Dear @NikeshJauhari ，

NikeshJauhari wrote

I am using router - ER7206

Firmware : 1.1.1 Build 20210723 Rel.64359

I got the public IP assigned to router.

How can we block access to the management console from the WAN side ?

This router is a NAT device, by default it can not actively access the LAN from the WAN side as long as you have not set advanced settings such as port forwarding.

For example, if the device on the back end of the router can go out and access the external server, then necessarily this data will also be passed back to the internal device, but if the external server detects that it has previously communicated with the internal device and wants to send data to the internal device, then it will be blocked by NAT unless an port forwarding is set, etc.

Best Regards！