Hands-on Simulation: Networking Lab & Linux Lab
Integrated infrastructure engineering lab aligned with Cisco CCNA, CompTIA Network+, RedHat RHCSA, and Linux Foundation LFCS standards with 15 progressively locked levels. Complete each level sequentially to unlock the next challenge!
🧮8-Bit Binary Flipper & Subnet Analyzer
Click each bit to toggle (0/1). Helps calculate netmask & wildcard octets.
Visual Topology & Animated Packet Flow
Path Status: ACTIVELevel 1: Admin Office LAN Gateway Allocation (/24)
CURRENT SERVER ISSUE ALERT
SSH key login is rejected because `/root/.ssh/id_ed25519` has overly open `0644 (-rw-r--r--)` permissions!
MANDATORY TASK TO PERFORM
Run the `chmod` command to change the permissions of `/root/.ssh/id_ed25519` to `600` (owner read/write only).
Simulation Scenario Catalog & Self-Paced Training Curriculum (Levels 1 to 15)
Aligned with SKKNI, Vocational Competencies, MikroTik MTCNA/MTCRE, Cisco CCNA, CompTIA Network+, RedHat RHCSA EX200, and Linux Foundation LFCS.
Network Foundations & Linux Essentials
Master IPv4 /24 to /26 subnetting, LAN gateways, SSH private key permissions (chmod 600), directory ownership (chown -R), and daemon restarts (systemctl restart).
VLSM, DMZ Subnets & Incident Mitigation
PTP links /30, DMZ /29 offset .8, VLSM /27 offset .32, /28 troubleshooting, systemctl enable boot, 100% disk vacuum (journalctl --vacuum-size), UFW firewall (ufw allow), and rogue process termination (kill -9).
OSPF Wildcard, BGP/CGNAT & RHCSA Master
OSPF Wildcard Mask /26 (0.0.0.63), campus supernetting /22, CGNAT PPPoE /21, SSH brute-force audit (grep auth.log), kernel default route (ip route), listening socket audit (ss -tulpn), Nginx test (nginx -t), SSH hardening (sshd_config), Docker container status (docker ps), DNS lookup (dig +short), and filesystem mount validation (mount -a).
Full Lab Scenario Curriculum (Network Lab)
Level 1: Admin Office LAN Gateway Allocation (/24)
The Administration building needs a LAN for 200 PCs using standard block 192.168.10.0/24.
Level 2: Floor 1 Network Division for 100 PCs (/25)
Floor 1 needs a subnet for 100 PCs by splitting a /24 block in half into 192.168.20.0/25.
Level 3: 50-PC Exam Lab VLAN Segmentation (/26)
VLAN 30 for the Exam Lab requires addressing for 50 PCs using 192.168.30.0/26.
Level 4: Inter-Router Point-to-Point WAN Link (/30)
The Point-to-Point fiber link between Core and Branch Routers only needs 2 IPs using 10.10.10.0/30.
Level 5: DMZ Public IP Sub-Block (/29 Starting at .8)
The ISP assigned the second /29 sub-block 203.0.113.8/29 for your DMZ Firewall and Web Servers.
Level 6: Finance Division VLSM Block (/27 Starting at .32)
After .0/27 was assigned to HR, Finance (25 PCs) receives the second block: 192.168.40.32/27.
Level 7: Troubleshoot Client IP 192.168.50.37/28 (Find Network ID!)
A client PC has IP 192.168.50.37/28 but cannot reach the internet due to a wrong Gateway IP. Find the exact subnet boundaries containing .37!
Level 8: OSPF Backbone Area Wildcard Mask Calculation (/26)
When advertising 10.20.30.64/26 into OSPF or Cisco ACLs, you must calculate the Wildcard Mask (255.255.255.255 minus the Subnet Mask).
Level 9: 1,000-Host Campus Wi-Fi Supernetting (/22)
The campus roaming Wi-Fi requires over 1,000 IPs in a single VLAN using 172.16.8.0/22 (combining four /24 blocks).
Level 10: Final ISP CGNAT Architecture for 2,000 Subscribers (/21)
As an ISP Network Architect, you allocate CGNAT block 100.64.16.0/21 (RFC 6598) to serve up to 2,000 FTTH PPPoE subscribers.
Level 11: Class B Private Enterprise Architecture for 4,000 Hosts (/20)
A multinational HQ requires an enterprise segment for 4,000 endpoints using RFC 1918 Class B block 172.20.16.0/20.
Level 12: Cross-Octet OSPF Route Summary Wildcard Mask (/22)
An OSPF ABR summarizes 4 branch networks into 10.100.4.0/22. You must calculate the exact OSPF Wildcard Mask (255.255.255.255 minus /22 Netmask)!
Level 13: Troubleshoot PoE IP Camera 192.168.88.105/27 (Find Subnet Boundaries!)
An IP Camera at 192.168.88.105/27 fails to reach the NVR on another VLAN due to a wrong Gateway. Find the exact /27 subnet boundaries containing .105!
Level 14: eBGP Dual-Homed Public Prefix Advertisement (/23)
Your Data Center advertises public IPv4 block 198.51.100.0/23 over eBGP to two Tier-1 upstream ISPs.
Level 15: Master Exam — Data Center Spine-Leaf Fabric for 8,000 VMs (/19)
Final Master Challenge! Design the primary supernet 10.240.32.0/19 for a hyperscale Proxmox & Kubernetes fabric hosting over 8,000 VMs/containers.
Teacher Dashboard & PDF Certificate
KalkuNet Simulation Lab • Supported by PT Solusi Tekno Digital
Official IT Infrastructure Competency Certificate
SERTIFIKAT KELULUSAN PRAKTIKUM
Diberikan secara resmi kepada:
Nama Siswa / Mahasiswa
NIM / Kelas: XII-TKJ • Instansi: SMK / Perguruan Tinggi
Kompetensi Rekayasa yang Dikuasai:
- SKKNI J.611000.004.01 Subnetting IPv4 CIDR /24 - /30
- MTCNA & CCNA Point-to-Point & Gateway Addressing
- MTCRE OSPF Wildcard Mask & Multi-Table Routing
- RedHat RHCSA EX200 Systemd Daemon & Storage Vacuum
- Linux Foundation LFCS Security Hardening (UFW & Chmod)
- Troubleshooting Kernel Routing, SS Socket & Nginx Ingress
Kode Serial Sertifikat:
KN-CERT-2026-D51390
Divalidasi via https://kalkunet.com
Supported by PT Solusi Tekno Digital
Tim Penguji & Kurikulum KalkuNet