Posting your config would be helpful.

Without that, my first thought is that you need to tell asdm where to listen. You do this by modifying what interfaces the internal http server listens on. The command is 'http 192.168.1.0 inside', with your subnet listed of course. Make sure that statement doesn't say "outside" or your router is listening for http requests to its external ip address.

If this is a needed functionality, you would probably have to provision another static ip address that's not your router's external interface, that way the router won't think the http packet is for it.

David

Thank you, David!

This may be the problem. "modifying what interfaces the internal http server listens on"

However, I'm not formaliar of commend lines at all, is there anywhere in the SDM or SDM Express can let me do the same config?

Thanks!

The only place I use the gui on Cisco gear is on an ASA5520 for use as a vpn concentrator. I use ASDM 5.2 so it may be different.

In mine, I go to 'Configuration', Properties, Device Access, HTTPS/ASDM. This is where I can see where the access is allowed.

From a cli standpoint, if you can telnet/ssh to the router, do the following:

sh run | inc http

It will come back with any lines that contain http in it. You can then see if it's in there. So if you had a line that said 'http 0.0.0.0 0.0.0.0 outside', you would just enter the command 'no http 0.0.0.0 0.0.0.0 outside'.

Let me know if it helps.

Thank you very much, David. I'll try that!