That ^.

It sounds like you may be confusing the WAN and LAN addresses. The webgui will be accessible on both the WAN and LAN IP addresses from a client on the LAN side.
All traffic inbound on the WAN side is blocked by default.

Steve