TP-Link TL-WDR3600 - two openVPN connections (tap device), bind to dedicated ethernet jack

Hello,

I would like to do the following setup:

Two openVPN-Servers a running and offers a tap interface. Is it possible to connect to the both openVPN servers and bind every tap interface to one ethernet jack and let the other two ethernet jack just be routed normal through WAN? In addition, it would be great if the router could send 3 WiFi networks, two for the two openVPN networks and one for the raw internet uplink (sending out one WiFi network and use the mac to bind them would also be fine).

Is this setup possible and will the TP-Link TL-WDR3600 (8MB Flash) be enough for this? The two VPNs have different IP ranges (one a private range, the other a public range).

I thought about using VLAN tags, but I am not sure this will work. Can somebody tell me if this is possible before I buy the device and give me some hints how to solve the task?

Thank you!

Best regards,
wollbert