System Management | 73A two types of locks can be set: auto and manual.• Set an auto-lock using the command configuration mode exclusive auto from CONFIGURATIONmode. When you set an auto-lock, every time a user is in CONFIGURATION mode all other users aredenied access. This means that you can exit to EXEC Privilege mode, and re-enterCONFIGURATION mode without having to set the lock again.• Set a manual lock using the command configure terminal lock from CONFIGURATION mode. Whenyou configure a manual lock, which is the default, you must enter this command time you want to enterCONFIGURATION mode and deny access to others.Figure 4-9. Locking CONFIGURATION modeIf another user attempts to enter CONFIGURATION mode while a lock is in place, Message 1 appears ontheir terminal.If any user is already in CONFIGURATION mode when while a lock is in place, Message 2 appears ontheir terminal.Viewing the Configuration Lock StatusIf you attempt to enter CONFIGURATION mode when another user has locked it, you may view whichuser has control of CONFIGURATION mode using the command show configuration lock from EXECPrivilege mode.Message 1 CONFIGURATION mode Locked Error% Error: User "" on line console0 is in exclusive configuration modeMessage 2 Cannot Lock CONFIGURATION mode Error% Error: Can't lock configuration mode exclusively since the following users are currentlyconfiguring the system:User "admin" on line vty1 ( 10.1.1.1 )Note: The CONFIGURATION mode lock corresponds to a VTY session, not a user. Therefore, if youconfigure a lock and then exit CONFIGURATION mode, and another user enters CONFIGURATIONmode, when you attempt to re-enter CONFIGURATION mode, you are denied access even though youare the one that configured the lock.Note: If your session times out and you return to EXEC mode, the CONFIGURATION mode lock isunconfigured.R1(conf)#configuration mode exclusive autoBATMAN(conf)#exit3d23h35m: %RPM0-P:CP %SYS-5-CONFIG_I: Configured from console by consoleR1#config! Locks configuration mode exclusively.R1(conf)#
