EDIT

btx wrote

  @Alex789 what I proposed is actually very simple, which part of it is confusing?

 

Split tunneling or not, how often do you have to disconnect a client and a better question would be if vpn clients should be able to communicate with other network as well as vpn clients?

  @btx My understanding of what he is trying to achieve is that VPN clients are not isolated from the internal network and you can seemlessly switch between a connection being on the VPN and off of it.  In other words, the VPN is only applied to external traffic.  That is why I proposed the Linksys outside the ER605.  That leaves your internal network cohesive but allows you to choose what happens outside.

EDIT

EDIT

EDIT

btx wrote

 also, ddwrt and openwrt, both are capable to use vlan and can be used with it, even on this forum I saw several guides.

  @btx Certainly, switching to dd-wrt or openwrt would solve the problem.  However, he would lose the ease of use he has today and that would require a deeper understanding of networking basics to setup and configure.

Ultimately, there are a bunch of conflicting goals here.

EDIT

  @btx @btx Just so there is a full understanding of the split tunneling. In the below picture I can simply drag and drop between a device as to whether I want it on the VPN or not. Sometimes a site won't work so I have to pull the device off the VPN to gain access and when I am done I put it back on. At our old house the internet connection was slow so I pulled all our streaming devices from the VPN but left other clients on the VPN.

What will happen if I go (ISP -> Linksys -> ER605 (Wan Port) -> Switch) is I will only be able to control the ER605 as to whether or not it is on the VPN, all or nothing situation. Not quite sure if everything else will function properly in Omada with VLAN getting proper subnet assignments though.

EDIT

  @btx If I decide to go the wireguard route what does that look like from a configuration standpoint? What server are you connecting through for this VPN? Do you use a commercial service out there that uses the wireguard protocol or how are you doing it? Can split tunneling be done?