Rpi4 + OpenWrt with DMZ

I've been using it as a router for several years and it's perfect on a 1 gig wan fibre. Plus 2 x usb dongles for a dumb access point and a spare device.

Now I want to isolate a device and use it for a DMZ server.

The docs on here and elsewhere are for a switched router. Can anyone recommend a link or configs to get this going please?

I've tried the regular and popular ducks but these do not work because they're for a router with a switch.

I assume this means you want to expand to three LAN-like networks instead of two. You could either add another USB dongle (though only two of the ports on a Pi 4 are USB3, so it will be slow) or set up VLANs on one of the ports which would be connected to a managed switch (a "trunk" cable connection). The ports on the managed switch would be configured to direct the different networks to different devices.

I want, (eth distribution not important)
wan, eth0, onboard
lan, eth1, usb
dmz, eth2, usb

All I'll be adding is the DMZ.

I've been running with just the first 2 for several years.

What is the config to add the DMZ?