LAPORAN TEKNIS PEMELIHARAAN JARINGAN WIDE AREA NETWORK / WAN Kabupaten Bandung Barat

Transkripsi

1 LAPORAN TEKNIS PEMELIHARAAN JARINGAN WIDE AREA NETWORK / WAN Kabupaten Bandung Barat Tahun

2 Pendahuluan Teknologi informasi semakin berperan dalam mendukung efisiensi dan efektifitas komunikasi pada organisasi modern baik itu perusahaan maupun institusi pemerintahan, Salah satunya penerapannya adalah dengan teknologi Wide Area Network (WAN), dimana cakupan WAN meliputi wilayah yang lebih luas dari pada Local Area Network (LAN). Kabupaten Bandung Barat adalah kabupaten pecahan dari Kabupaten bandung yang mempunyai luas wilayah sekitar 1.311,31 km2 yang mencakup 16 kecamatan serta 165 Desa.tentu dengan wilayah yang luas seperti ini bukan perkara mudah untuk bisa menghubungkan semua kecamatan dan semua desa, hal ini di sebabkan hambatan infrastruktur serta faktor geografis. Atas dasar tersebut, maka pemerintah Kabupaten Bandung Barat melalui Kantor Dinas Perhubungan dan Kominfo melakukan sebuah upaya untuk memelihara semua infrastuktur jaringan TCP/IP yang ada di kabupaten bandung barat, sehingga strategis untuk pemanfaatan Teknologi Informasi pada sarana pendukung pekerjaan dan pelayanan pada masyarakat pengelolaan teknologi Informasi maka diharapkan pekerjaan dan pelayanan, para pegawai di Kabupaten Bandung Barat lebih baik dan lebih maksimal setiap harinya. Maksud dan Tujuan Maksud : meningkatkan efesiensi dan efektivitas pkerjaan di lingkungan pemerintahan kab. Bandung barat dengan dukungan teknologi informasi. Tujuan dari kegiatan ini adalah : 1. Terpeliharanya semua jaringan yang ada di kabupaten Bandung barat baik itu di lingkungan pemerintah daerah maupun kecamatan. 2. Tersedianya jaringan untuk semua koneksi aplikasi internal kabupaten bandung barat maupun kebutuhan koneksi internet. Lokasi Kegiatan lokasi kegiatan pemerintahan Kab.Bandung barat sebagai pusat data dan informasi serta pusat perangkat access point menuju beberapa titik kecamatan di sesuikan dengan jumlah perangkat yang tersedia.

3 Hasil Kegiatan Topologi Pada tahun ada sekitar 9 Kecamatan yang terhubung secara langsung maupun lewat repeater ke kabupaten bandungbarat.berikut topologi WAN kab.bandungbarat tahun Topologi WAN Kab. Bandung Barat Dari 16 kecamatan yang ada di Kab. Bandungbarat hanya 1 yang terhubung secara langsung yaitu kecamatan padalarang sedangkan sisa kecamatan tidak terkoneksi di sebabkan perangkat terkena petir serta sebelumnya memang belum terhubung secara langsung. Di karenakan keterbatasan perangkat, maka di prioritaskan kecamatan ataupun dinas terdekat yang memungkinkan terhubung secara langsung, yaitu Kecamatan Ngamprah, Cisarua, Sindangkerta serta DPRD Kab.Bandung Barat. Untuk kasus kecamatan Cisarua tidak bisa secara langsung terhubung menuju Kantor kabupaten tetapi melalui DPRD hal ini di sebabkan faktor geografis yang tidak memungkinkan secara langsung terhubung ke gedung PEMDA.

4 ID VLAN dan IP Addressing Untuk memudahkan monitoring dan bandwidth manajemen baik di gedung pemda serta kecamatan maka kita terapkan teknologi VLAN, berikut ID VLAN serta IP address-list untuk beberapa tempat. No ID VLAN Description IP Address-list Gedung Dinas /24 s/d / Ged. Setda /24 s/d / Gedung C /24 s/d / Gedung B /24 s/d / Gedung Perpustakaan / WIFI GedungC dan Setda / DPRD / Kec. UTARA /24 Setting dan Konfigurasi A. Router Utama router utama dalam hal ini di pegang oleh mikrotik jenis RB 1100 Hx2 untuk menanangani Routing, BW manajemen, VLAN manajemen, VPN Server serta filtering, sehingga posisi router utama menjadi posisi sentral di jaringan KBB. berikut list konfigurasi di router utama. A.1. VLAN ID berikut capture VLAN id di router utama

5 A2. Bandwidth Manajemen bandwidth manajemn di setting berdsarkan IP dengan metode PCQ, berikut konfigurasi yang sudah di lakukan dan di kelompokan berdasarkan tempat > queue simple print Flags: X - disabled, I - invalid, D - dynamic 0 name="icmp" target="" parent=none packet-marks=icmp priority=1/1 queue=default-small/default-small limit-at=0/0 max-limit=0/0 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s 1 name="dns" target="" parent=none packet-marks=dns priority=1/1 queue=default-small/default-small limit-at=0/0 max-limit=0/0 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s 2 name="simda" target= /32 parent=none packet-marks="" priority=1/1 queue=default/default limit-at=0/0 max-limit=65m/65m burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default 3 ;;; GedungD name="gedung D" target= /24 parent=none packet-marks="" priority=1/1 queue=pcq_upload/pcq_download limit-at=0/0 max-limit=65m/65m burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default

6 4 ;;; Bandwidth Setda name="ged. SETDA" target= /24, /24, /24, /24 parent=none packet-marks="" priority=1/1 queue=pcq_upload/pcq_download limit-at=0/0 max-limit=65m/65m burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default 5 ;;; SOUTH name="kec-pks SELATAN" target= /24 parent=none packet-marks="" priority=1/1 queue=pcq_upload/pcq_download limit-at=0/0 max-limit=65m/65m burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default 6 ;;; NORTH name="kec PKS UTARA" target= /24, /24 parent=none packet-marks="" priority=1/1 queue=pcq_upload/pcq_download limit-at=0/0 max-limit=65m/65m burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default 7 ;;; GEDUNG C name="ged C" target= /24, /24, /24, /24, /24, /24 parent=none packet-marks="" priority=1/1 queue=pcq_upload/pcq_download limit-at=0/0 max-limit=65m/65m burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default 8 ;;; DPRD name="dprd" target= /24 parent=none packet-marks="" priority=1/1 queue=default/default limit-at=0/0 max-limit=65m/65m burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default 9 ;;; Ged Dinas name="gedung DINAS" target= /24, /24, /24, /24, /24 parent=none packet-marks="" priority=8/8 queue=pcq_upload/pcq_download limit-at=0/0 max-limit=65m/65m burst-limit=0/0 burst-threshold=0/0 burst-time=10s/10s 10 ;;; WIFI name="wifi" target= /24, /24 parent=none packet-marks="" priority=8/8 queue=pcq_wifi_upload/pcq_wifi_download limit-at=0/0 max-limit=65m/65m burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s untuk type pcq nya sbb :

7 5 name="pcq_download" kind=pcq pcq-rate=1m pcq-limit=300kib pcq-classifier=dst-address pcq-total-limit=5000kib pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=2s pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=64 pcq-dst-address6-mask=64 6 name="pcq_upload" kind=pcq pcq-rate=1m pcq-limit=200kib pcq-classifier=src-port pcq-total-limit=5000kib pcq- burst-rate=65m pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=64 pcq-dst-address6-mask=64 7 name="pcq_wifi_download" kind=pcq pcq-rate=756k pcq-limit=300kib pcq-classifier=dst-address pcq-total- limit=5000kib pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=2s pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=64 pcq-dst-address6-mask=64 8 name="pcq_wifi_upload" kind=pcq pcq-rate=5m pcq-limit=200kib pcq-classifier=src-port pcq-total-limit=5000kib pcq-burst-rate=65m pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=64 pcq-dst-address6-mask=64 A.3 Routing Manajemen untuk memudahkan dalam membuat routing table di semua tempat, maka dari awal di setting menggunakan OSPF Network redistribute > routing ospf network print Flags: X - disabled, I - invalid # NETWORK AREA /16 backbone / /16 backbone > routing ospf instance print Flags: X - disabled, * - default 0 * name="default" router-id= distribute-default=never redistribute-connected=as-type-1 redistribute-static=as-type-1 redistribute-rip=no redistribute-bgp=no redistribute-other-ospf=no metric-default=1 metric-connected=20 metric-static=20 metric-rip=20 metric-bgp=auto metric-other-ospf=auto in-filter=ospf-in out-filter=ospf-out A4. Filtering untuk menjaga hal hal yang tidak di inginkan seperti flooding, serangan malware serta port tertentu yang dibiasa di gunakana olah trojan maka di router juga di pasang filtering sederhana, berikut konfigurasi filtering di router utama > ip firewall filter print Flags: X - disabled, I - invalid, D - dynamic

8 0 ;;; PPTP chain=input action=accept protocol=gre log=no 1 ;;; PPTP chain=input action=accept protocol=tcp dst-port=1723 log=no 2 chain=input action=accept protocol=icmp log=no 3 chain=input action=accept src-address= /20 log=no 4 chain=input action=accept src-address= /24 log=no 5 chain=input action=accept src-address= /24 log=no 6 chain=input action=accept src-address= /8 log=no 7 chain=input action=accept src-address= /16 log=no 8 chain=input action=accept src-address= /24 log=no 9 chain=input action=accept src-address= /24 log=no 10 chain=input action=accept src-address= log=no 11 chain=input action=accept src-address= /16 log=no 12 chain=input action=accept src-address= log=no 13 chain=input action=accept src-address= log=no 14 chain=input action=accept src-address= log=no 15 chain=input action=accept src-address= log=no 16 chain=forward action=accept src-address= /24 layer7-protocol=denied log=no 17 chain=forward action=accept src-address= layer7-protocol=denied log=no 18 ;;; dari DMZ chain=forward action=accept src-address= /24 log=no 20 ;;; SIMDA

9 chain=forward action=accept src-address= log=no 21 chain=forward action=accept dst-address= log=no 22 ;;; P2P chain=forward action=drop p2p=all-p2p log=no 23 ;;; Blaster Worm chain=virus action=drop protocol=tcp dst-port= log=no 24 ;;; Messenger Worm chain=virus action=drop protocol=udp dst-port= log=no 25 ;;; Blaster Worm chain=virus action=drop protocol=tcp dst-port=445 log=no 26 ;;; Blaster Worm chain=virus action=drop protocol=udp dst-port=445 log=no 27 ;;; chain=virus action=drop protocol=tcp dst-port=593 log=no 28 ;;; chain=virus action=drop protocol=tcp dst-port= log=no 29 ;;; Drop MyDoom chain=virus action=drop protocol=tcp dst-port=1080 log=no 30 ;;; chain=virus action=drop protocol=tcp dst-port=1214 log=no 31 ;;; ndm requester chain=virus action=drop protocol=tcp dst-port=1363 log=no 32 ;;; ndm server chain=virus action=drop protocol=tcp dst-port=1364 log=no 33 ;;; screen cast chain=virus action=drop protocol=tcp dst-port=1368 log=no 34 ;;; hromgrafx chain=virus action=drop protocol=tcp dst-port=1373 log=no

10 35 ;;; cichlid chain=virus action=drop protocol=tcp dst-port=1377 log=no 36 ;;; Bagle Virus chain=virus action=drop protocol=tcp dst-port=2745 log=no 37 ;;; Dumaru.Y chain=virus action=drop protocol=tcp dst-port=2283 log=no 38 ;;; Beagle chain=virus action=drop protocol=tcp dst-port=2535 log=no 39 ;;; Beagle.C-K chain=virus action=drop protocol=tcp dst-port=2745 log=no 40 ;;; MyDoom chain=virus action=drop protocol=tcp dst-port= log=no 41 ;;; Backdoor OptixPro chain=virus action=drop protocol=tcp dst-port=3410 log=no 42 ;;; Worm chain=virus action=drop protocol=tcp dst-port=4444 log=no 43 ;;; Worm chain=virus action=drop protocol=udp dst-port=4444 log=no 44 ;;; Drop Sasser chain=virus action=drop protocol=tcp dst-port=5554 log=no 45 ;;; Drop Beagle.B chain=virus action=drop protocol=tcp dst-port=8866 log=no 46 ;;; Drop Dabber.A-B chain=virus action=drop protocol=tcp dst-port=9898 log=no 47 ;;; Drop Dumaru.Y chain=virus action=drop protocol=tcp dst-port=10000 log=no 48 ;;; Drop MyDoom.B chain=virus action=drop protocol=tcp dst-port=10080 log=no 49 ;;; Drop NetBus chain=virus action=drop protocol=tcp dst-port=12345 log=no

11 50 ;;; Drop Kuang2 chain=virus action=drop protocol=tcp dst-port=17300 log=no 51 ;;; Drop SubSeven chain=virus action=drop protocol=tcp dst-port=27374 log=no 52 ;;; Drop PhatBot,Agobot, Gaobot chain=virus action=drop protocol=tcp dst-port=65506 log=no 53 ;;; Trinoo chain=virus action=drop protocol=udp dst-port=12667 log=no 54 ;;; Trinoo chain=virus action=drop protocol=udp dst-port=27665 log=no 55 ;;; Trinoo chain=virus action=drop protocol=udp dst-port=31335 log=no 56 ;;; Trinoo chain=virus action=drop protocol=udp dst-port=27444 log=no 57 ;;; Trinoo chain=virus action=drop protocol=udp dst-port=34555 log=no 58 ;;; Trinoo chain=virus action=drop protocol=udp dst-port=35555 log=no 59 ;;; Trinoo chain=virus action=drop protocol=tcp dst-port=27444 log=no 60 ;;; Trinoo chain=virus action=drop protocol=tcp dst-port=27665 log=no 61 ;;; Trinoo chain=virus action=drop protocol=tcp dst-port=31335 log=no 62 ;;; Trinoo chain=virus action=drop protocol=tcp dst-port=31846 log=no 63 ;;; Trinoo chain=virus action=drop protocol=tcp dst-port=34555 log=no 64 ;;; Trinoo chain=virus action=drop protocol=tcp dst-port=35555 log=no 65 ;;; ;;Block W32.Kido - Conficker

12 chain=forward action=drop protocol=udp src-port= ,445 log=no 66 chain=forward action=drop protocol=udp dst-port= ,445 log=no 67 chain=forward action=drop protocol=tcp src-port= ,445,593 log=no 68 chain=forward action=drop protocol=tcp dst-port= ,445,593 log=no 69 ;;; Do not DISABLE chain=input action=drop src-address=! /19 log=no 70 ;;; Allow limited pings chain=input action=accept protocol=icmp limit=50/5s,2 log=no 71 chain=input action=accept protocol=icmp limit=50/5s,2 log=no 72 ;;; drop FTP Brute Forcers chain=input action=drop protocol=tcp src-address-list=ftp_blacklist dst-port=21 log=no 73 chain=input action=drop protocol=tcp src-address-list=ftp_blacklist dst-port=21 log=no 74 chain=output action=accept protocol=tcp content=530 Login incorrect dst-limit=1/1m,9,dst-address/1m log=no 75 chain=output action=add-dst-to-address-list protocol=tcp address-list=ftp_blacklist address-list-timeout=1d content=530 Login incorrect log=no 76 ;;; drop SSH&TELNET Brute Forcers chain=input action=drop protocol=tcp src-address-list=ip_blacklist dst-port=22-23 log=no 77 chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=ssh_blacklist_3 address-list=ip_blacklist address-list-timeout=1d dst-port=22-23 log=no 78 chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=ssh_blacklist_2 address-list=ssh_blacklist_3 address-list-timeout=1m dst-port=22-23

13 log=no 79 chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=ssh_blacklist_1 address-list=ssh_blacklist_2 address-list-timeout=1m dst-port=22-23 log=no 80 chain=input action=add-src-to-address-list connection-state=new protocol=tcp address-list=ssh_blacklist_1 address-list-timeout=1m dst-port=22-23 log=no 81 ;;; drop port scanners chain=input action=drop src-address-list=port_scanners log=no 82 chain=input action=add-src-to-address-list tcp-flags=fin,!syn,!rst,!psh,!ack,!urg protocol=tcp address-list=port_scanners address-list-timeout=2w log=no 83 chain=input action=add-src-to-address-list tcp-flags=fin,syn protocol=tcp address-list=port_scanners address-list-timeout=2w log=no 84 chain=input action=add-src-to-address-list tcp-flags=syn,rst protocol=tcp address-list=port_scanners address-list-timeout=2w log=no 85 chain=input action=add-src-to-address-list tcp-flags=fin,psh,urg,!syn,!rst,!ack protocol=tcp address-list=port_scanners address-list-timeout=2w log=no 86 chain=input action=add-src-to-address-list tcp-flags=fin,syn,rst,psh,ack,urg protocol=tcp address-list=port_scanners address-list-timeout=2w log=no 87 chain=input action=add-src-to-address-list tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg protocol=tcp address-list=port_scanners address-list-timeout=2w log=no 88 chain=forward action=drop protocol=tcp src-address-list=worm-infected-p445 dst-port=445 log=no 89 chain=forward action=drop protocol=tcp src-address-list=worm-infected-p445 dst-port=445 log=no 90 ;;; Accept established connections chain=input action=accept connection-state=established log=no

14 91 ;;; Accept related connections chain=input action=accept connection-state=related log=no 92 ;;; Drop invalid connections chain=input action=drop connection-state=invalid log=no 93 ;;; UDP chain=input action=accept protocol=udp log=no 94 ;;; drop invalid connections chain=forward action=drop connection-state=invalid log=no 95 ;;; Allow limited pings chain=input action=accept protocol=icmp limit=50/5s,2 log=no 96 ;;; Drop excess pings chain=input action=drop protocol=icmp log=no 97 ;;; DROP PING REPLY chain=input action=drop protocol=icmp src-address=! log=no 98 ;;; Drop Blaster Worm chain=virus action=drop protocol=tcp dst-port= log=no 99 ;;; Drop Messenger Worm chain=virus action=drop protocol=udp dst-port= log=no 100 ;;; Drop Blaster Worm chain=virus action=drop protocol=tcp dst-port=445 log=no 101 ;;; Drop Blaster Worm chain=virus action=drop protocol=udp dst-port=445 log=no 102 ;;; chain=virus action=drop protocol=tcp dst-port=593 log=no 103 chain=virus action=drop protocol=tcp dst-port= log=no 104 ;;; Drop MyDoom

15 chain=virus action=drop protocol=tcp dst-port=1080 log=no 105 ;;; chain=virus action=drop protocol=tcp dst-port=1214 log=no 106 ;;; ndm requester chain=virus action=drop protocol=tcp dst-port=1363 log=no 107 ;;; ndm server chain=virus action=drop protocol=tcp dst-port=1364 log=no 108 ;;; screen cast chain=virus action=drop protocol=tcp dst-port=1368 log=no 109 ;;; hromgrafx chain=virus action=drop protocol=tcp dst-port=1373 log=no 110 ;;; cichlid chain=virus action=drop protocol=tcp dst-port=1377 log=no 111 ;;; Worm chain=virus action=drop protocol=tcp dst-port= log=no 112 ;;; Bagle Virus chain=virus action=drop protocol=tcp dst-port=2745 log=no 113 ;;; Drop Dumaru.Y chain=virus action=drop protocol=tcp dst-port=2283 log=no 114 ;;; Drop Beagle chain=virus action=drop protocol=tcp dst-port=2535 log=no 115 ;;; Drop Beagle.C-K chain=virus action=drop protocol=tcp dst-port=2745 log=no 116 ;;; Drop MyDoom chain=virus action=drop protocol=tcp dst-port= log=no 117 ;;; Drop Backdoor OptixPro chain=virus action=drop protocol=tcp dst-port=3410 log=no 118 ;;; Worm chain=virus action=drop protocol=tcp dst-port=4444 log=no

16 119 ;;; Worm chain=virus action=drop protocol=udp dst-port=4444 log=no 120 ;;; Drop Sasser chain=virus action=drop protocol=tcp dst-port=5554 log=no 121 ;;; Drop Beagle.B chain=virus action=drop protocol=tcp dst-port=8866 log=no 122 ;;; Drop Dabber.A-B chain=virus action=drop protocol=tcp dst-port=9898 log=no 123 ;;; Drop Dumaru.Y chain=virus action=drop protocol=tcp dst-port=10000 log=no 124 ;;; Drop MyDoom.B chain=virus action=drop protocol=tcp dst-port=10080 log=no 125 ;;; Drop NetBus chain=virus action=drop protocol=tcp dst-port=12345 log=no 126 ;;; Drop Kuang2 chain=virus action=drop protocol=tcp dst-port=17300 log=no 127 ;;; Drop SubSeven chain=virus action=drop protocol=tcp dst-port=27374 log=no 128 ;;; Drop PhatBot, Agobot, Gaobot chain=virus action=drop protocol=tcp dst-port=65506 log=no 129 ;;; jump to the virus chain chain=forward action=jump jump-target=virus log=no 130 ;;; Port scanners to list chain=input action=add-src-to-address-list protocol=tcp psd=21,3s,3,1 address-list=port scanners address-list-timeout=2w log=no 131 ;;; NMAP FIN Stealth scan chain=input action=add-src-to-address-list tcp-flags=fin,!syn,!rst,!psh,!ack,!urg protocol=tcp address-list=port scanners address-list-timeout=2w log=no 132 ;;; SYN/FIN scan chain=input action=add-src-to-address-list tcp-flags=fin,syn protocol=tcp address-list=port scanners address-list-timeout=2w log=no

17 133 ;;; SYN/RST scan chain=input action=add-src-to-address-list tcp-flags=syn,rst protocol=tcp address-list=port scanners address-list-timeout=2w log=no 134 ;;; FIN/PSH/URG scan chain=input action=add-src-to-address-list tcp-flags=fin,psh,urg,!syn,!rst,!ack protocol=tcp address-list=port scanners address-list-timeout=2w log=no 135 ;;; ALL/ALL scan chain=input action=add-src-to-address-list tcp-flags=fin,syn,rst,psh,ack,urg protocol=tcp address-list=port scanners address-list-timeout=2w log=no 136 ;;; NMAP NULL scan chain=input action=add-src-to-address-list tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg protocol=tcp address-list=port scanners address-list-timeout=2w log=no 137 ;;; dropping port scanners chain=input action=drop src-address-list=port scanners log=no 138 ;;; drop ftp brute forcers chain=input action=drop protocol=tcp src-address-list=ftp_blacklist dst-port=21 log=no 139 chain=output action=accept protocol=tcp content=530 Login incorrect dst-limit=1/1m,9,dst-address/1m log=no 140 chain=output action=add-dst-to-address-list protocol=tcp address-list=ftp_blacklist address-list-timeout=3h content=530 Login incorrect log=no 141 ;;; drop ssh brute forcers chain=input action=drop protocol=tcp src-address-list=ssh_blacklist dst-port=22 log=no 142 chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=ssh_stage3 address-list=ssh_blacklist address-list-timeout=3d dst-port=22 log=no 143 chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=ssh_stage2 address-list=ssh_stage3 address-list-timeout=1m dst-port=22 log=no

18 144 chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=ssh_stage1 address-list=ssh_stage2 address-list-timeout=1m dst-port=22 log=no 145 chain=input action=add-src-to-address-list connection-state=new protocol=tcp address-list=ssh_stage1 address-list-timeout=1m dst-port=22 log=no 146 ;;; drop ssh brute downstream chain=forward action=drop protocol=tcp src-address-list=ssh_blacklist dst-port=22 log=no 147 ;;; DotaA chain=forward action=drop protocol=tcp dst-port= log=no 148 chain=forward action=drop protocol=tcp src-port= log=no B. Access Point ada beberapa access point yang terpasang di Kab.Bandungbarat untuk mencover beberapa gedung di lingkungan Kab. Bandungbarat dan juga mengcover kecamatan kecamatan di kab.bandungbarat.berikit List berdasarkan SSID Access Point serta client covered nya. No SSID Access Point IP address Covered 1 KBB-SOUTH DPRD,Kec.Padalarang 2 KBB-SOUTH Sindangkerta,Ged. B 3 KBB-SOUTH Ged.SETDA,Ged.C 4 KBB-NORTH Kec.Ngamprah,Puskes Ngamprah 5 KBB-NORTH Kec.Cisarua 6 KBB-NORTH RPR.SadangMekar Description

19 Documentasi Kegiatan berikut Foto dokumentasi kegiatan pemeliharaan jaringan WAN di beberapa tempat : Kec.Cisarua : Ged. Setda Gedung B

20 Kec. Ngamprah Usulan dan Saran ada bebrapa usul untuk perbaikan jaringan WAN KBB kedapan : 1. Disarankan di pecah beberapa fungsi yang sekarang ada di Router utama menjadi di buat terpisah di router yang lain sehinggal beban kerja router bisa berkura waktu ng 2. di usulkan penambhan perangkat Radio Rocket untuk menghubungkan beberapa tempat yang masih mati serta untuk backup perangkat apabila sewaktu waktu mati. 3. di Sarankan menambah beberapa switch manageable di bebrapa tempat terutama Ged D dan Gedung B supaya bisa termanage jaringan gedungnya. 4. Di usulkan mengganti link Wireless menjadi link Fiber Optik untuk menghubungkan antar gedung di lingkungan kab. Bandungbarat 5. Disarankan di pasang Access Point di tiap tiap Kecamatan supaya tersa manfaat access internet di lingkungan kecamatan dan sekitarnya.