Devices running Cisco
IOS software maintain a running configuration that determines the configuration
state of the device. Changes to the running configuration alter the behavior of
the device. Because Cisco IOS software allows multiple users to change the
running configuration via the device CLI (including the device console and
telnet Secure Shell (SSH)), in some operating environments it would be
beneficial to prevent multiple users from making concurrent changes to the
Cisco IOS running configuration. Temporarily limiting access to the Cisco IOS
running configuration prevents inadvertent conflicts or cases where two users
attempt to configure the same portion of the running configuration.
The Exclusive
Configuration Change Access feature (also called the “Configuration Lock”
feature) allows you to have exclusive change access to the Cisco IOS running
configuration, preventing multiple users from making concurrent configuration
changes.
This feature provides
exclusive change access to the Cisco IOS running configuration from the time
you enter global configuration mode by using the
configure
terminal command. This gives the effect of a
“configuration lock,” preventing other users from changing the Cisco IOS
running configuration. The configuration lock is automatically released when
the user exits Cisco IOS configuration mode.
The Exclusive
Configuration Change Access feature is enabled using the
configuration
mode
exclusive command in global configuration mode.
Exclusive configuration change access can be set to
auto , so that
the Cisco IOS configuration mode is locked whenever anyone uses the
configure
terminal command, or it can be set to
manual , so that
the Cisco IOS configuration mode is locked only when the
configure
terminal
lock command is issued.
The Exclusive
Configuration Change Access feature is complementary with the locking mechanism
for the Configuration Replace and Configuration Rollback feature introduced in
Cisco IOS Release 12.2(25)S and 12.3(7)T.