# How to restrict entering into configuration mode or NBI for sometime

**URL:** <https://dmap-community.ductus.global/t/how-to-restrict-entering-into-configuration-mode-or-nbi-for-sometime/4409>\
**Category:** Other Northbound Interfaces\
**Created:** [April 12, 2023, 10:46am UTC](https://dmap-community.ductus.global/t/how-to-restrict-entering-into-configuration-mode-or-nbi-for-sometime/4409 "2023-04-12T10:46:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![schandrakanth](https://avatars.discourse-cdn.com/v4/letter/s/ecb155/32.png) [@schandrakanth](https://dmap-community.ductus.global/u/schandrakanth)\
**Post date:** [April 12, 2023, 10:46am UTC](https://dmap-community.ductus.global/t/how-to-restrict-entering-into-configuration-mode-or-nbi-for-sometime/4409/1 "2023-04-12T10:46:39Z")

</div>

Hi All,

Can someone help me on below requirement?

CLI:  
Would like to restrict the command “configure terminal” for sometime

Using Netconf client:  
Doing edit-config from client should not allowed for sometime

how this restriction can be implemented.

Note: it is not based on the user type.

Regards,  
Chandrakanth S.

---

<div class="post-metadata">

**Author:** ![schandrakanth](https://avatars.discourse-cdn.com/v4/letter/s/ecb155/32.png) [@schandrakanth](https://dmap-community.ductus.global/u/schandrakanth)\
**Post date:** [April 13, 2023, 9:39am UTC](https://dmap-community.ductus.global/t/how-to-restrict-entering-into-configuration-mode-or-nbi-for-sometime/4409/2 "2023-04-13T09:39:36Z")

</div>

Hi @cohult

Can you please help me on this topic?

Regards,  
Chandrakanth S.

---

<div class="post-metadata">

**Author:** ![cohult](https://yyz2.discourse-cdn.com/flex010/user_avatar/dmap-community.ductus.global/cohult/32/221_2.png) [@cohult](https://dmap-community.ductus.global/u/cohult)\
**Post date:** [April 13, 2023, 1:28pm UTC](https://dmap-community.ductus.global/t/how-to-restrict-entering-into-configuration-mode-or-nbi-for-sometime/4409/3 "2023-04-13T13:28:57Z")

</div>

Hi,  
If you are upgrading or similar, using maapi\_init\_upgrade() is best practice. That will terminate CLI config sessions and lock CDB. If an existing CLI user tries to enter config mode there will be a message saying “In upgrade mode, please wait”. A timeout and a message can be provided to existing CLI users before their config mode session is terminated. See ConfD UG chapter “In-service Upgrade”. You can use the confd\_cmd -c “upgrade\_interactive” command to test.