# Cisco Configuration Mode Exclusive

**URL:** https://forum.networklessons.com/t/cisco-configuration-mode-exclusive/924
**Category:** Lessons Discussion
**Created:** [December 22, 2016, 2:09pm UTC](https://forum.networklessons.com/t/cisco-configuration-mode-exclusive/924 "2016-12-22T14:09:28Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [December 22, 2016, 2:09pm UTC](https://forum.networklessons.com/t/cisco-configuration-mode-exclusive/924/1 "2016-12-22T14:09:28Z")

</div>

This topic is to discuss the following lesson:

> **[Cisco Configuration Mode Exclusive](https://networklessons.com/miscellaneous/cisco-configuration-mode-exclusive)**
>
> This lesson explains how to use the Configuration Mode Exclusive command to "lock" your configuration mode on Cisco IOS routers.

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [August 20, 2014, 10:04pm UTC](https://forum.networklessons.com/t/cisco-configuration-mode-exclusive/924/2 "2014-08-20T22:04:41Z")

</div>

Hello Rene,

what will happen when I configure “configuration mode exclusive auto” when there is already another user in the global config mode? Will he be kicked from the global config mode or is he not allowed to enter any configure command?

Kind regards,  
Bülent

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [August 21, 2014, 7:09am UTC](https://forum.networklessons.com/t/cisco-configuration-mode-exclusive/924/3 "2014-08-21T07:09:49Z")

</div>

Hi Bülent,

I haven’t tried it but I think nothing will happen. It doesn’t kick you out of the configuration mode but prevents you from entering it. The first time you enter the configuration mode after enabling it you will “lock” the config mode, not sooner.

Rene

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [August 21, 2014, 8:29am UTC](https://forum.networklessons.com/t/cisco-configuration-mode-exclusive/924/4 "2014-08-21T08:29:17Z")

</div>

Again a great configuration feature I didn’t know about.  
I immediately applied it on my home routers and tried to do the same  
on my ASA5505 and catalyst switch, but the “configuration mode”  
is not available ☹

Although it’s very strange that the “show configuration lock” is working.  
Perhaps configuration locking is possible on a catalyst only via a ACS server.

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [August 21, 2014, 8:32am UTC](https://forum.networklessons.com/t/cisco-configuration-mode-exclusive/924/5 "2014-08-21T08:32:08Z")

</div>

PS  
I strongly advise to enable the “exec-timout x x” feature on the vty lines when using the configuration lock.

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [August 21, 2014, 1:09pm UTC](https://forum.networklessons.com/t/cisco-configuration-mode-exclusive/924/6 "2014-08-21T13:09:47Z")

</div>

Hi Rene,

I guess the question is..given that there are already two person playing on the config mode (person A and B). Person A configured the “configure mode exclusive” which is not originally on the config.. what will happen to Person B? can he still commit changes? Or he will be thrown back to enable mode?

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [August 24, 2014, 12:52pm UTC](https://forum.networklessons.com/t/cisco-configuration-mode-exclusive/924/7 "2014-08-24T12:52:44Z")

</div>

Hi Kelvine,

They will still be in configuration mode, even though one of them configured the command. The locking of the configuration mode happens once you type “configure terminal”…not when you are “in” the configuration mode.

Rene

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [August 24, 2014, 12:54pm UTC](https://forum.networklessons.com/t/cisco-configuration-mode-exclusive/924/8 "2014-08-24T12:54:13Z")

</div>

That is a very good idea indeed, thanks for sharing Rikwin!

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [August 28, 2014, 7:54am UTC](https://forum.networklessons.com/t/cisco-configuration-mode-exclusive/924/9 "2014-08-28T07:54:58Z")

</div>

Hi Rikwin,

I think it’s only available on the routers. It works on IOS, IOS XE and XR. I googled for the ASA but couldn’t find anything…too bad.

Rene
