Static route on main router not working

[Bill]

[SOLVED] Need help configuring a separate LAN using the WAN port

You've got both VLANs connected to br-lan: remove VLAN2 from it, then create a new interface (e.g. "LAN2") with just VLAN2 in it and give it IP-address 192.168.2.1 or similar. Create a new firewall-zone for LAN2 and disable forwarding from LAN<->LAN2 Create a new firewall-rule for LAN2 to allow forwarding from LAN2 to !192.168.1.0/24 -- the exclamation-mark inverses that rule, ie. it basically says "allow forwarding to anything except to the 192.168.1.0/24-network" You need to add a static rout…