TechKnowSurge
Cisco CCST Networking 5.5 Cisco CCST Networking 5.4 Cisco CCNA 2.8
VideoNetworkFree

DEMO: Modes

Cisco IOS uses a structured hierarchy of modes — User EXEC, Privileged EXEC, and Global Configuration — each with distinct access levels and commands. Knowing how to navigate between these modes is fundamental to configuring and troubleshooting Cisco switches and routers.

Complete this video to capture a CTF flag worth 1 point.

About this video

Cisco IOS structures device access into a tiered mode hierarchy, and understanding how to move through that hierarchy is a foundational skill for anyone working with Cisco equipment. The two primary modes are User EXEC and Privileged EXEC. User EXEC mode, identified by the greater-than sign in the CLI prompt, offers limited functionality and is typically used for basic troubleshooting and connectivity testing. Privileged EXEC mode, accessed by typing enable and identified by the pound sign, unlocks a much broader set of commands and serves as the entry point for configuration tasks. Typing disable returns the session to User EXEC mode when needed. Below Privileged EXEC mode lies a set of sub-modes used for progressively more specific configuration work. Global Configuration mode, entered with configure terminal, is where device-wide settings are applied — anything that affects the switch or router as a whole. When changes need to target a specific component, such as an individual interface or a console or VTY line, the administrator navigates into the appropriate sub-mode directly from Global Configuration mode. The CLI prompt updates at each level to reflect the current mode, though sub-modes for interfaces and lines share a similar prompt format, so awareness of what was entered is essential to avoid misconfiguring the wrong element. Navigating between modes is straightforward once the commands are understood. The exit command moves back one level at a time, while end and the Ctrl+Z shortcut both jump directly from any sub-mode back to Privileged EXEC mode, bypassing intermediate levels. It is also possible to move laterally between sub-modes — for example, switching directly from an interface sub-mode to a line sub-mode — without first returning to Global Configuration mode. Mastery of this navigation structure is essential because nearly all configuration and verification work on Cisco devices depends on being in the correct mode before issuing commands.

What you'll learn

What's covered

Cisco IOS Navigation

Aligned to

Cisco CCST Networking
5.5 Run basic show commands on a Cisco network device
5.4 Differentiate between different ways to access and collect data about network devices
Cisco CCNA
2.8 Describe network device management access

Key terms

User Exec Mode
The initial CLI access level on a Cisco IOS device, indicated by the greater-than sign (>), that provides limited commands and privileges.
Privileged EXEC Mode
An elevated Cisco IOS CLI access level, indicated by a pound sign prompt (#), that provides full access to device monitoring and the ability to enter configuration modes.
Global Configuration Mode
A Cisco IOS CLI sub-mode entered from Privileged EXEC Mode using the configure terminal command, indicated by (config)# in the prompt, where device-wide configuration changes are made.
Internetworking Operating System
IOS
Cisco's proprietary operating system running on most Cisco routers and switches, providing a command-line interface for device configuration, management, and monitoring. IOS is the foundation for Cisco's network equipment and has evolved into variants such as IOS XE, IOS XR, and NX-OS.
Command Line Interface
CLI
A text-based interface where users interact with an operating system or application by typing commands; it offers precise control and scriptability compared to graphical interfaces.

Topics

Cisco Ios Cli Navigation Exec Mode Global Configuration Mode Networking Cisco Switches Routers

Transcript

It's time to really start digging into the Cisco IOS, and the first thing we must know is how to navigate through the Cisco IOS. There are two different modes within the Cisco IOS, and then there's sub modes to one of those modes. So we're going to talk about the user exec mode and the privileged exec mode, and then all the sub modes to that privileged exec mode.

User Exec Mode and Privileged Exec Mode

I'm on a switch right here. If I hit enter, it's going to come up with a prompt. This prompt consists of the host name and then something that's going to designate what the mode that I'm in is. The host name of this device is just switch, so it's pretty simple and straightforward, and then I see a greater than sign. The greater than sign is actually showing that this is in user exec mode right now.

The user exec mode is really just to get on and do some real basic troubleshooting of these devices. You really don't do much configuration within the user exec mode. It's just to get on, do some troubleshooting, test for some connectivity. So you really don't do much in the user exec mode. Most of the time you're going to have to get into privileged exec mode in order to do what you need to do on these devices.

So let's learn how to get into the privileged exec mode. We're going to type in enable, and that brings us in there. There's not going to be often that you need to go back to the user exec mode, but just so you know how to do that, you type in disable and that brings you back to the user exec mode. So you can go between the two.

Notice the difference between these two specifically in the prompt. You have a greater than sign for the user exec mode, and you've got a number sign or a pound sign for the privileged exec mode. So that's how you know which mode that you're in.

Global Configuration Mode

Now I did mention that there's a lot of sub modes also, so let's take a look at that. There's a lot of sub modes to the privileged exec mode. When you are in the privileged exec mode, maybe we need to do some configuration. There's not really much configuration that happens here at the privileged exec mode at the base level. Here we need to actually take it a step further to the sub mode called global configuration mode.

To get into global configuration mode you type in configure terminal. I hit configure terminal, and then we can see my prompt has changed now and it says config here, and so that lets me know now that I'm in the global configuration mode.

In this mode, the idea behind it is that I am going to be doing configurations for the switch as a whole. So anything that's global or switch wide happens in here. If I'm making specific changes to maybe some interfaces or routing protocols or something a little more specific than that, I have to go into a sub mode of this to change those interfaces or change those consoles. But for now just know that at this level, generally speaking, the commands that we issue at this level are going to affect the switch as a whole, not those specific interfaces, not those specific elements.

Sub Modes: Lines and Interfaces

Let's say we want to dig a little deeper and we want to configure a specific interface or something on the switch. Then I need to go into one of these sub modes. So for instance, maybe I want to do the line console. I type in line console and the line console number, so in this case zero. Now I can see that I am now configuring the line console here, and it's by dash line. I can see that it's one of the lines that I'm configuring here now.

Let's get into how do we exit out of a mode. You just type in exit. Exit brings us back to the global configuration mode. Maybe I need to get into one of the VTY lines, so I'm going to do line vty 0. Quite often we do 0 through 15 at the same time. I'm just going to type in 0 for this case, and you can see that I get into the line. There's not anything really that specifies between the fact this is the VTY line and this is the console line, so you'll just have to be cognitive of what you have gone into and what you're configuring, because you don't want to make an assumption here and then end up configuring the wrong interface or the wrong line.

All right, so now I'm going to exit out of that, and maybe I want to go into one of the interfaces. So I type in interface FastEthernet, maybe I'm going into 0/14. I type that in there, and now I'm in 0/14. Once again, it's letting me know that I'm in one of the interfaces, but it doesn't let me know which interface I'm in, so I'm going to have to know what I got into and what I'm programming.

Once again, I could hit exit to get out of this. You don't actually need to go back to the global configuration mode to get into the next interface. If I want to go from interface to interface, or maybe I want to go back to the line console right from here, I can type in line console 0 and it'll actually take me back to my line console. Let me put a space in there, and it'll take me back to my line console. We can see that I've gone from the interface to the line console.

Let me do that one more time, because I'm in the interface and now I want to go to the line console, and you can see that I've jumped directly from the interface to the line console.

Here again, maybe I want to go back a level. I can hit exit and go back a level. Maybe I want to hit exit again, go back a level again. If I type exit at this point, then it'll actually take me out of this switch, and so now I'm out of the switch.

Jumping Straight Back to Privileged Exec Mode

One other thing that I want to show you. I'm going to get into the enable mode, I'm going to go into global configuration mode, so configure terminal. Maybe I'm in one of the interfaces, so I'm going to go into interface FastEthernet, and now I'm inside that interface. If I hit, it's going to bring me all the way back to the privileged exec mode, so that way I don't have to hit exit and then type exit again.

I'm going to get into there again, so get into the global configuration mode, I'm going to go into interface FastEthernet 0/14, so I'm in with the interface. The other thing I can do is I can do a control Z, and then it's going to bring, that's a little shortcut, so that shortcut can bring me back as well.

So there are some ways that you navigate in and out of these different modes, and it's going to be important for you to understand how you navigate in and out of these different modes, because we'll be doing it quite a bit throughout this course.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →