188,189,191],"h3",{"id":190},"_1-router-mikrotik-security-vlan","1. Router MikroTik Security & VLAN:",[193,194,195,202,234,260],"ul",{},[196,197,198,201],"li",{},[128,199,200],{},"WAN Interface (ether1):"," IP DHCP Client dari ISP.",[196,203,204,207],{},[128,205,206],{},"Interface Trunk (ether2):",[193,208,209,223],{},[196,210,211,214,215,218,219,222],{},[128,212,213],{},"VLAN 10 (GURU):"," VLAN ID ",[178,216,217],{},"10",", Network IP ",[178,220,221],{},"192.168.10.1\u002F24",".",[196,224,225,214,228,218,231,222],{},[128,226,227],{},"VLAN 20 (SISWA):",[178,229,230],{},"20",[178,232,233],{},"192.168.20.1\u002F24",[196,235,236,239],{},[128,237,238],{},"DHCP Server:",[193,240,241,251],{},[196,242,243,244,247,248,222],{},"VLAN 10 (GURU): Pool IP ",[178,245,246],{},"192.168.10.10"," - ",[178,249,250],{},"192.168.10.50",[196,252,253,254,247,257,222],{},"VLAN 20 (SISWA): Pool IP ",[178,255,256],{},"192.168.20.10",[178,258,259],{},"192.168.20.50",[196,261,262,265],{},[128,263,264],{},"Firewall & Site Blocking (Layer 7 \u002F Web Proxy):",[193,266,267,274,285],{},[196,268,269,270,273],{},"Blokir Akses Website: Domain ",[178,271,272],{},"linux.org"," (atau website yang ditentukan penguji).",[196,275,276,277,280,281,284],{},"Blokir Ekstensi File Download: File ekstensi ",[178,278,279],{},".mp3"," dan ",[178,282,283],{},".mkv"," pada jam sekolah.",[196,286,287,288,291],{},"Logging Rules: Catat seluruh log percobaan akses situs terlarang ke syslog (",[178,289,290],{},"prefix=BLOKIR-AKSES",").",[188,293,295],{"id":294},"_2-linux-server-security-hardening-debian-12","2. Linux Server Security Hardening (Debian 12):",[193,297,298,308,336],{},[196,299,300,303,304,307],{},[128,301,302],{},"IP Address Statis:"," ",[178,305,306],{},"192.168.10.100\u002F24"," (Segmen VLAN GURU).",[196,309,310,313],{},[128,311,312],{},"SSH Hardening (OpenSSH Server):",[193,314,315,327,333],{},[196,316,317,318,321,322,222],{},"Ubah Port Default SSH dari ",[178,319,320],{},"22"," ➔ ",[128,323,324],{},[178,325,326],{},"Port 5022",[196,328,329,330,291],{},"Matikan Root Login Langsung (",[178,331,332],{},"PermitRootLogin no",[196,334,335],{},"Otentikasi Berbasis SSH Key Pair (Public Key Auth).",[196,337,338,341],{},[128,339,340],{},"Firewall Server (UFW \u002F Iptables):",[193,342,343],{},[196,344,345,346,349,350,353],{},"Hanya mengizinkan port ",[178,347,348],{},"5022"," (SSH) dan port ",[178,351,352],{},"80\u002F443"," (HTTP\u002FHTTPS). Blokir port lainnya.",[163,355],{},[166,357,359],{"id":358},"️-langkah-langkah-eksekusi-praktikum","🛠️ Langkah-Langkah Eksekusi Praktikum",[361,362,363,367,370,445,449,452,505,509,512,541,545,552,572,575,620,623,641,645,648],"steps",{},[188,364,366],{"id":365},"step-1-konfigurasi-interface-vlan-di-mikrotik","Step 1: Konfigurasi Interface VLAN di MikroTik",[124,368,369],{},"Buka Terminal Winbox pada Router, jalankan:",[171,371,375],{"className":372,"code":373,"language":374,"meta":180,"style":180},"language-routeros shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","# 1. Menambahkan Interface VLAN pada ether2\n\u002Finterface vlan add name=vlan10-GURU vlan-id=10 interface=ether2\n\u002Finterface vlan add name=vlan20-SISWA vlan-id=20 interface=ether2\n\n# 2. Memberi Alamat IP pada Interface VLAN\n\u002Fip address add address=192.168.10.1\u002F24 interface=vlan10-GURU\n\u002Fip address add address=192.168.20.1\u002F24 interface=vlan20-SISWA\n\n# 3. Membuat DHCP Server untuk Masing-Masing VLAN\n\u002Fip dhcp-server setup\n# Ikuti wizard wizard interface vlan10-GURU & vlan20-SISWA\n","routeros",[178,376,377,385,391,397,404,410,416,422,427,433,439],{"__ignoreMap":180},[378,379,382],"span",{"class":380,"line":381},"line",1,[378,383,384],{},"# 1. Menambahkan Interface VLAN pada ether2\n",[378,386,388],{"class":380,"line":387},2,[378,389,390],{},"\u002Finterface vlan add name=vlan10-GURU vlan-id=10 interface=ether2\n",[378,392,394],{"class":380,"line":393},3,[378,395,396],{},"\u002Finterface vlan add name=vlan20-SISWA vlan-id=20 interface=ether2\n",[378,398,400],{"class":380,"line":399},4,[378,401,403],{"emptyLinePlaceholder":402},true,"\n",[378,405,407],{"class":380,"line":406},5,[378,408,409],{},"# 2. Memberi Alamat IP pada Interface VLAN\n",[378,411,413],{"class":380,"line":412},6,[378,414,415],{},"\u002Fip address add address=192.168.10.1\u002F24 interface=vlan10-GURU\n",[378,417,419],{"class":380,"line":418},7,[378,420,421],{},"\u002Fip address add address=192.168.20.1\u002F24 interface=vlan20-SISWA\n",[378,423,425],{"class":380,"line":424},8,[378,426,403],{"emptyLinePlaceholder":402},[378,428,430],{"class":380,"line":429},9,[378,431,432],{},"# 3. Membuat DHCP Server untuk Masing-Masing VLAN\n",[378,434,436],{"class":380,"line":435},10,[378,437,438],{},"\u002Fip dhcp-server setup\n",[378,440,442],{"class":380,"line":441},11,[378,443,444],{},"# Ikuti wizard wizard interface vlan10-GURU & vlan20-SISWA\n",[188,446,448],{"id":447},"step-2-konfigurasi-web-proxy-site-file-blocking","Step 2: Konfigurasi Web Proxy Site & File Blocking",[124,450,451],{},"Aktifkan service Web Proxy pada MikroTik:",[171,453,455],{"className":372,"code":454,"language":374,"meta":180,"style":180},"# Enable Web Proxy\n\u002Fip proxy set enabled=yes port=8080 anonymous=yes\n\n# Redirect Traffic HTTP ke Web Proxy (Transparent Proxy)\n\u002Fip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=8080\n\n# Web Proxy Access Rules (Blokir Domain & File)\n\u002Fip proxy access add dst-host=*linux.org* action=deny\n\u002Fip proxy access add path=*.mp3 action=deny\n\u002Fip proxy access add path=*.mkv action=deny\n",[178,456,457,462,467,471,476,481,485,490,495,500],{"__ignoreMap":180},[378,458,459],{"class":380,"line":381},[378,460,461],{},"# Enable Web Proxy\n",[378,463,464],{"class":380,"line":387},[378,465,466],{},"\u002Fip proxy set enabled=yes port=8080 anonymous=yes\n",[378,468,469],{"class":380,"line":393},[378,470,403],{"emptyLinePlaceholder":402},[378,472,473],{"class":380,"line":399},[378,474,475],{},"# Redirect Traffic HTTP ke Web Proxy (Transparent Proxy)\n",[378,477,478],{"class":380,"line":406},[378,479,480],{},"\u002Fip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=8080\n",[378,482,483],{"class":380,"line":412},[378,484,403],{"emptyLinePlaceholder":402},[378,486,487],{"class":380,"line":418},[378,488,489],{},"# Web Proxy Access Rules (Blokir Domain & File)\n",[378,491,492],{"class":380,"line":424},[378,493,494],{},"\u002Fip proxy access add dst-host=*linux.org* action=deny\n",[378,496,497],{"class":380,"line":429},[378,498,499],{},"\u002Fip proxy access add path=*.mp3 action=deny\n",[378,501,502],{"class":380,"line":435},[378,503,504],{},"\u002Fip proxy access add path=*.mkv action=deny\n",[188,506,508],{"id":507},"step-3-layer-7-protocol-firewall-filtering","Step 3: Layer 7 Protocol Firewall Filtering",[124,510,511],{},"Jika ingin memblokir website HTTPS menggunakan Layer 7 Protocol:",[171,513,515],{"className":372,"code":514,"language":374,"meta":180,"style":180},"# Buat L7 Pattern RegEx\n\u002Fip firewall layer7-protocol add name=block-sites regexp=\"^.*(linux.org|dwnload.com).*\\$\"\n\n# Tambahkan Filter Rule Drop\n\u002Fip firewall filter add chain=forward layer7-protocol=block-sites action=drop comment=\"Drop Situs Terlarang UKK\"\n",[178,516,517,522,527,531,536],{"__ignoreMap":180},[378,518,519],{"class":380,"line":381},[378,520,521],{},"# Buat L7 Pattern RegEx\n",[378,523,524],{"class":380,"line":387},[378,525,526],{},"\u002Fip firewall layer7-protocol add name=block-sites regexp=\"^.*(linux.org|dwnload.com).*\\$\"\n",[378,528,529],{"class":380,"line":393},[378,530,403],{"emptyLinePlaceholder":402},[378,532,533],{"class":380,"line":399},[378,534,535],{},"# Tambahkan Filter Rule Drop\n",[378,537,538],{"class":380,"line":406},[378,539,540],{},"\u002Fip firewall filter add chain=forward layer7-protocol=block-sites action=drop comment=\"Drop Situs Terlarang UKK\"\n",[188,542,544],{"id":543},"step-4-ssh-hardening-pada-linux-server-debian","Step 4: SSH Hardening pada Linux Server (Debian)",[124,546,547,548,551],{},"Buka terminal Debian Server, edit file ",[178,549,550],{},"\u002Fetc\u002Fssh\u002Fsshd_config",":",[171,553,557],{"className":554,"code":555,"language":556,"meta":180,"style":180},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","sudo nano \u002Fetc\u002Fssh\u002Fsshd_config\n","bash",[178,558,559],{"__ignoreMap":180},[378,560,561,565,569],{"class":380,"line":381},[378,562,564],{"class":563},"sBMFI","sudo",[378,566,568],{"class":567},"sfazB"," nano",[378,570,571],{"class":567}," \u002Fetc\u002Fssh\u002Fsshd_config\n",[124,573,574],{},"Lakukan modifikasi baris berikut:",[171,576,580],{"className":577,"code":578,"language":579,"meta":180,"style":180},"language-ini shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","# Ubah Port Default\nPort 5022\n\n# Matikan Root Direct Login\nPermitRootLogin no\n\n# Hanya Izinkan User Administrator\nAllowUsers admin-tkj\n","ini",[178,581,582,587,592,596,601,606,610,615],{"__ignoreMap":180},[378,583,584],{"class":380,"line":381},[378,585,586],{},"# Ubah Port Default\n",[378,588,589],{"class":380,"line":387},[378,590,591],{},"Port 5022\n",[378,593,594],{"class":380,"line":393},[378,595,403],{"emptyLinePlaceholder":402},[378,597,598],{"class":380,"line":399},[378,599,600],{},"# Matikan Root Direct Login\n",[378,602,603],{"class":380,"line":406},[378,604,605],{},"PermitRootLogin no\n",[378,607,608],{"class":380,"line":412},[378,609,403],{"emptyLinePlaceholder":402},[378,611,612],{"class":380,"line":418},[378,613,614],{},"# Hanya Izinkan User Administrator\n",[378,616,617],{"class":380,"line":424},[378,618,619],{},"AllowUsers admin-tkj\n",[124,621,622],{},"Simpan file, lalu restart service SSH:",[171,624,626],{"className":554,"code":625,"language":556,"meta":180,"style":180},"sudo systemctl restart ssh\n",[178,627,628],{"__ignoreMap":180},[378,629,630,632,635,638],{"class":380,"line":381},[378,631,564],{"class":563},[378,633,634],{"class":567}," systemctl",[378,636,637],{"class":567}," restart",[378,639,640],{"class":567}," ssh\n",[188,642,644],{"id":643},"step-5-setting-ufw-firewall-pada-server","Step 5: Setting UFW Firewall pada Server",[124,646,647],{},"Aktifkan Uncomplicated Firewall (UFW) di Debian Server:",[171,649,651],{"className":554,"code":650,"language":556,"meta":180,"style":180},"# Instal UFW jika belum terpasang\nsudo apt update && sudo apt install ufw -y\n\n# Set Default Policy Drop Incoming\nsudo ufw default deny incoming\nsudo ufw default allow outgoing\n\n# Izinkan Port SSH Baru & Web Server\nsudo ufw allow 5022\u002Ftcp\nsudo ufw allow 80\u002Ftcp\nsudo ufw allow 443\u002Ftcp\n\n# Aktifkan Firewall\nsudo ufw enable\n",[178,652,653,659,687,691,696,711,725,729,734,745,756,767,772,778],{"__ignoreMap":180},[378,654,655],{"class":380,"line":381},[378,656,658],{"class":657},"sHwdD","# Instal UFW jika belum terpasang\n",[378,660,661,663,666,669,673,676,678,681,684],{"class":380,"line":387},[378,662,564],{"class":563},[378,664,665],{"class":567}," apt",[378,667,668],{"class":567}," update",[378,670,672],{"class":671},"sMK4o"," &&",[378,674,675],{"class":563}," sudo",[378,677,665],{"class":567},[378,679,680],{"class":567}," install",[378,682,683],{"class":567}," ufw",[378,685,686],{"class":567}," -y\n",[378,688,689],{"class":380,"line":393},[378,690,403],{"emptyLinePlaceholder":402},[378,692,693],{"class":380,"line":399},[378,694,695],{"class":657},"# Set Default Policy Drop Incoming\n",[378,697,698,700,702,705,708],{"class":380,"line":406},[378,699,564],{"class":563},[378,701,683],{"class":567},[378,703,704],{"class":567}," default",[378,706,707],{"class":567}," deny",[378,709,710],{"class":567}," incoming\n",[378,712,713,715,717,719,722],{"class":380,"line":412},[378,714,564],{"class":563},[378,716,683],{"class":567},[378,718,704],{"class":567},[378,720,721],{"class":567}," allow",[378,723,724],{"class":567}," outgoing\n",[378,726,727],{"class":380,"line":418},[378,728,403],{"emptyLinePlaceholder":402},[378,730,731],{"class":380,"line":424},[378,732,733],{"class":657},"# Izinkan Port SSH Baru & Web Server\n",[378,735,736,738,740,742],{"class":380,"line":429},[378,737,564],{"class":563},[378,739,683],{"class":567},[378,741,721],{"class":567},[378,743,744],{"class":567}," 5022\u002Ftcp\n",[378,746,747,749,751,753],{"class":380,"line":435},[378,748,564],{"class":563},[378,750,683],{"class":567},[378,752,721],{"class":567},[378,754,755],{"class":567}," 80\u002Ftcp\n",[378,757,758,760,762,764],{"class":380,"line":441},[378,759,564],{"class":563},[378,761,683],{"class":567},[378,763,721],{"class":567},[378,765,766],{"class":567}," 443\u002Ftcp\n",[378,768,770],{"class":380,"line":769},12,[378,771,403],{"emptyLinePlaceholder":402},[378,773,775],{"class":380,"line":774},13,[378,776,777],{"class":657},"# Aktifkan Firewall\n",[378,779,781,783,785],{"class":380,"line":780},14,[378,782,564],{"class":563},[378,784,683],{"class":567},[378,786,787],{"class":567}," enable\n",[163,789],{},[166,791,793],{"id":792},"pengujian-verifikasi-hasil-penilaian-ukk","🧪 Pengujian & Verifikasi Hasil Penilaian UKK",[795,796,797,813],"table",{},[798,799,800],"thead",{},[801,802,803,807,810],"tr",{},[804,805,806],"th",{},"Komponen Pengujian",[804,808,809],{},"Metode Pengujian",[804,811,812],{},"Expexted Result (Hasil yang Diharapkan)",[814,815,816,838,859,875,898],"tbody",{},[801,817,818,824,827],{},[819,820,821],"td",{},[128,822,823],{},"Segregasi VLAN",[819,825,826],{},"Tancapkan PC Client ke Port VLAN 10 & VLAN 20",[819,828,829,830,833,834,837],{},"PC menerima IP subnet ",[178,831,832],{},"192.168.10.x"," (VLAN 10) atau ",[178,835,836],{},"192.168.20.x"," (VLAN 20).",[801,839,840,845,852],{},[819,841,842],{},[128,843,844],{},"Site Blocking",[819,846,847,848,851],{},"Akses ",[178,849,850],{},"http:\u002F\u002Flinux.org"," via browser client",[819,853,854,855,858],{},"Muncul pesan ",[128,856,857],{},"403 Forbidden \u002F Access Denied"," dari MikroTik Web Proxy.",[801,860,861,866,872],{},[819,862,863],{},[128,864,865],{},"Extension Blocking",[819,867,868,869,871],{},"Coba unduh file contoh ",[178,870,279],{}," dari internet",[819,873,874],{},"Download terputus \u002F diblokir oleh sistem proxy router.",[801,876,877,882,888],{},[819,878,879],{},[128,880,881],{},"SSH Custom Port",[819,883,884,885],{},"Remote server: ",[178,886,887],{},"ssh -p 5022 admin-tkj@192.168.10.100",[819,889,890,891,893,894,291],{},"Berhasil login. Remote port ",[178,892,320],{}," ditolak (",[895,896,897],"em",{},"Connection Refused",[801,899,900,905,911],{},[819,901,902],{},[128,903,904],{},"Root Login Protection",[819,906,907,908],{},"Remote langsung sebagai root: ",[178,909,910],{},"ssh -p 5022 root@192.168.10.100",[819,912,913,914,291],{},"Ditolak oleh server (",[895,915,916],{},"Permission Denied",[918,919,920],"style",{},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}",{"title":180,"searchDepth":381,"depth":387,"links":922},[923,924,928,929],{"id":168,"depth":387,"text":169},{"id":185,"depth":387,"text":186,"children":925},[926,927],{"id":190,"depth":393,"text":191},{"id":294,"depth":393,"text":295},{"id":358,"depth":387,"text":359},{"id":792,"depth":387,"text":793},"Soal praktikum dan panduan konfigurasi UKK Paket 2 - Multi-VLAN Trunking, Web Proxy Site Blocking, Layer 7 Firewall Filter, dan Security Hardening Server.","md",null,{"icon":934},"i-lucide-shield-check",{"title":106,"description":930},"aHXsuNvZzhvAd112SAPhL9USnuht4lRuK9b47uLc4Pk",[938,940],{"title":102,"path":103,"stem":104,"description":939,"children":-1},"Soal praktikum dan langkah kerja Uji Kompetensi Keahlian (UKK) Paket 1 - Konfigurasi Router MikroTik, Wireless Hotspot, dan Debian Server.",{"title":110,"path":111,"stem":112,"description":941,"children":-1},"Lembar verifikasi mandiri (Self-Assessment Checklist), rubrik pembobotan nilai, dan matriks troubleshooting kegagalan pengujian UKK TJKT\u002FTKJ Kelas 12.",1789020726706]