You have to allow 500 udp port for IKE and esp (ip proto 50 afair). It will be enough.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: