VPN 3000 not allowing multiple connections from same ip

[David Graham]

I have a need for multiple people at a remote site (so they have the same external ip) to connect over the VPN. When we try to do this the first person connects correctly but for all others I get the log message "PPTP tunnel for peer x.x.x.x denied - already established".

I have a VPN3005 concentrator and I am using Windows 2000 Radius for the authentication. I can not tell if this issue is coming from Windows or the concentrator. I could not find a setting on the concentrator, but there are so many that I may be overlooking things. Would anyone know if this is Windows or the concentrator and if so any possible fix?

So far everything I have found on the site does not match the issue but I may be looking incorrectly.

Dave

[travis-dennis_2]

You need to enable NAT-T (Transparency) on the 3005

Take a look here

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_guide_chapter09186a00803ee1e4.html#wp1029463

Hope this helps.

Please remember to rate all replies

[michaelmcdaniel]

NAT-T doesn't apply to his situation. I am curious though, how did you solve this issue?

[David Graham]

I figured that the NAT item did not apply, but with some of the weird things that have gone on with the concentrator I just never know.

The problem is how PPTP works and that it is not smart enough to allow the multiple connections from the same ip. I had to move this client site over to IPSEC using the Cisco VPN client. This works cleanly and actually seems better then the PPTP connection, but that is besides the point. The whole issue was a part of PPTP that I did not know about. I had to open a TAC case for someone at Cisco to tell me this in about 15 seconds.

Hope this makes sense

Dave