Setup VPN on a Cisco router

I have a 2621 Cisco router as my Gateway to my ISP via a T1 line. My router is setup with DHCP and a firewall. I need to provide the ability for my users to use VPN. What ports do I open on my router to allow VPN to punch thru my router?