Problem with http authorization

kuzmindanil — Mon, 11 Mar 2019 01:22:53 GMT

Hello, have a problem with http authorization through AAA

I have tried this one

#aaa authentication login default group tacacs+ local

#ip http authentication aaa login-authentication default

and this

#aaa authentication login SUPERLIST group tacacs+ local

#ip http authentication aaa login-authentication SUPERLIST

But everytime when I try to login with CCP or on http/https router authorize me only with local user.

Maybe I don't understant how to work named list....

IOS Version 12.4(13r)T

Need help!

Calvin Ryver — Sat, 10 Sep 2011 13:30:48 GMT

It looks like you are logging in with just the basic prompt.

The config should look similar to

aaa authentication login default tacacs local

aaa authorization exec default tacacs (This should put you in exec at priv 15 if the aaa server is set up correctly)

ip http server

ip http authentication aaa

you may want to run the following debugs on the router to see what is happening

debug tacacs

debug aaa authen

debug aaa author

what tacacs server are you using, see the doc at

topic Problem with http authorization in Network Access Control