Multiple VPN Tunnels from one DSL Line with router into a PIX 520

[chris.bodnar]

I'm working with a company that is using a PIX 520 firewall to provide the VPN access, they do not have a concentrator. I am using a DSL modem with a Nexland Pro 100 router on the client side. I am trying to open multiple VPN tunnels. I have no problem opening the first VPN tunnel, when a second computer on the router attempts to open a Tunnel I receive a Peer Not responding message. I know this would work with a Concentrator, but it won't work with the PIX firewall. Any suggestions would be appreciated.

Is there a Cisco Router I could use, or a setting on the PIX Firewall that could be changed?

[r-simpson]

Your DSL router is probably running NAT which will only allow the first tunnel to be built. To run multiple tunnels over NAT or any tunnel over PAT you'll need to have a feature called NAT transparency mode which is currently not available on the PIX. The VPN concentrator would be required for this application (or get more real IP's from your SP).