I currently have local management enabled and remote management disabled. But even with remote management disabled I can still log into my router via the Tether App on my iPhone while not connected to my LAN. How is this possible? Is this a bug? I'm trying to understand how this works. I would think that with remote management disabled I or nobody else would be able to access my router unless locally connected to the LAN.
 

My goal is to lock down my router as much as possible to prevent it from being accessible from the WAN/Internet. I have a strong password for logging into my router, I have Pinging from WAN disabled, and have port forwarding disabled, but would still like to have it so that even I can't remotely manage the router.