That ^. It sounds like you may be confusing the WAN and LAN addresses. The webgui will be accessible on both the WAN and LAN IP addresses from a client on the LAN side. All traffic inbound on the WAN side is blocked by default. Steve