Multiple IPSEC connections to ASA?

[BRIAN O'LOUGHLIN]

I have a customer with an ASA 5510, running 8.X.  He's been complaining of not being able to have multiple IPSEC connections from remote users.  All users connect with Cisco VPN Client.  We did confirm there is something to this.  From our offices, we were able to get 3 connections total, but not a fourth.  3 connections were from one site, although from separate IP addresses (we have static NAT set up for all of the users involved with this test).  The one connection at the other site was not affected.  When the 3rd user at site A connects, the VPN tunnel terminates for one of the other users connected.

Anyone that gets connected has access to the network.  This isn't the same issue where a VPN connection is up, but no traffice passes due to a NAT-T issue.

Licensing says we have 2 SSL connections and a maximum of 250 total VPN connections available, so that should not be an issue.

Any ideas?  Thank you in advance!

Brian

[andamani · Accepted solution]

Hi,

Is the customer trying to login with a single username for more than 3 times?

If yes, and you want to change the simultaneous login then edit the group-policy and vpn-simulateously -login parameter. vpn-simulatenous-login is set to 3 by default.

The following link gives details of the same:

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml#vpnc-sol-1

Hope this helps.

Regards,

Anisha

P.S.: please mark this thread as answerd if you feel your query is resolved. Do rate helpful posts.

[BRIAN O'LOUGHLIN]

We'll test tomorrow, but we were indeed using the same login repeatedly, and it was the 4th connection that was causing trouble.  I'm certain this will take care of our issue.  Thank you much!

Brian