Hello,
1. What kind of VPN access? IPsec VPN or Any connect VPN? Based of your license you may already have IPsec VPN support but for Any connect you may need to purchase addl license. Do a 'Sh version' and you see all available licenses (post outpu, if you still have hardtime figuring that out).
2.Configuration- your best bet is decide on what type of VPN and then go thru the software configuration guid. If stumble into any issues, post here and someone will definitely help you. If you have support contract, you can even contact cisco TAC for configuration assistance.
hth
MS