Port 3389 is the only port you need to open. Sound will attempt to be streamed through User Datagram Protocol (UDP) first. If no port is available for UDP, sound will stream through a virtual channel in Remote Desktop Protocol, which uses port 3389.
So, add this line :access-list 101 permit udp any host eq 3389
