I think it is optional, but it has been ages since I have set it up. An ip permit list of 0.0.0.0 with a mask of 0.0.0.0 should be a wildcard that allows all hosts, everywhere to connect. That said, restricting access to as few hosts as possible may provide some benefit