Introduction
簡介
Imagine you are the head of security for a high-tech research facility. One day, you discover that someone has accessed a restricted lab using a default password that was left on a door lock. If this access is not controlled immediately, sensitive research could be stolen or sabotaged, leading to disastrous consequences.
想像您是一間高科技研究機構的安全主管。有一天，您發現有人使用門鎖上遺留的預設密碼，進入了一間管制實驗室。若不立即控管這項存取，敏感的研究資料可能遭竊或遭到破壞，導致嚴重的後果。
To prevent this issue, you immediately update all door locks with stronger, unique passwords. You also install advanced security systems to monitor access and ensure that only authorized personnel can enter. For critical areas, you upgrade from simple keypads to biometric scanners, which use unique physical characteristics such as fingerprints to verify identities, providing an extra layer of security.
為防止此問題，您立即為所有門鎖更換更強、獨一無二的密碼。您也安裝了先進的安全系統來監控進出，確保只有經授權的人員可以進入。對於關鍵區域，您將簡易鍵盤升級為生物辨識掃描器，利用指紋等獨特的生理特徵來驗證身分，提供額外一層安全防護。
Just as it is vital to secure access to areas in a research facility, it is crucial to secure administrative access to network devices to secure the network infrastructure itself. Unauthorized access can compromise the entire network, leading to data breaches where sensitive information is stolen or manipulated, and to operational failures that disrupt services and halt business functions.
正如保護研究機構各區域的存取至關重要，保護網路裝置的管理存取，對確保網路基礎架構本身的安全同樣重要。未經授權的存取可能危及整個網路，導致敏感資訊遭竊或遭竄改的資料外洩事件，以及中斷服務、癱瘓業務功能的營運故障。
 | Are you ready to learn how to protect your network from potential threats? 您準備好學習如何保護您的網路免受潛在威脅了嗎？ |
In this course, you will:
在本課程中，您將：
- Learn to provide secure access to network devices: Just as you would update door locks with stronger passwords and maybe install biometric scanners in a secure facility, you will learn to upgrade to and configure stronger authorization mechanisms, such as enabling strong cryptographic passwords on network devices, to prevent unauthorized access.學習為網路裝置提供安全存取：正如您會為安全設施更換更強的門鎖密碼，甚至安裝生物辨識掃描器一樣，您將學習升級並設定更強的授權機制，例如在網路裝置上啟用強加密密碼，以防止未經授權的存取。
- Enable secure remote access using protocols such as SSH:Imagine sending sensitive documents via a secure courier service to the research facility instead of using regular mail. Similarly, you will learn to use encrypted communication methods. Enabling SSH on Cisco switches and routers ensures that data transmitted over the network is secure and protected.啟用如 SSH 等通訊協定以實現安全的遠端存取：想像透過安全的快遞服務，而非一般郵件，將敏感文件送往研究機構。同樣地，您將學習使用加密的通訊方式。在 Cisco 交換器與路由器上啟用 SSH，可確保網路上傳輸的資料受到保護且安全。
- Apply access control lists (ACLs) to restrict access to authorized users only: Think of ACLs as setting up checkpoints where only authorized personnel can pass through. You will learn to apply ACLs to virtual terminal (vty) lines, controlling who can remotely access the devices and ensuring that only trusted users are granted entry.套用存取控制清單（ACL），限制僅授權使用者可以存取：把 ACL 想像成設置檢查哨，只有經授權的人員才能通過。您將學習如何在虛擬終端機（vty）線路上套用 ACL，控管誰可以遠端存取裝置，確保只有受信任的使用者才能取得存取權限。
