Is it possible to disable entering an enable mode on IOS ? Im deploying radius servers with two user groups (lvl 1 and lvl 15) my goal is to do that users who are lvl 1 would be not permited to enter enable mode. Yes, i know i can create a password for enable mode. But maybe it's possible to even not to let the enter that mode for level 1 users ? Thanks.

1 Answer 1


You can't disable enable command in any privilege level because it is used to login from privilige level to higher level . as per Cisco IOS Security Configuration Guide, Release 12.2:

By default, the Cisco IOS software command-line interface (CLI) has two levels of access to commands: user EXEC mode (level 1) and privileged EXEC mode (level 15). However, you can configure additional levels of access to commands, called privilege levels, to meet the needs of your users while protecting the system from unauthorized access. Up to 16 privilege levels can be configured, from level 0, which is the most restricted level, to level 15, which is the least restricted level

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.