It is possible.
The easiest way is this: set up 2 vlans, one is bound to private network, another is bound to to guest network. Everything is done in /etc/config/network
/etc/config/network
Then use vpn polices and set not to use vpn for guest network.