Users generally manage a router and gain access to its web-based management interface only from within the WLAN. Users should also restrict the routers entire netblock to those addresses reserved for private networks. Some consumer routers give users the ability to set up what are known as virtual local area networks (VLANs) within larger networks. VLANs are perfect means of segmenting those pesky (and oftentimes incredibly vulnerable) Internet of Things (IoT) devices from the rest of the network.”]
Source: https://grahamcluley.com/how-secure-wi-fi-network-advanced/