I had to remove the IoT default network and create a new one to can choose a new VLAN for it.
In addition, from my point of view, if you wan to be able to choose what source or destination from IoT goes over VPN and what not, you should disable this in the IoT network:
and use VPN to create...