I think you need to use the Drop-in Gateway feature.
When this feature is working, your clients can connect to the Wi-Fi and network ports of the main route, but they will forward traffic through the VPN on Brume2.
Please note that Drop-in Gateway in version 4.1 tends to cause instability in internet telephony, video conferencing, and online gaming. If this affects you, please upgrade to version 4.2.
On 4.2 beta, this feature is a little more difficult to set up. You will need to turn off DHCP on your main route, please follow the guidance on UI.