I've experienced problem with VPN, when the machine running Cisco VPN Client is having static IP.
Occassionally, when client is attempting to connect, connection will refused. On PIX, when i run "show isakmp sa", the connection with that static IP is shown as established. However, on client side, the tunnel is not established at all.
Currently, the problem can only be solved manually, by running "clear isakmp sa".
Any idea why PIX seems to retain the connection?