We configure AAA on router for the Telnet/SSH access. We activate HTTP on our router to our provisioning tool. The provisioning tool needs to retrieve information and execute some command on the HTTP page. The HTTP authentication on the router is local (so the prov. tool have a local account), but to execute some commands, he needs to request the authorization to a TACACS server.
Below is the configurations for
ip http server:
aaa new-model aaa authentication login default group tacacs+ local aaa authentication enable default group tacacs+ enable aaa authorization exec default group tacacs+ none aaa authorization commands 15 default group tacacs+ none aaa accounting exec default start-stop group tacacs+ aaa accounting commands 15 default start-stop group tacacs+ ! ! username prov_tool privilege 15 password pwd ! ! ! http config. ip http server ip http access-class 2 ip http authentication local
I would like to know if there is a way for the provision tool to be locally authenticated and authorized to execute any command.