It is possible.

The easiest way is this: set up 2 vlans, one is bound to private network, another is bound to to guest network. Everything is done in /etc/config/network

Then use vpn polices and set not to use vpn for guest network.

1 Like