Configuration Mode Exclusive Feature set

[austin.brown.17]

Our network has a need for the configuration lock to be able to be retained after session closing until the same user re-authenticates.

I am aware of the auto lock but if that user's session ends so does his session lock. Is their a feature that would retain that session lock until manually disabled?

Thanks!

[pieterh]

I don't think so, either initiated auto or manual, the lock is released when the session ends
Cisco IOS XE Configuration Fundamentals Configuration Guide, Release 2 - Exclusive Configuration Change Access (Configuration Lock) and Access Session Locking [Cisco IOS XE Release 2] - Cisco

Step 4

end or exit Example: Router(config)# end Router# or Example: Router(config)# exit Router#

Ends your configuration session, automatically releases the session lock obtained in Step 1, and exits to privileged EXEC mode. Note  Either the end command, the exit command, or the Ctrl-Z key combination releases the configuration lock. Use of the end command is recommended.

[Joseph W. Doherty]

As you note, lock is active while session is open.  So, possible to keep session open?

If you do that, though, would suggest you use something like TCP keepalives to close session if connection lost.