Eventually I will be installing and configuring new router for them, then I can setup openvpn for my remote access and turn off forwarding for management ports. I’m waiting for ATT fiber install date to knock it off in one day.
Restricting access to certain IPs is tricky, unless you have static IPs everywhere you go,