Drop-In Gateway mode for multiple VLANs/subnets

Hello,

I recently purchased a Brume 3 to use as a drop-in gateway with my current home setup (non-GL.iNet firewall/gateway, managed L2 switches, WAPs). I am trying to route two existing VLANs to the Brume 3, with it configured as a Wireguard client so that all traffic from both VLANs is routed through my VPN provider:

  • 192.168.80.XX/24 / VLAN80: IoT devices (client device isolation)
  • 192.168.90.XX/24 / VLAN90: home lab environment (no client device isolation)

Configuring the drop-in gateway for one of these was straightforward; for example, I assigned a static IP of 192.168.90.10 to the Brume 3, configured the existing switch per the instructions in the drop-in gateway guide for VLAN90, selected “All devices are networked through the drop-in gateway,” and everything worked as expected once I completed my Wireguard client configuration. For the sake of controlling variables while I try to set this up I have set the switch port to allow all tagged VLANs.

There does not appear to be any way to configure multiple drop-in gateway instances in the GUI interface, so I’ve attempted the following:

  1. Provided the Brume 3 address as a DHCP relay for the other VLAN with no other changes (this did not work for obvious reasons).
  2. In LuCi, attempted to specify two VLANs for the br-lan under network devices (80 and 90) per the 1. OpenWRT guide.
  3. In Luci, set the fail-over WAN port as a second eth device and corresponding WAN interface, essentially duplicating the working single-VLAN configuration with the appropriate DHCP/gateway changes and providing a second physical connection to my L2 switch. This also did not work.

This is my first time working with OpenWRT and it’s entirely possible that this is either 1. not possible with the Brume 3 or 2. I have over-complicated my approach and the solution is actually relatively straightforward.

Thank you.