2nd SSID to Empty Port

[pilotmarcog]

I'm using my RT-AC68U to set up an OpenVPN connection. That VPN then gets distributed by WiFi from the router itself (Main SSID) and by LAN back to the home network.

On the same network there is another VLAN which has the Local ISP (no vpn), and I want to set up a second SSID to be able to connect to the Local ISP VLAN.

my plan was to segregate Port 4 and create a separate VLAN/Bridge on the router so that I can connect that port to the home network on the Local VLAN and then have the 2nd SSID allow connections. That network already has DHCP so I need to allow clients to get IP addresses from that network and not from the RT-AC68U.

Having trouble figuring out what port is what in my router and I cannot find good docs about it. Here is the results of my 'robocfg show' and 'brctl show'

Switch: enabled
Port 0: 1000FD enabled stp: none vlan: 2 jumbo: off mac: 00:01:5c:6a:9c:46
Port 1: 1000FD enabled stp: none vlan: 1 jumbo: off mac: b8:bc:5b:cc:ba:93
Port 2: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 3: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 4: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 5: 1000FD enabled stp: none vlan: 2 jumbo: off mac: 3c:7c:3f:da:6e:28
Port 7: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 8: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
VLANs: BCM5301x enabled mac_check mac_hash
1: vlan1: 1 2 3 4 5t
2: vlan2: 0 5

bridge name bridge id STP enabled interfaces
br0 8000.3c7c3fda6e28 yes vlan1
eth1
eth2

If I do an 'ifconfig' I can see eth0, eth1 and eth2 but I can't find reliable info on what each one of those stands for.

Would appreciate some ideas on how to implement this. Local network switch is a Cisco SG350 and it is manageable (i.e. VLAN capable)

 

[WifiGhost]

if you mean the lan ports, they are backwards, 1 is 4, 2 is 3, 3 is 2, 4 is 1, I used ports 3 and 4 so to tag them I used 1t and 2t in my scripts, 0 remains the wan port, hope this helps

 

[pilotmarcog]

if you mean the lan ports, they are backwards, 1 is 4, 2 is 3, 3 is 2, 4 is 1, I used ports 3 and 4 so to tag them I used 1t and 2t in my scripts, 0 remains the wan port, hope this helps

Are you using YazFi for the guest SSID, or the stock merlin is enough?