firmware wizard?
A preshared key concerns wireless encryption and is not related to a firmware update. You would never ever do a firmware update via wireless unless you like to turn the router into a boat anchor.
"various vpn tunnels" You configured the server as a vpn server? You only need to foward port 1723 to the static ip of your server for the vpn access. GRE can't be blocked by the router which is a ip protocol not a port.
A preshared key concerns wireless encryption and is not related to a firmware update. You would never ever do a firmware update via wireless unless you like to turn the router into a boat anchor.
"various vpn tunnels" You configured the server as a vpn server? You only need to foward port 1723 to the static ip of your server for the vpn access. GRE can't be blocked by the router which is a ip protocol not a port.