VPN Access list

[gibsthomas]

Hi All,

I'm trying to set up an extended access list to permit VPN traffic. Could someone pls guide me as to what all ports should I open / permit ??

Thanks,

[attrgautam]

If iam correct you can permit UDP 500 (ISAKMP), ESP for IPSec and AHP for AH Header. Permitting these ports should suffice.