Setting Up WireGuard on a Separate SSID in OpenWRT Router

[Rodeo]

Hello,

I’m new to OpenWRT and I’m still learning how to configure it properly. I’m trying to share my internet connection from an ONT device to a router running OpenWRT, and I want to create two separate SSIDs with different routing behaviors:

One SSID will have VPN (WireGuard) enabled.
The other SSID will use the ISP’s direct internet connection (without VPN).

Should I connect the router to the ONT via a LAN port or a WAN port?
(D-Link Dir 842 c2)

For reference:

The ONT modem is set to DHCP and uses the IP range 192.168.1.x.

I’d also like to know how to configure the router so that devices connected to a specific IP range via LAN are routed through the WireGuard VPN, while other devices will use the ISP’s connection.

Could you please provide detailed instructions on how to set this up in OpenWRT Luci? Any help would be greatly appreciated!

Thank you in advance!

[darksky]

Create a SSID/Interface that will use a commercial VPN

I have the goal configuring my OW router/firewall to allow a device connected to particular SSID or plugged into a specific physical port use the to use a commercial VPN's server. I am thinking this will require me to: Create a new wg interface and configure it with the commercial VPN's credentials Configure PBR to allow all traffic on the intended interface by IP range to use the wg interface Am I missing anything conceptually? I should note that when complete, I will have two wireguard in…