Block WAN SSH / GUI on Edgerouter OS


To prevent exposing your device from WAN, which is the default, get to the GUI or SSH locally and run these commands. Change the addresses as needed.


set service gui listen-address
set service ssh listen-address


One thought on “Block WAN SSH / GUI on Edgerouter OS

  1. This is a good option if you do not want WAN access at all, however what if you are at another location and you do actually need remote access. Alternate option would be to configure in the GUI for WAN_LOCAL for remote access 443,22 for source IP’s as you authorize. That way your remote IP it allowed through but not ones you do not specify. We do this, tested.

Leave a Reply

Your email address will not be published. Required fields are marked *