BEFSX41 VPN Ports

Can anyone tell me what ports a VPN between 2 BEFSX41 Routers uses?

I have 1 of the routers behind another NAT router that cant be put into the DMZ. This Router can initiate the connection but because I have no ports forwarded it cant receive an incoming connection. Any idea on which ports to forward to this router?

Thanks,

David