Administrasi Jaringan JNA - Koneksi Multi-Kantor

📋 Overview Administrasi Jaringan JNA

🌐 Apa itu Administrasi Jaringan?

Administrasi Jaringan adalah proses pengelolaan, pemeliharaan, dan pengawasan infrastruktur jaringan komputer untuk memastikan konektivitas yang optimal, keamanan data, dan performa sistem yang stabil di seluruh organisasi.

🎯 Tujuan Proyek JNA

✓Menghubungkan kantor pusat dengan 3 kantor cabang
✓Memastikan koneksi yang stabil dan aman
✓Implementasi monitoring real-time
✓Backup dan redundansi jaringan
✓Optimalisasi bandwidth dan QoS
✓Sentralisasi manajemen IT

⚙️ Komponen Utama

🖥️ Hardware

Router, Switch, Firewall, Server

💾 Software

OS, Network Management, Security

🔗 Protokol

TCP/IP, VPN, SNMP, DNS

👥 SDM

Network Admin, IT Support

🏢 Struktur Organisasi

🏛️ Kantor Pusat Jakarta

Data Center, Server Farm, NOC

87 Perangkat • 100 Mbps

🏢 Cabang Surabaya

Regional Hub Jawa Timur

35 Perangkat • 50 Mbps

🏢 Cabang Medan

Regional Hub Sumatera

28 Perangkat • 30 Mbps

🏢 Cabang Makassar

Regional Hub Sulawesi

22 Perangkat • 25 Mbps

👨‍💻 Tugas Administrator Jaringan

🔧Instalasi & Konfigurasi

📊Monitoring Performa

🛡️Keamanan Jaringan

🔄Backup & Recovery

🚨Troubleshooting

📋Dokumentasi

👥User Support

📈Capacity Planning

📊 Manfaat Implementasi

💰

Efisiensi Biaya

Pengurangan biaya operasional IT hingga 30%

⚡

Peningkatan Produktivitas

Akses data real-time antar cabang

🔒

Keamanan Terpusat

Kontrol akses dan monitoring terpusat

📈

Skalabilitas

Mudah menambah cabang baru

🏢 Topologi Jaringan JNA

🎮 Demo Topologi Interaktif

🏛️

Kantor Pusat

Jakarta

192.168.1.0/24

🏢

Surabaya

192.168.2.0/24

🏢

Medan

192.168.3.0/24

🏢

Makassar

192.168.4.0/24

🔧 Konfigurasi Jaringan JNA

🌐 Pengaturan IP Address

# Kantor Pusat Jakarta

Network: 192.168.1.0/24

Gateway: 192.168.1.1

DNS Primary: 8.8.8.8

DNS Secondary: 8.8.4.4

DHCP Range: 192.168.1.100-200

# Cabang Surabaya

Network: 192.168.2.0/24

Gateway: 192.168.2.1

DHCP Range: 192.168.2.100-150

# Cabang Medan

Network: 192.168.3.0/24

Gateway: 192.168.3.1

DHCP Range: 192.168.3.100-130

# Cabang Makassar

Network: 192.168.4.0/24

Gateway: 192.168.4.1

DHCP Range: 192.168.4.100-120

🔧 VLAN Configuration

VLAN 10 - Management

192.168.10.0/24 - Network devices

VLAN 20 - Users

192.168.20.0/24 - End user devices

VLAN 30 - Servers

192.168.30.0/24 - Server farm

VLAN 40 - Guest

192.168.40.0/24 - Guest access

🔐 IPSec VPN Configuration

# Phase 1 (IKE) Configuration

crypto isakmp policy 10

encr aes 256

hash sha256

authentication pre-share

group 14

lifetime 86400

# Phase 2 (IPSec) Configuration

crypto ipsec transform-set JNA-SET

esp-aes 256 esp-sha256-hmac

mode tunnel

# Crypto Map

crypto map JNA-MAP 10 ipsec-isakmp

set peer 203.0.113.2

set transform-set JNA-SET

match address VPN-TRAFFIC

🌐 VPN Tunnel Status

Jakarta ↔ Surabaya

Tunnel: 203.0.113.1 → 203.0.113.2

Encryption: AES-256, SHA-256

Status: UP, 99.9% uptime

Jakarta ↔ Medan

Tunnel: 203.0.113.1 → 203.0.113.3

Encryption: AES-256, SHA-256

Status: UP, 99.7% uptime

Jakarta ↔ Makassar

Tunnel: 203.0.113.1 → 203.0.113.4

Encryption: AES-256, SHA-256

Status: UP, 99.5% uptime

🔒 Security Features

• Perfect Forward Secrecy (PFS)
• Dead Peer Detection (DPD)
• NAT Traversal Support
• Automatic Key Exchange
• Certificate-based Authentication

🛡️ Firewall Access Control Lists

# Inbound Rules (WAN to LAN)

access-list 100 deny ip any 192.168.0.0 0.0.255.255

access-list 100 permit tcp any any eq 80

access-list 100 permit tcp any any eq 443

access-list 100 permit tcp any any eq 22

access-list 100 deny ip any any

# Outbound Rules (LAN to WAN)

access-list 101 permit tcp 192.168.1.0 0.0.0.255 any

access-list 101 permit udp 192.168.1.0 0.0.0.255 any eq 53

access-list 101 permit icmp 192.168.1.0 0.0.0.255 any

# Inter-VLAN Rules

access-list 102 permit tcp 192.168.20.0 0.0.0.255

192.168.30.0 0.0.0.255 eq 80

access-list 102 deny ip 192.168.20.0 0.0.0.255

192.168.10.0 0.0.0.255

🚨 Security Policies

🚫 Deny Rules

• Block P2P traffic (BitTorrent, etc.)
• Deny direct internet from servers
• Block malicious IP ranges
• Prevent VLAN hopping attacks

✅ Allow Rules

• HTTP/HTTPS web traffic
• Email protocols (SMTP, POP3, IMAP)
• VPN tunnel traffic
• DNS queries to authorized servers

⚠️ Monitoring Rules

• Log all denied connections
• Alert on suspicious activities
• Track bandwidth usage per user
• Monitor failed login attempts

📊 Quality of Service Policies

# Class Maps Definition

class-map match-all VOICE

match protocol rtp

match ip dscp ef

class-map match-all VIDEO

match protocol http

match ip dscp af41

class-map match-all CRITICAL-DATA

match protocol https

match ip dscp af31

# Policy Map Configuration

policy-map WAN-QOS

class VOICE

priority percent 20

class VIDEO

bandwidth percent 30

class CRITICAL-DATA

bandwidth percent 25

class class-default

bandwidth percent 25

fair-queue

🎯 Traffic Classification

🔴 Priority Class (20%)

Voice over IP (VoIP)

🔵 High Class (30%)

Video Conferencing, Streaming

🟢 Medium Class (25%)

Business Applications, ERP

⚪ Default Class (25%)

General Internet, File Transfer

⚙️ QoS Features

• Traffic Shaping & Policing
• Congestion Avoidance (WRED)
• Low Latency Queuing (LLQ)
• Bandwidth Guarantee
• DSCP Marking & Classification

🔄 High Availability Setup

# HSRP Configuration (Hot Standby)

interface GigabitEthernet0/1

ip address 192.168.1.2 255.255.255.0

standby 1 ip 192.168.1.1

standby 1 priority 110

standby 1 preempt

standby 1 track 1 decrement 20

# Link Aggregation (EtherChannel)

interface Port-channel1

switchport mode trunk

switchport trunk allowed vlan all

interface range GigabitEthernet0/1-2

channel-group 1 mode active

switchport mode trunk

# Spanning Tree Protocol

spanning-tree mode rapid-pvst

spanning-tree vlan 1-4094 priority 4096

spanning-tree portfast bpduguard default

🛡️ Backup & Failover

Primary WAN Link

Provider: Telkom Indonesia

Bandwidth: 100 Mbps

Status: Active, 99.9% uptime

Secondary WAN Link

Provider: Indosat Ooredoo

Bandwidth: 50 Mbps

Status: Standby, Auto-failover

Backup WAN Link

Provider: XL Axiata (4G LTE)

Bandwidth: 20 Mbps

Status: Emergency backup

🔧 Redundancy Features

• Automatic failover (< 30 seconds)
• Load balancing across links
• Path monitoring & health checks
• Dual power supply systems
• RAID storage configuration
• Geographic site redundancy

🚀 Demo Koneksi Real-Time

🎮 Panel Kontrol

📡 Status Koneksi

🏛️ Jakarta ↔ 🏢 Surabaya

🏛️ Jakarta ↔ 🏢 Medan

🏛️ Jakarta ↔ 🏢 Makassar

📈 Statistik Jaringan

Bandwidth Total: 0 Mbps

Latency Rata-rata: 0 ms

Packet Loss: 0%

Uptime: 0%

📝 Log Aktivitas

[System] Demo koneksi siap dijalankan...

📋 Overview Administrasi Jaringan JNA

🌐 Apa itu Administrasi Jaringan?

🎯 Tujuan Proyek JNA

⚙️ Komponen Utama

🖥️ Hardware

💾 Software

🔗 Protokol

👥 SDM

🏢 Struktur Organisasi

🏛️ Kantor Pusat Jakarta

🏢 Cabang Surabaya

🏢 Cabang Medan

🏢 Cabang Makassar

👨‍💻 Tugas Administrator Jaringan

📊 Manfaat Implementasi

🏢 Topologi Jaringan JNA

🎮 Demo Topologi Interaktif

📝 Log Demo Topologi

🔧 Konfigurasi Jaringan JNA

🌐 Pengaturan IP Address

🔧 VLAN Configuration

VLAN 10 - Management

VLAN 20 - Users

VLAN 30 - Servers

VLAN 40 - Guest

🔐 IPSec VPN Configuration

🌐 VPN Tunnel Status

Jakarta ↔ Surabaya

Jakarta ↔ Medan

Jakarta ↔ Makassar

🔒 Security Features

🛡️ Firewall Access Control Lists

🚨 Security Policies

🚫 Deny Rules

✅ Allow Rules

⚠️ Monitoring Rules

📊 Quality of Service Policies

🎯 Traffic Classification

🔴 Priority Class (20%)

🔵 High Class (30%)

🟢 Medium Class (25%)

⚪ Default Class (25%)

⚙️ QoS Features

🔄 High Availability Setup

🛡️ Backup & Failover

Primary WAN Link

Secondary WAN Link

Backup WAN Link

🔧 Redundancy Features

🚀 Demo Koneksi Real-Time

🎮 Panel Kontrol

📡 Status Koneksi

📈 Statistik Jaringan

📝 Log Aktivitas