Hello,
I'm having a VPN problem with a Cisco PIX 506e and I'm hoping someone can help. The PIX is configured for remote network access via a Cisco VPN client. There is a small group of people in the office that travels to trade shows. Only one person at a time can establish a VPN connection from the same location. In other words, if 2 people are at a hotel and one person establishes a connection and the second person tries to connect from the same location the first person is disconnected. This is not a problem if multiple people connect from different locations. It only happens when people are in the same location and presumably using the same external IP when trying to establish a VPN connection. This is becoming a big problem for the people that travel together and I was asked to fix it. Any help would be greatly appreciated.
Below is the VPN info from the PIX config. The PIX is running version 6.3
access-list VPNaccess permit ip 10.0.0.0 255.255.255.0 10.1.1.0 255.255.255.0
ip local pool VPNClient 10.1.1.1-10.1.1.254
nat (inside) 0 access-list VPNaccess
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
aaa-server radius protocol radius
aaa-server partnerauth protocol radius
aaa-server partnerauth (inside) host 10.0.0.10 ********* timeout 5
sysopt connection permit-ipsec
crypto ipsec transform-set client esp-des esp-md5-hmac
crypto dynamic-map dynmap 10 set transform-set client
crypto map VPN 10 ipsec-isakmp dynamic dynmap
crypto map VPN client authentication partnerauth
crypto map VPN interface outside
isakmp enable outside
isakmp policy 8 authentication pre-share
isakmp policy 8 encryption 3des
isakmp policy 8 hash md5
isakmp policy 8 group 2
isakmp policy 8 lifetime 86400
vpngroup VPNClient address-pool VPNCLient
vpngroup VPNClient dns-server 10.0.0.10
vpngroup VPNClient wins-server 10.0.0.10
vpngroup VPNClient default-domain realdeal.com
vpngroup VPNClient idle-time 1800
vpngroup VPNClient password ********
Start Free Trial