跟读练习: FREE CCNA Lab 001: Basic Router Security Configuration 1 - 通过视频学习英语口语
选择练习模式
每种模式都会打开全屏练习室。
108 句
如果句子过短或过长，请点击 Edit 进行调整。
1
Welcome to this free Cisco CCNA Packet Tracer Practice Lab.
2
You can download the lab file from the link in the description.
3
See if you can complete the lab yourself first, and then continue watching this video if you have any trouble,
4
or watch it afterwards to check your solution.
5
In this lab, we will be working with two routers, R1 and R2.
6
We will configure basic security on the routers by using the enable password, which is used to enter privileged exec mode,
7
also known as enable mode.
8
I will only work with one of the routers in this video for the sake of time,
9
but I highly recommend that you perform the configurations on both of the routers for practice.
10
Repetition is essential to become familiar with the command Handline Interface or CLI.
11
Step 1 is to connect the two routers by their Gigabit Ethernet 00 interfaces.
12
I will refer to these as the Gig00 interfaces.
13
Click on Connections in the bottom left and select the cable.
14
Connect it to the Gig00 interface on R1 and then R2.
15
There we have it!
16
Step 1 is complete.
17
Step 2 is to set the host names according to the network diagram, that is to R1 and R2.
18
Click on each router and then select CLI to access the command line interface from which we will configure each router.
19
The current hostname for each router is displayed here.
20
As you can see, each router is currently named Router.
21
To change the hostname of a router, we must enter
22
Global Configuration mode, however to get there we must first enter
23
Privileged Exec mode.
24
This is achieved by using the Enable command.
25
To demonstrate a shortcut, I will use the exit command to return to the previous exec mode.
26
Notice that you can enter privileged exec mode by simply typing en.
27
You can also type en and then use tab to autocomplete it to enable, but this isn't necessary, en alone is fine.
28
E, however, is too short, and we are told this is an ambiguous command.
29
This is because there are other potential commands that begin with E, which we can see by typing E and then a question mark.
30
As you can see, there are two potential commands, enable and exit.
31
So if you just enter E, the router doesn't know which command you mean.
32
However, enable is the only command beginning with en, so en is all the router needs to know which command you mean.
33
Now that we are in privileged exec mode, we can use the configure terminal command to get to global configuration mode.
34
If you want to use shortcuts again as we did with enable and en, the shortest version of the configure terminal command is conf t.
35
From here we can set the hostname of the router.
36
This is done with the hostname command.
37
I will enter hostname R1.
38
As you can see, the hostname has changed from router to R1.
39
Change the hostname on R2 as well, and then step 2 is complete.
40
Step 3 is to set the enable password on each router to Cisco.
41
The enable password is used to enter privileged exec mode, which as I mentioned before is also called enable mode.
42
Previously we had no password set, so we were able to enter privileged exec mode without any password.
43
Now we are going to protect privileged exec mode so that only administrators can access it.
44
The command is simple, and it is done in global configuration mode, which we are already in.
45
Type enable password cisco.
46
That's it.
47
Now let's test it out.
48
From here I will use the exit command twice.
49
Once to bring me back to privileged exec mode, and then once again to bring me back to exec mode.
50
Now I will use the enable command again.
51
However, this time I am asked for a password.
52
The characters do not appear as I type.
53
However, if I type the password Cisco correctly and press enter, I am brought to privileged exec mode.
54
Now let's see what happens if I fail to enter the correct password.
55
I enter the wrong password once, twice, and then three times before being rejected for having bad secrets.
56
Now I will try again with the correct password, and I'm in.
57
Step 3 is now complete.
58
Step 4 is simply to view the password in the running configuration.
59
The running configuration is the current configuration of the router, whether or not you have actually saved it.
60
If you turn off the router without saving the running configuration, you will lose any changes.
61
If you want to keep your changes, you will save them to what's called the startup configuration.
62
That will be for another lab.
63
To view the running configuration, use the show running config command from privileged exec mode, which we are already in.
64
You can abbreviate it to, for example, shrun.
65
Enter the command, and you can see the password right here, with the exact command we used before, enable password cisco.
66
Step 4 asks if the password is encrypted, meaning translated into an unreadable code,
67
to protect it from being discovered by people who should not know the password.
68
As you can see it is not encrypted, it is written in clear text right here,
69
Cisco, so the answer is no. Step 4 is now complete.
70
Step 5 is to enable password encryption on the router.
71
We can protect passwords by encrypting them to render them unreadable.
72
This is done from global configuration mode with the command service password hyphen encryption.
73
I will enter the command and now step 5 is complete.
74
Step 6 is to once again view the running config.
75
I will use the same command as before, and now let's check the password.
76
However, the command doesn't work.
77
That is because we are currently in global configuration mode, and showrunnconfig must be entered from privileged exec mode.
78
Now, I could type exit to drop back to privileged exec mode, and then enter the command.
79
But there is one more way.
80
If I type do in front of the command, I can enter it from global configuration mode.
81
Do show running config.
82
There we go.
83
Let's look at the password.
84
You can see here enable password followed by a 7 and then a string of other numbers.
85
The password has successfully been encrypted.
86
Although we didn't type this 7 when we entered the command, it refers to the type of encryption used.
87
There are other types as well, but that's not something to worry about now.
88
The string of numbers that follow are the password Cisco, encrypted to be unreadable, so that anyone looking over our shoulder can't read the password.
89
Keep in mind that the encryption used in the Service Password Encryption command isn't very secure and can be cracked,
90
but this at least renders the password safe from someone simply glancing over your shoulder.
91
Step 6 is complete.
92
Step 7 is to disable password encryption.
93
We enabled password encryption with the Service Password Encryption command.
94
Now we will simply type no, followed by the same command.
95
No Service Password Encryption.
96
That's it.
97
Step 7 is now complete.
98
Step 8 is once again to view the password in the running configuration.
99
This time I'll exit down to privileged exec mode and type show running config to view the running configuration.
100
As you can see, the password is still encrypted.
101
Why is that, even though we disabled password encryption?
102
Well, disabling password encryption will prevent future passwords from being encrypted.
103
However, it does not unencrypt passwords that are already encrypted.
104
So the answer to step 8 is yes, the password is encrypted.
105
Step 8 and the lab are both now complete.
106
If you want to support my channel, I accept Bitcoin donations via the address in the description.
107
I am also a Brave verified publisher and accept BAT donations in the Brave browser.
108
Thank you.
同频道
FOR YOU
推荐视频
C11
76 句
GC FID Operational Tutorial
Daily ConversationUniversity Students
C11
284 句
How to Become Your Own ISP
Daily ConversationUniversity StudentsWorking Adults
C11
54 句
Traceroute: You're Probably Reading the Results Wrong
Daily ConversationUniversity StudentsWorking Adults
B22
8 句
Every Cybersecurity Beginner Should Watch This First (Networking Fundamentals)
Daily ConversationUniversity StudentsWorking Adults
C11
68 句
GitHub Copilot now controls your command line...
Daily ConversationUniversity StudentsWorking Adults
C1101 句
BGP Overview
Daily ConversationUniversity StudentsWorking Adults
C11
64 句
What is SCADA?
Daily ConversationUniversity StudentsWorking Adults
C13
9 句
Rate Limiter System Design in Under 60 Seconds #techprep #programming #systemdesign
Daily ConversationUniversity StudentsWorking Adults
C11
537 句
Understand Microsoft Entra ID | AZ-104 | Episode 2
Daily ConversationUniversity StudentsWorking Adults
C11
176 句
Every Networking Concept Explained | Networking 101 (2026)
Daily ConversationUniversity StudentsWorking Adults
C11
276 句
Civil 3D course for beginners - Part 2 of 3
Daily ConversationUniversity Students
本课的词汇与口语要点
这节口语课以视频“FREE CCNA Lab 001: Basic Router Security Configuration 1”为素材。 视频中反复出现的词有：password, command, mode, router, step。 这段视频共有 108 个句子、1307 个单词可供跟读。 讲话部分时长为 9:58。 说话人语速平稳，每分钟约 131 个词，很适合跟读。 只有 78% 的单词属于英语最常用的 3,000 词，词汇难度较高。
视频中的重点词汇
视频中 15 个值得学习的单词，附发音和释义：
| 单词 | 发音 | 释义 |
|---|---|---|
| password 名词 | /ˈpæs.wɜɹd/ | 密碼 /密码, 口令 |
| configuration 名词 | /kənˌfɪɡ.əˈɹeɪ̯.ʃən/ | 編排 /编排, 配置 |
| privilege 名词 | /ˈpɹɪv.(ɪ.)lɪd͡ʒ/ | 特權 /特权 |
| encryption 名词 | /ɪnˈkɹɪpʃən/ | 加密 |
| exit 名词 | /ˈɛɡzət/ | 離開 /离开, 退場 /退场 |
| interface 名词 | /ˈɪn(t)ɚˌfeɪs/ | 接口 |
| refer 动词 | /ɹɪˈfɜː/ | 談到 /谈到 |
| select 动词 | /sɪˈlɛkt/ | 選 /选, 挑選 /挑选 |
| string 名词 | /stɹɪŋ/ | 線 /线 |
| connect 动词 | /kəˈnɛkt/ | 連接 /连接 |
| terminal 名词 | /ˈtɚmɪnəl/ | 航站, 航廈 /航厦 |
| donation 名词 | /doʊˈneɪʃən/ | 捐贈 /捐赠 |
| afterwards 副词 | /ˈæf.tɚ.wɚdz/ | 然後 /然后 |
| crack 名词 | /kɹæk/ | 裂縫 /裂缝, 裂紋 /裂纹 |
| discover 动词 | /dɪˈskʌvə/ | 發現 /发现, 發覺 /发觉 |
视频中出现的短语动词
| 单词 | 释义 |
|---|---|
| turn off 动词 | 關 /关, 關掉 /关掉 |
视频中的语法
说话人最常用的结构，并附上视频中的原话：
| 结构 | 视频中的用法 |
|---|---|
| 被动语态 be + 过去分词 — 强调发生了什么，而不是谁做的 | is displayed · is achieved · are told |
| 现在完成时 have/has + 过去分词 — 过去发生但与现在仍有关联的事 | has changed · have actually saved |
| 定语从句 who / which + 从句 — 补充说明人或事物 | password, which is · people who should |
需要注意的发音
说话人用了 8 次缩略和弱读形式，例如 doesn't, isn't, can't。请按听到的简短形式来说。
- “sh” 和 “zh” 音: configuration /kənˌfɪɡ.əˈɹeɪ̯.ʃən/, encryption /ɪnˈkɹɪpʃən/, donation /doʊˈneɪʃən/, publisher /ˈpʌblɪʃɚ/, shortcut /ˈʃɔːtkʌt/
- 长单词——注意重音位置: configuration /kənˌfɪɡ.əˈɹeɪ̯.ʃən/, successfully /səkˈsɛs.fə.li/, administrator /ədˈmɪn.ɪ.stɹeɪ.tɚ/, ambiguous /æmˈbɪɡ.ju.əs/, abbreviate /əˈbɹi.vi.eɪt/
中文母语者容易读错的音：
- /v/ — 不要读成 /w/，上齿轻触下唇: privilege /ˈpɹɪv.(ɪ.)lɪd͡ʒ/, discover /dɪˈskʌvə/, verify /ˈvɛɹɪfaɪ/, abbreviate /əˈbɹi.vi.eɪt/
- 词尾辅音 — 要读清楚，后面不要加元音: password /ˈpæs.wɜɹd/, privilege /ˈpɹɪv.(ɪ.)lɪd͡ʒ/, exit /ˈɛɡzət/, interface /ˈɪn(t)ɚˌfeɪs/, select /sɪˈlɛkt/
- /r/ 和 /l/ 的区别: privilege /ˈpɹɪv.(ɪ.)lɪd͡ʒ/, correctly /kəˈɹɛk(t).li/, translate /tɹænzˈleɪt/
如何用这段视频练习
- 先完整听一遍视频，不要开口，记下不认识的单词。
- 用正常速度逐句跟读，每句重复到你的节奏与说话人一致为止。
- 录下自己的声音并与原声对比，特别注意 password, configuration, privilege 这类单词。
什么是跟读法？
跟读法 (Shadowing) 是一种有科学依据的语言学习技巧，最初开发用于专业口译员的培训，并由多语言者Alexander Arguelles博士普及。这个方法简单而强大：您在听英语母语原声的同时立即大声重复——就像是一个延迟1-2秒紧跟说话者的影子。与被动听力或语法练习不同，跟读法强迫您的大脑和口腔肌肉同时处理并模仿真实的讲话模式。研究表明它能显着提高发音准确性，语调，节奏，连读，听力理解和口语流利度——使其成为雅思口语备考和真实英语交流最有效的方法之一。