The requirements may vary somewhat depending on what transport options you select in the client. But the basic setup would need to open up UDP 500 for ISAKMP and open protocol (not port) 50 for ESP/IPSec.
HTH
Rick
HTH
Rick
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: