Nortel VPN client behind PIX... what ports to open?

[stakano]

We have a few users that require the ability to create an IPSec tunnel to a partner site. All our users sit behind our PIX 501.

When they try to use the client to connect, there is a socket error 10048. I assume this is because of a port that I need to open on the PIX, but I can't find any sample configs.

Can anyone help me which ones I need to open?

[awaheed]

For IPSec you generally need to open up the following ports:

Protocol = UDP, port = 500

Protocol = ESP

Protocol = AH

hope this helps..

AAmir