As I was configuring a new Cisco ASR1001, I intentionally did not add any Usernames/passwords or enable password. While configuring the base configuration, I didn’t want to deal with being kicked out or having to add a password after a set period of time. I added the TACACS+ configuration as a last step.
After adding the TACACS+ configuration, I couldn’t get into enable mode. I then remembered that I never configured an enable password. Now that I was locked out of enable mode, I looked up the password recovery procedures and resolved my issue.
In the end, my convenience turned into my inconvenience.
Don’t forget the enable password!!