User EXEC mode is the initial, least-privileged Cisco IOS command-line mode. Its hostname> prompt permits basic status checks but blocks intrusive actions such as changing configuration or restarting the device. section 5.2.1 section 5.5
Use user EXEC mode to:
- View operational information with commands such as show clock. section 5.2.1
- Explore valid commands, keywords, and completions with the question mark, Tab, or abbreviated commands. section 5.2.4
- Recognize the boundary between observation and control: reload fails here, while enable changes to privileged EXEC mode. section 5.2.1
Checking access and escalating
At Router>, enter show clock to inspect the device time. Entering reload produces an IOS error. Enter enable; the prompt changes to Router#, and reload becomes available, subject to any configured password.
R1(config)# enable password ccna #1 R1(config)# exit #2 R1# disable #3 R1> enable #4 Password: #5 R1# #1 Configures an enable password #2 Returns to privileged EXEC mode #3 Returns to user EXEC mode #4 Returns to privileged EXEC mode #5 The password is hidden as you type it.
Follow the prompt sequence showing an enable password configured in global configuration mode, then required when entering privileged EXEC mode. section 5.4.1
