Lista de algunos comandos para los que no hace falta meter enable antes:

connect
crypto
  eap
  ikev2
  ipsec
  key
enable
ethernet
  loopback
    start
    stop
ips signature update cisco
ping

show
  backup
  bgp
  calendar
  caller
  crypto
  cws
    session
    statistics
    summary
    tower-whitelist
  dot1x
  ip
    arp
    bgp
    ddns update
    dhcp
      pool
      server
    http
      server
        history
        statistics
    interface
      brief
    masks
    ospf
    redirects
    rip
      database
      neighbors
    route
    ssh | include lgor
    static route
  l2protocol-tunnel
  location
  login
  modemcap
  ppp
    all
    interface
      gigabitEthernet 0/0
      dialer
  pppoe
    relay context all
    summary
  rmon
  rom-monitor
  security configuration interface brief
  sessions
  snmp
  ssh
  terminal | include llowed
  udp
  usb
    device
    port
    tree
  user-group
  users
  vc-group
  version
  vlan-switch
  vtp
    counter
    status
  zone
ssh -l admin
systat
telnet
terminal
  ...
  history
  ...
traceroute 8.8.8.8
tunnel 192.168.1.10
where