Cannot have two tunnels from same location

[jd99]

WE have a Cisco VPN concentrator off a WAN switch. The home user has a Cisco Cable router which nats to a Sonic fw which nats again..so it's a double NAT going on. Don't ask me why, but the ISP does their own natting as they are in control of their router.

In any case, computer A has their tunnel disconnected when computer B connects. I have tried giving them a different VPN username but no dice. Could the double NAT be a reason for this?

 

[JOAMON]

Kind of sounds like thats the problem. I have DSL at home with only single NAT and I can use Cisco VPN client software on two PC's connecting to different sites at the same time. Or could be that your ISP only supports 1 concurrent VPN connection.

 

[jd99]

No no, I can connect to TWO DIFFERENT VPN concentrator at once..just not the same one. In other words, it seems like the concentrator would not allow two tunnels established from teh same source IP simultaneously. BUT, I know that is not the case as I set tunneled in from two diffent pcs at teh same time from another firm..no problems.

 

[JOAMON]

I would start with the double NAT and go from there. After that I would set the log settings to high on the client computers and try to see why they get disconnected.

 

[lgarner]

Check and see if NAT traversal (NAT-T) is enabled on the concentrator. If it is, and it still doesn't work, then it's something funky in the ISP's NAT setup(s).