Cisco Pix 501 opening udp 500 ip 50

[jhonea]

I'm having trouble understanding how exactly to open the udp port 500 and ip port 50 on my cisco pix 501. I'm attempting to set up a VPN and I was told these need to be opened. What is the command to do this?

thanks in advance

-Jeff-

 

[wirelesspeap]

access-list outside permit udp any any eq 500
access-list outside permit esp any any
access-group outside in interface outside

 

[KiscoKid]

Alternatively you can also use the command: sysopt connection permit-ipsec
to permit IPSEC traffic without checking ACL's. Altho it is often regarded more secure to use the ACL approach as outlined in post above as this allows you to explicity define what traffic you want to allow through the PIX.

 

[jhonea]

Thanks for the help guys. You really saved me here. I appreciate it.