There's nothing you did wrong.
It's the nature of ipsec-esp - the protocol does not contain any information which session it belongs to. So the edge router where your road warriors are located has no idea to which client it has to send incoming packets. Usually the first connected client wins and gets them all.

For these occasions (multiple VPN users staying at the same hotel and connecting back to the office at the same time) I added a SSTP server which works nicely. And it's more resilient when going through firewalls that are either misconfigured or blocking ipsec or other vpn on purpose.

-Chris

Code: Select all

http://macappstore.org/sstp-client/

/Chris