跟讀練習: FREE CCNA Lab 001: Basic Router Security Configuration 1 - 通過影片學習英語口語
選擇練習模式
每種模式都會開啟全屏練習室。
108 句
如果句子過短或過長，請點選 Edit 進行調整。
1
Welcome to this free Cisco CCNA Packet Tracer Practice Lab.
2
You can download the lab file from the link in the description.
3
See if you can complete the lab yourself first, and then continue watching this video if you have any trouble,
4
or watch it afterwards to check your solution.
5
In this lab, we will be working with two routers, R1 and R2.
6
We will configure basic security on the routers by using the enable password, which is used to enter privileged exec mode,
7
also known as enable mode.
8
I will only work with one of the routers in this video for the sake of time,
9
but I highly recommend that you perform the configurations on both of the routers for practice.
10
Repetition is essential to become familiar with the command Handline Interface or CLI.
11
Step 1 is to connect the two routers by their Gigabit Ethernet 00 interfaces.
12
I will refer to these as the Gig00 interfaces.
13
Click on Connections in the bottom left and select the cable.
14
Connect it to the Gig00 interface on R1 and then R2.
15
There we have it!
16
Step 1 is complete.
17
Step 2 is to set the host names according to the network diagram, that is to R1 and R2.
18
Click on each router and then select CLI to access the command line interface from which we will configure each router.
19
The current hostname for each router is displayed here.
20
As you can see, each router is currently named Router.
21
To change the hostname of a router, we must enter
22
Global Configuration mode, however to get there we must first enter
23
Privileged Exec mode.
24
This is achieved by using the Enable command.
25
To demonstrate a shortcut, I will use the exit command to return to the previous exec mode.
26
Notice that you can enter privileged exec mode by simply typing en.
27
You can also type en and then use tab to autocomplete it to enable, but this isn't necessary, en alone is fine.
28
E, however, is too short, and we are told this is an ambiguous command.
29
This is because there are other potential commands that begin with E, which we can see by typing E and then a question mark.
30
As you can see, there are two potential commands, enable and exit.
31
So if you just enter E, the router doesn't know which command you mean.
32
However, enable is the only command beginning with en, so en is all the router needs to know which command you mean.
33
Now that we are in privileged exec mode, we can use the configure terminal command to get to global configuration mode.
34
If you want to use shortcuts again as we did with enable and en, the shortest version of the configure terminal command is conf t.
35
From here we can set the hostname of the router.
36
This is done with the hostname command.
37
I will enter hostname R1.
38
As you can see, the hostname has changed from router to R1.
39
Change the hostname on R2 as well, and then step 2 is complete.
40
Step 3 is to set the enable password on each router to Cisco.
41
The enable password is used to enter privileged exec mode, which as I mentioned before is also called enable mode.
42
Previously we had no password set, so we were able to enter privileged exec mode without any password.
43
Now we are going to protect privileged exec mode so that only administrators can access it.
44
The command is simple, and it is done in global configuration mode, which we are already in.
45
Type enable password cisco.
46
That's it.
47
Now let's test it out.
48
From here I will use the exit command twice.
49
Once to bring me back to privileged exec mode, and then once again to bring me back to exec mode.
50
Now I will use the enable command again.
51
However, this time I am asked for a password.
52
The characters do not appear as I type.
53
However, if I type the password Cisco correctly and press enter, I am brought to privileged exec mode.
54
Now let's see what happens if I fail to enter the correct password.
55
I enter the wrong password once, twice, and then three times before being rejected for having bad secrets.
56
Now I will try again with the correct password, and I'm in.
57
Step 3 is now complete.
58
Step 4 is simply to view the password in the running configuration.
59
The running configuration is the current configuration of the router, whether or not you have actually saved it.
60
If you turn off the router without saving the running configuration, you will lose any changes.
61
If you want to keep your changes, you will save them to what's called the startup configuration.
62
That will be for another lab.
63
To view the running configuration, use the show running config command from privileged exec mode, which we are already in.
64
You can abbreviate it to, for example, shrun.
65
Enter the command, and you can see the password right here, with the exact command we used before, enable password cisco.
66
Step 4 asks if the password is encrypted, meaning translated into an unreadable code,
67
to protect it from being discovered by people who should not know the password.
68
As you can see it is not encrypted, it is written in clear text right here,
69
Cisco, so the answer is no. Step 4 is now complete.
70
Step 5 is to enable password encryption on the router.
71
We can protect passwords by encrypting them to render them unreadable.
72
This is done from global configuration mode with the command service password hyphen encryption.
73
I will enter the command and now step 5 is complete.
74
Step 6 is to once again view the running config.
75
I will use the same command as before, and now let's check the password.
76
However, the command doesn't work.
77
That is because we are currently in global configuration mode, and showrunnconfig must be entered from privileged exec mode.
78
Now, I could type exit to drop back to privileged exec mode, and then enter the command.
79
But there is one more way.
80
If I type do in front of the command, I can enter it from global configuration mode.
81
Do show running config.
82
There we go.
83
Let's look at the password.
84
You can see here enable password followed by a 7 and then a string of other numbers.
85
The password has successfully been encrypted.
86
Although we didn't type this 7 when we entered the command, it refers to the type of encryption used.
87
There are other types as well, but that's not something to worry about now.
88
The string of numbers that follow are the password Cisco, encrypted to be unreadable, so that anyone looking over our shoulder can't read the password.
89
Keep in mind that the encryption used in the Service Password Encryption command isn't very secure and can be cracked,
90
but this at least renders the password safe from someone simply glancing over your shoulder.
91
Step 6 is complete.
92
Step 7 is to disable password encryption.
93
We enabled password encryption with the Service Password Encryption command.
94
Now we will simply type no, followed by the same command.
95
No Service Password Encryption.
96
That's it.
97
Step 7 is now complete.
98
Step 8 is once again to view the password in the running configuration.
99
This time I'll exit down to privileged exec mode and type show running config to view the running configuration.
100
As you can see, the password is still encrypted.
101
Why is that, even though we disabled password encryption?
102
Well, disabling password encryption will prevent future passwords from being encrypted.
103
However, it does not unencrypt passwords that are already encrypted.
104
So the answer to step 8 is yes, the password is encrypted.
105
Step 8 and the lab are both now complete.
106
If you want to support my channel, I accept Bitcoin donations via the address in the description.
107
I am also a Brave verified publisher and accept BAT donations in the Brave browser.
108
Thank you.
同頻道
FOR YOU
推薦影片
C11
76 句
GC FID Operational Tutorial
Daily ConversationUniversity Students
C11
284 句
How to Become Your Own ISP
Daily ConversationUniversity StudentsWorking Adults
C11
54 句
Traceroute: You're Probably Reading the Results Wrong
Daily ConversationUniversity StudentsWorking Adults
B22
8 句
Every Cybersecurity Beginner Should Watch This First (Networking Fundamentals)
Daily ConversationUniversity StudentsWorking Adults
C11
68 句
GitHub Copilot now controls your command line...
Daily ConversationUniversity StudentsWorking Adults
C1101 句
BGP Overview
Daily ConversationUniversity StudentsWorking Adults
C11
64 句
What is SCADA?
Daily ConversationUniversity StudentsWorking Adults
C13
9 句
Rate Limiter System Design in Under 60 Seconds #techprep #programming #systemdesign
Daily ConversationUniversity StudentsWorking Adults
C11
537 句
Understand Microsoft Entra ID | AZ-104 | Episode 2
Daily ConversationUniversity StudentsWorking Adults
C11
176 句
Every Networking Concept Explained | Networking 101 (2026)
Daily ConversationUniversity StudentsWorking Adults
C11
276 句
Civil 3D course for beginners - Part 2 of 3
Daily ConversationUniversity Students
本課的詞彙與口語要點
這節口語課以影片“FREE CCNA Lab 001: Basic Router Security Configuration 1”為素材。 影片中反覆出現的詞有：password, command, mode, router, step。 這段影片共有 108 個句子、1307 個單詞可供跟讀。 講話部分時長為 9:58。 說話人語速平穩，每分鐘約 131 個詞，很適合跟讀。 只有 78% 的單詞屬於英語最常用的 3,000 詞，詞彙難度較高。
影片中的重點詞彙
影片中 15 個值得學習的單詞，附發音和釋義：
| 單詞 | 發音 | 釋義 |
|---|---|---|
| password 名詞 | /ˈpæs.wɜɹd/ | 密碼 /密碼, 口令 |
| configuration 名詞 | /kənˌfɪɡ.əˈɹeɪ̯.ʃən/ | 編排 /編排, 配置 |
| privilege 名詞 | /ˈpɹɪv.(ɪ.)lɪd͡ʒ/ | 特權 /特權 |
| encryption 名詞 | /ɪnˈkɹɪpʃən/ | 加密 |
| exit 名詞 | /ˈɛɡzət/ | 離開 /離開, 退場 /退場 |
| interface 名詞 | /ˈɪn(t)ɚˌfeɪs/ | 介面 |
| refer 動詞 | /ɹɪˈfɜː/ | 談到 /談到 |
| select 動詞 | /sɪˈlɛkt/ | 選 /選, 挑選 /挑選 |
| string 名詞 | /stɹɪŋ/ | 線 /線 |
| connect 動詞 | /kəˈnɛkt/ | 連線 /連線 |
| terminal 名詞 | /ˈtɚmɪnəl/ | 航站, 航廈 /航廈 |
| donation 名詞 | /doʊˈneɪʃən/ | 捐贈 /捐贈 |
| afterwards 副詞 | /ˈæf.tɚ.wɚdz/ | 然後 /然後 |
| crack 名詞 | /kɹæk/ | 裂縫 /裂縫, 裂紋 /裂紋 |
| discover 動詞 | /dɪˈskʌvə/ | 發現 /發現, 發覺 /發覺 |
影片中出現的短語動詞
| 單詞 | 釋義 |
|---|---|
| turn off 動詞 | 關 /關, 關掉 /關掉 |
影片中的語法
說話人最常用的結構，並附上影片中的原話：
| 結構 | 影片中的用法 |
|---|---|
| 被動語態 be + 過去分詞 — 強調發生了什麼，而不是誰做的 | is displayed · is achieved · are told |
| 現在完成時 have/has + 過去分詞 — 過去發生但與現在仍有關聯的事 | has changed · have actually saved |
| 定語從句 who / which + 從句 — 補充說明人或事物 | password, which is · people who should |
需要注意的發音
說話人用了 8 次縮略和弱讀形式，例如 doesn't, isn't, can't。請按聽到的簡短形式來說。
- “sh” 和 “zh” 音: configuration /kənˌfɪɡ.əˈɹeɪ̯.ʃən/, encryption /ɪnˈkɹɪpʃən/, donation /doʊˈneɪʃən/, publisher /ˈpʌblɪʃɚ/, shortcut /ˈʃɔːtkʌt/
- 長單詞——注意重音位置: configuration /kənˌfɪɡ.əˈɹeɪ̯.ʃən/, successfully /səkˈsɛs.fə.li/, administrator /ədˈmɪn.ɪ.stɹeɪ.tɚ/, ambiguous /æmˈbɪɡ.ju.əs/, abbreviate /əˈbɹi.vi.eɪt/
中文母語者容易讀錯的音：
- /v/ — 不要讀成 /w/，上齒輕觸下唇: privilege /ˈpɹɪv.(ɪ.)lɪd͡ʒ/, discover /dɪˈskʌvə/, verify /ˈvɛɹɪfaɪ/, abbreviate /əˈbɹi.vi.eɪt/
- 詞尾子音 — 要讀清楚，後面不要加母音: password /ˈpæs.wɜɹd/, privilege /ˈpɹɪv.(ɪ.)lɪd͡ʒ/, exit /ˈɛɡzət/, interface /ˈɪn(t)ɚˌfeɪs/, select /sɪˈlɛkt/
- /r/ 和 /l/ 的區別: privilege /ˈpɹɪv.(ɪ.)lɪd͡ʒ/, correctly /kəˈɹɛk(t).li/, translate /tɹænzˈleɪt/
如何用這段影片練習
- 先完整聽一遍影片，不要開口，記下不認識的單詞。
- 用正常速度逐句跟讀，每句重複到你的節奏與說話人一致為止。
- 錄下自己的聲音並與原聲對比，特別注意 password, configuration, privilege 這類單詞。
什麼是跟讀法？
跟讀法 (Shadowing) 是一種有科學依據的語言學習技巧，最初開發用於專業口譯員的培訓，並由多語言者Alexander Arguelles博士普及。這個方法簡單而強大：您在聽英語母語原聲的同時立即大聲重複——就像是一個延遲1-2秒緊跟說話者的影子。與被動聽力或語法練習不同，跟讀法強迫您的大腦和口腔肌肉同時處理並模模擬實的講話模式。研究表明它能顯著提高發音準確性，語調，節奏，連讀，聽力理解和口語流利度——使其成為雅思口語備考和真實英語交流最有效的方法之一。