I setup few vpn acces on my pix 506, all theses access are dedicated to roaming users who used the cicsco vpn client.
Each user have his own ip local pool (one per vpngroup and one address per ip pool), we have a problem because when the user drop his vpn connection the ip address of the local pool is "still in use" in the pix and if user user try to connect he is rejected because there is no availble ip address for him.
Don't have an answer to your question other than the timeout probably hasn't kicked in yet. Probably the timeout that's connected with the isakmp command (isakmp keepalive 
I'm more interested in our how got your basic set up going -- I came into the forums to see if I could find some help.....and the first message I read was yours. :-)
I'd like to set up an addtional vpngroup (we've been using one group for a while now), and I'm having problems getting the pix to accept the command: isakmp client configuraiton address-pool local xxxx1 outside. It says there's already an address-pool connected to that interface and I'm to remove it. Of course, that'll break all current access, so I'm reluctant to do so without confidence I'll be able to put them both in afterwards.
Oh. We're using a pix 515 with 6.3(3).
Might you have any suggestions? Any help you can offer will be appreciated!
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...