Multiple VPN Connections to single Cisco PIX from a single IP address

Posted on 2004-11-02
Last Modified: 2010-04-12
We are running a Cisco PIX 515 with VPN at my office.  I have upgraded the IOS to version 6.3(4), and updated the VPN Client to 4.0.5(c).  At my home, I am connected to the internet using high-speed cable modem, which is connected to a Linksys Wireless Router and Access Point.  The internet connection has a single public IP address, and the linksys serves as a dhcp server for my home computers.  When I connect to the VPN from my laptop and my desktop at the same time, I do receive 2 different IP addresses from the PIX for the units.  However, I can only stay connected for 10 - 20 minutes with multiple connections.  If I only have one computer connected to the VPN from home, I can stay on for as long  as the maximum set in the PIX (about 8 hours).  I have a NAT-traversal statement "isakmp nat-traversal 20" coded in the PIX, at the suggestion of a friend.  Prior to putting that statement in, I could not have multiple connections at all.  Will changing the 20 value help?  Is there a way that I can have more than one connection simultaneously?  This is needed with the directors of my company have meetings off-site, but need to connect via the convention centers broadband connection.
Question by:chrishornembg
    LVL 7

    Expert Comment

    you may want to use one computer as IPSec to connect to the PIX, and setup the second computer access the remote through the IPSec connection. for the more and other information, check the
    LVL 5

    Accepted Solution


    This is more a problem with your local router than your PIX. I've seen this hundreds of times, one user complains that it is not working the other says it works just fine. You might see that when the directors try to do this is it just works. I think it has something to do with how these low budget routers implement IPsec awareness into their firmware.

    Author Comment

    To martap - We are using a LinkSys BEFW11S4.  Do you have any suggestions regarding another device that may work better for this?  I need something fairly portable, so that we can take it to different places for this type of application.
    LVL 5

    Expert Comment


    I know for a fact that this works with a PIX 501. Don't have very much experience with the low budget home routers.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Suggested Solutions

    Overview Often, we set up VPN appliances where the connected clients are on a separate subnet and the company will have alternate internet connections and do not use this particular device as the gateway for certain servers or clients. In this case…
    Some of you may have heard that SonicWALL has finally released an app for iOS devices giving us long awaited connectivity for our iPhone's, iPod's, and iPad's. This guide is just a quick rundown on how to get up and running quickly using the app. …
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    846 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    5 Experts available now in Live!

    Get 1:1 Help Now