How to enable ssh login on apcli0(wan) zone?

the default ssh login is lan zone,just enter on PC console:

# ssh root@
# 12345678

if the widora connect to one AP, your PC also connected to zhe AP.then use 'ia’check the board’s apcli0 IP

#root@Widora:/# ia
apcli0    Link encap:Ethernet  HWaddr 0E:EF:AF:00:13:64  
          inet addr:  Bcast:  Mask:
          inet6 addr: fe80::cef:afff:fe00:1364/64 Scope:Link
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

the the widora’s rootfs:"/etc/config/firewall" wan zone:input chang to ACCEPT

config zone
        option name             wan
        list   network          'wan'
        list   network          'wan6'
        option input            ACCEPT
        option output           ACCEPT
        option forward          REJECT
        option masq             1
        option mtu_fix          1

then save this file,reboot widora

yuanchenmangdeMacBook-Pro:myapp mango$ ssh root@
The authenticity of host ' (' can't be established.
RSA key fingerprint is SHA256:3fqrs20KuClfc3QOMwmjZlNycTZV1DWTtOOL*******.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '' (RSA) to the list of known hosts.
root@'s password: 

BusyBox v1.23.2 (2016-09-08 15:52:39 CST) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 CHAOS CALMER (Chaos Calmer, r49378) Version:0.1.1 by mango
  * 1 1/2 oz Gin            Shake with a glassful
  * 1/4 oz Triple Sec       of broken ice and pour
  * 3/4 oz Lime Juice       unstrained into a goblet.
  * 1 1/2 oz Orange Juice
  * 1 tsp. Grenadine Syrup