Does anyone know how allow ipsec through an accesslist? I know ipsec uses port 500 UDP and port 50 IP? Would it be?: access-list 131 permit udp any any eq 500 access-list 131 permit tcp any any eq 50 access-list 131 permit udp any any eq 50 Kevin,