The Simulation of Access Control List (ACLs) Network Security for Frame Relay Network at PT. KAI Palembang

Written by Kurniati Kurniati, Rahmat Novrianda Dasmen
on May 27, 2019

LONTAR KOMPUTER VOL. 10, NO. 1 APRIL 2019

DOI : 10.24843/LKJITI.2019.v10.i01.p06

Accredited B by RISTEKDIKTI Decree No. 51/E/KPT/2017

p-ISSN 2088-1541

e-ISSN 2541-5832

The Simulation of Access Control List (ACLs) Network Security for Frame Relay Network at PT. KAI Palembang

Kurniati^a1, Rahmat Novrianda Dasmen^a2

^aTeknik Komputer, Universitas Bina Darma Jenderal A. Yani street number 03 Palembang, Indonesia ¹[email protected]

²[email protected]

Abstract

PT. KAI Palembang is a branch of PT. Kereta Api Indonesia (KAI) Persero located in South Sumatra Province, where PT. KAI Persero is an Indonesian State-Owned Enterprise that organizes railway transportation which provide services including passenger and goods transportation. PT. KAI Palembang has a computer network connected to PT. KAI Persero central is located in Jakarta. Now, PT. KAI Palembang is trying to improve computer network security, where one of them is limiting the access of users who connected to PT. KAI Palembang computer network. This can be done by implementing Access Control Lists (ACLs) and Frame Relay on PT. KAI Palembang computer network. In this research used the Network Development Life Cycle (NDLC) method which has several stages, namely Analysis, Design, Simulation Prototyping, Implementation, Monitoring and Management. This research method is used because the results of this research will be displayed in the Cisco packet tracer simulator. In addition, the results of this research were tested using a ping test between computers to show that the ACLs design had been running well.

Keywords: Network, ACLs, NDLC, Cisco Packet Tracer, ping test

1. Introduction

PT. KAI Palembang is an Indonesian state-owned enterprise located in South Sumatra Province, which provides rail transportation services for both passengers and goods. PT. KAI Palembang has a computer network that was connected to the PT. KAI Persero central computer network located in Jakarta, where the two networks were connected using a router device. A router is a device that will pass IP packets from a network to another network using the addressing and certain protocol method to pass that data packet [1]. IP packets contains IP Address which is a series of binary numbers between 32-bit to 128-bit which is used as the identification address for each host computer on the internet network [2]. Router have function to connect many small networks to a larger network and are called internetwork with TCP / IP technology-based to expand from LAN to WAN and MAN, router also used to connect networks that use different media [3]. Routing needs to be done to the router device so that it can be used, where routing is the process of directing data packets to get the destination from one location to another [4]. To do the routing process, a routing protocol is needed, where the routing protocol is the protocol used in dynamic routing and allows routers to share information about networks and connections between routers [5]. In this research, Enhanced Interior Gateway Routing Protocol (EIGRP) is used, which is a cisco routing protocol that works on cisco routers and on internal route processors that found on layer core switches and cisco distribution layer switches and EIGRP is also a classes and enhaced distance vector protocol [6]. In addition, also need a switch device which have function as a link between the computer network of rooms were located in PT. KAI Palembang. A switch commonly called a smart hub was used to connect between one computer and another computer in a LAN [7].

The problem that occurs in this research is the lower levels of network security, so it is necessary to make efforts for improve computer network security by limiting user access to communication between networks on the PT. KAI Palembang computer network. Therefore in this research, do the application of Access Control List (ACLs) and Frame Relay on the PT. KAI Palembang computer network. ACLs are a list of licensing or rejection statements that are applied to network addresses or the uppermost protocol layer and ACLs also used to select packets that go in and out of the network [8] while Frame relay is a technology that relies on frame- frame that is forwarded to send data [9], where Frame is a packet data [10]. In order to implement both of these technologies, so necessary to build a Virtual Local Area Network (VLAN) by utilizing router and switch, where VLAN are logical groupings of users and network resources that are connected to determined ports on a switch administratively [11]. VLAN is an option because it regulate networks based on their classification techniques, namely through MAC addressing, ports and so on that make flexible VLAN networks [12]. The entire research was carried out using a Cisco packet tracer simulator, where cisco packet tracer is a simulator of network tools issued by cisco that often used as a medium of learning and training and also often used in computer network simulation research fields [13]. The main purpose of the cisco packet tracer is to provide tools for participants and instructors to be able to understand the principles of computer networking and also build skills in the network configuration field that use cisco [13].

2. Reseach Methods

The research method used in the current research is the Action Research method wherein this method is described, interpreted and explained a condition at the same time in order to make changes or interventions with the aim of improvement and participation [14]. The following in Figure 1 are the stages of the action research method used:

Diagnosing

Learning

Evaluating

Action Planning

METODE

ACTION RESEARCH

Kelola : Rahmat Novriatida D

Action

Taking

Figure 1. Action Research Method [15]

3. Result and Discussion

3.1. Network Topology Design of PT. KAI Palembang

In Figure 2. below is the result of a topology design that researcher have designed on PT. KAI Palembang computer network, where the researcher added 2 routers and implemented a star-

bus topology with the aim that there were alternative paths could be used if the main line was cut off. The following picture below is the Network Topology that designed using the Cisco packet tracer simulator.

Figure 2. Network Topology Design in PT. KAI Palembang.

3.2. Virtual Local Area Network (VLAN) mapping

Virtual Local Area Network (VLAN) is a network that connect the same network although different locations with configuration in switch device using the trunking method, the switch is connected with a router to connect a predetermined VLAN network [16]. VLAN mapping is done to ease the Frame Relay configuration and VLAN also divide the device into several rooms based on their functions. The following table below is the VLAN mapping that used in this research:

Table 1. VLAN mapping

No.	Rooms	VLAN
1	IT and Service Room	10
2	Safety Room	20
3	Financial and Billing Room	30
4	Documentation Room	40
5	Rail and Bridges Room	50
6	HR and General Room	60

3.3. IP Address Scheme in PT. KAI Palembang

To be able to communicate on a private network or on the internet public network every host on the computer network must be identified by an IP address

Table 2. IP Address Scheme

No.	Rooms	Network address	IP address	Subnet mask	Default gateway
1	IT and Service Room	192.168.1.0/28	192.168.1.2 s/d 192.168.1.3	255.255.255.0	192.168.1.1
2	Safety Room	192.168.2.0/28	192.168.2.2 s/d 192.168.2.3	255.255.255.0	192.168.2.1
3	Financial and Billing Room	192.168.6.0/28	192.168.6.2 s/d 192.168.6.4	255.255.255.0	192.168.6.1
4	Documentation Room	192.168.5.0/28	192.168.5.2 s/d 192.168.5.4	255.255.255.0	192.168.5.1
5	Rail and Bridges Room	192.168.3.0/28	192.168.3.2 s/d 192.168.3.5	255.255.255.0	192.168.3.1
6	HR and General Room	192.168.4.0/28	192.168.4.2 s/d 192.168.4.5	255.255.255.0	192.168.4.1

3.4. ACLs design

The following table below is the access control list (ACLs) design that will be applied in this research:

Table 3. ACLs Design

No.	Rooms	Cannot access
1	HR and General Room	IT Server
2	All rooms except the IT room	Internet (ISP)
3	Financial Room	IT Server

3.5. Frame Relay Design

The researcher designed frame relay from PT. KAI Palembang headed to PT. KAI Central in Jakarta. The researcher added a cloud as a media to connect of two networks with a WAN shell, where the design is as follows

Table 4. Frame Relay Design

No.	Router	IP Address	DLCI
1	Palembang	10.1.1.1/24	100
2	Jakarta	10.1.1.2/24	200

3.6. VLAN Configure on switch in the IT room

To give the identity of a VLAN or VLAN identity number is called a VLAN ID. Used to mark related VLAN, by configuring it as follows:

Figure 3. VLAN Configure on a switch

1) Configure the access link interface to the PC

The interface configuration to the PC aim to access the VLAN ID that was created on the switch. Then to connect the interface using an access link command used to connect a computer with switch access links is a configured switch port.

Switch (config) #int fa0 / 2

Switch (config-if) #switchport access vlan 10