<<== CISCO PIX 506 E ==>>>

The PIX 506E only has a single outside interface, so in order to be able to connect two SDSL lines in to it, you would need to have an external router or switch. In order to be able to do what you want to do, the router or switch must support 802.1Q VLANs

-or- it must be a router (functionally -- including "Layer 3 switches") and must support Policy Based Routing.

If it happens that your SDSL modem has two ethernet ports, one for each of the two lines, then you will not be able to do what you want unless you add hardware or change to a different PIX model.

Note: there usually is no need to have a seperate line for VPN: the VPN traffic normally flows as part of the internet traffic, encrypted and encapsulated into regular traffic.