How to configure Cisco C891 router to allow PPTP and/or L2TP through

[criticalcs]

Hi guys, I hope I'm in the correct channel for this.

I am a bit rusty with Cisco, and especially with Cisco CLI.  I have a client who uses a Cisco C891 router which is setup for CLI only.  I am able to login to the router, and I have captured the running config.  I will paste it if needed.

Right now, it is configured to use Cisco VPN.  What I want to do is shut this down, and setup a port forward to allow PPTP and/or L2TP traffic through the router, and to be forwarded to a Windows Server running on the inside network.

I'm not certain of the commands to implement this, and I'm hoping for some help.

Very much appreciated!

Again, I can post the current config if you want.  I'll just go through and blank out any sensitive info that may be in it.

[paul driver]

Hello

Whats your reasoning to disable the vpn, isnt that providing you with wan connectivity or to a hub site for external access?

As regards port forwarding towards an internal wintel server this is indeed applicable but without knowing you current topology its hard to advise any further?

Can you elaborate on this?

res
Paul

[criticalcs]

Hi, thanks for following up! I'll answer your questions:

Regarding why I want to disable the Cisco VPN is just a personal preference. I very much prefer the simple VPN connection that I use with Windows Servers. This client was recently supported by a different tech support company, and my own company has taken over for them. We are most likely going to be upgrading their firewall next year, but for now, we are trying to make their existing equipment work the way I prefer. The Cisco VPN is only being used by individual laptop users to connect to the server remotely, and access the company files. I just want to disable the Cisco VPN and setup a simple PPTP or L2TP server on the Windows Server.
The network is pretty simple. There is a public WiFi network that is run by this router, and then a single private network using 192.168.1.0/24. The server is inside, at IP 192.168.1.5 I believe. They have a static public IP address through Comcast. I just want to be able to launch the VPN setup wizard on any standard Windows workstation laptop, and have that traffic forward right through the Cisco router into my Windows Server. The server will handle authentication, which I don't need help with, as long as I can get the ports forwarding.
Do you need more info than that?

[criticalcs]

Anyone have any advice to offer on this?  Really appreciate it.