To save your extender from being exposed to the Internet you can use the Inbound filter function of the Dlink extender. It will only allow the specified users to connect to the range extender, the IP addresses of those devices which are mentioned on the provided field during the setup process. You can add or remove the IP addresses of the device from the Inbound filter page using the dlinkap.local management window.