Hi,
yes VPN need access-list to work, they are called crypto access-lists. the type of traffic to push through the tunnel is controlled by the access-list.
setting up the vpn is fairly simple,
www.cisco.com
has the entire documented steps. you just need to know IPSec a little more to really know whats going on.
let us know if you guys require more guidance i created your first ever VPN tunnel.
