I currently have a PIX515E sitting behind a perimeter. This perimeter is connected to the Internet. It has security ACLs configured it. What I would like to do is use the PIX as a VPN termination point and hence need to open up certain port numbers on the perimeter router to reach the PIX. I'd like to use IPSec running mainly between CPN clients and the PIX but have no idea what should I do with the ACL on the router. That is should I say "permit ip any PIX-fw" or should I say "permit tcp <ipsec> PIX-fw". Can someone help out with the port number is possible. Thanks.
