Separate VPN from WAN in network config, create its own firewall zone for VPN with default forwarding for LAN/WAN, disable VPN being default routing and use vpn-policy-routing to route a specific IP to VPN.
Separate VPN from WAN in network config, create its own firewall zone for VPN with default forwarding for LAN/WAN, disable VPN being default routing and use vpn-policy-routing to route a specific IP to VPN.