Management | 67
You can set two types of locks: auto and manual.
• Set an auto-lock using the
configuration mode exclusive auto command from CONFIGURATION mode.
When you set an auto-lock, every time a user is in CONFIGURATION mode, all other users are denied
access. This means that you can exit to EXEC Privilege mode, and re-enter CONFIGURATION mode,
without having to set the lock again.
• Set a manual lock using the
configure terminal lock command from CONFIGURATION mode. When
you configure a manual lock, which is the default, you must enter this command each time you want to
enter CONFIGURATION mode and deny access to others.
Figure 4-9. Locking CONFIGURATION mode
If another user attempts to enter CONFIGURATION mode while a lock is in place, Message 1 appears on
their terminal.
If any user is already in CONFIGURATION mode when a lock is placed, Message 2 appears on their
terminal.
Viewing the Configuration Lock Status
If you attempt to enter CONFIGURATION mode when another user has locked it, you may view which
user has control of CONFIGURATION mode using the
show configuration lock command from EXEC
Privilege mode.
Message 1 CONFIGURATION Mode Locked Error
% Error: User "" on line console0 is in exclusive configuration mode
Message 2 Cannot Lock CONFIGURATION Mode Error
% Error: Can't lock configuration mode exclusively since the following users are currently
configuring the system:
User "admin" on line vty1 ( 10.1.1.1 )
Note: CONFIGURATION mode lock corresponds to a VTY session, not a user. Therefore, if you configure
a lock and then exit CONFIGURATION mode, and another user enters CONFIGURATION mode, when
you attempt to re-enter CONFIGURATION mode, you are denied access even though you are the one
that configured the lock.
Note: If your session times out and you return to EXEC mode, the CONFIGURATION mode lock is
unconfigured.
FTOS(conf)#configuration mode exclusive auto
BATMAN(conf)#exit
3d23h35m: %RPM0-P:CP %SYS-5-CONFIG_I: Configured from console by console
FTOS#config
! Locks configuration mode exclusively.
FTOS(conf)#
To Next Page
Loading...
