I need to segment my home network traffic to route almost everything through personal VPN, while giving my work devices direct access to my ISP. (for a while i had everything going through my personal VPN, but the device-based work VPN is no longer playing nicely with it.)
My first thought was to learn my way around policy based routing, using a policy based either on static IPs for my work devices or the external IP of the work VPN. I am confident this would work but might be complicated.
An alternative I'm considering is to simply set up a second wifi network to handle my work devices. This seems like it would be offer benefits in fully segmenting the traffic between work and private devices, and the setup might be simpler.
Which strategy would you choose, and what factors should i take into account?
My current setup, in brief:
Linksys E8450 running openWRT as primary router
Linksys E8450 as dumb access point
Mesh network connecting routers to each other using b/g/n antennas
Wifi network running on each network with same SSID using ac/ax/n antennas
OpenVPN client running on primary router handling all traffic