I have my setup like this:
VDSL Modem AP(192.168.1.1, DHCP on)>>>OpenWRT Router for OVPN(192.168.2.1, DHCP on)>Client PC(only VPN internet use)
>:ETH
>>>:Wifi
In this setup, I want to isolate Client PC from devices connected to upper AP, currently I can't ping from 192.168.1.2 to 192.168.2.2, but can ping vice versa.
I want to isolate two networks completely without affecting OpenWRT router's OVPN internet connectivity.