Local Authentication for HTTP Server

Sample Configuration: Local Authentication for HTTP Server Users

Local Authentication with Cisco IOS Software Release 11.2
!--- This is the part of the configuration related to local authentication.
!
aaa new-model
aaa authentication login default local
aaa authorization exec local
username one privilege 15 password one
username three password three
username four privilege 7 password four
ip http server
ip http authentication aaa
!
!--- Example of command moved from level 15 (enable) to level 7
!
privilege exec level 7 clear line
Local Authentication with Cisco IOS Software Releases 11.3.3.T or later
!--- This is the part of the configuration related to local authentication.
!
aaa new-model
aaa authentication login default local
aaa authorization exec default local
username one privilege 15 password one
username three password three
username four privilege 7 password four
ip http server
ip http authentication local
!
!--- Example of command moved from level 15 (enable) to level 7
!
privilege exec level 7 clear line.
Configuring TACACS+ Authentication for HTTP Server Users

Authentication with Cisco IOS Software Release 11.2
aaa new-model
aaa authentication login default tacacs+
aaa authorization exec tacacs+
ip http server
ip http authentication aaa
tacacs-server host 171.68.118.101
tacacs-server key cisco
!--- Example of command moved from level 15 (enable) to level 7
privilege exec level 7 clear line
Authentication with Cisco IOS Software Releases 11.3.3.T to 12.0.5.T
aaa new-model
aaa authentication login default tacacs+
aaa authorization exec default tacacs
ip http server
ip http authentication aaatacacs
tacacs-server host 171.68.118.101
tacacs-server key cisco
!--- Example of command moved from level 15 (enable) to level 7
privilege exec level 7 clear line
Authentication with Cisco IOS Software Releases 12.0.5.T and Later
aaa new-model
aaa authentication login default group tacacs+
aaa authorization exec default group tacacs+
ip http server
ip http authentication aaa
tacacs-server host 171.68.118.101
tacacs-server key cisco
!--- Example of command moved from level 15 (enable) to level 7
privilege exec level 7 clear line
Source : http://www.cisco.com