A lot pc/phones now use randomly generated mac addresses which change after certain time or each time they connect to the AP, and if devices have their own Encrypted DNS set up, will that filter still work for website filtering?
Like others said, the easiest way is with the VPN Policy setting in the admin panel. Choose either “Use VPN only for…” or “Don’t use VPN for…” and then add which clients you want it to apply to.
If some device has a changing MAC address then apply the setting to the device with a stable MAC to use or to not use VPN and the others with be the opposite.
Thank you everyone for your informative replies. From your feedback I set up my main Wifi conection with VPN and then set up the Guest Wifi and selected No for VPN. Now I simply choose my Main Wifi connection, or my Guest WiFi connection when choosing to use VPN or not which is now both preset.
The problems with your approach is that it won’t work for wired devices connected via LAN nor would it be possible for devices connected to the guest network to be able to talk to each other.