Privileged EXEC mode is the Cisco IOS CLI operational mode for advanced show commands and operational actions. Enter it with enable; the prompt changes from hostname> to hostname#. Unlike configuration modes, EXEC modes do not directly change device configuration. section 5.2.1 section 5.5
Use privileged EXEC mode to:
- Run show commands, such as show clock, to inspect device status and configuration. section 5.2.1
- Run operational commands such as reload, save the configuration, and move or delete files. section 5.2.1 section 5.5
- Enter global configuration mode with configure terminal, where configuration changes become possible. section 5.2.2
- Return to user EXEC mode with disable, although returning is rarely necessary because privileged EXEC mode includes user EXEC capabilities. section 5.2.1
- Return from configuration modes with end, exit, Ctrl-C, or Ctrl-Z; use do before an EXEC command while remaining in configuration mode. section 5.2.3 section 5.2.2
Entering privileged EXEC mode
Router> enable Router# reload Proceed with reload? [confirm] The enable command changes the prompt to Router#. The reload command is rejected in user EXEC mode but works in privileged EXEC mode and can restart the device, so confirm the command only when intended. section 5.2.1
Securing access
Protect privileged EXEC mode because it provides access to configuration changes through global configuration mode. Prefer enable secret over enable password: enable password is stored in cleartext unless service password-encryption applies weak type 7 encryption, while enable secret stores a hash. If both exist, only the enable secret authenticates access. section 5.4 section 5.4.1 section 5.4.2
Router> enable #1 Router# reload #2 Proceed with reload? [confirm] #3 %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command. #4 #1 Enters privileged EXEC mode #2 Uses the reload command again #3 Hit enter to reload the device. #4 A message indicates that the device will reload.
Follow the annotated CLI sequence from user EXEC mode through enable to a privileged operational command. section 5.2.1
