Does this sound like it would work?
I have a 4 port NIC with ports IF/01 to IF/04 installed in a Netserver.
I make my GREEN LAN (via a pair of Netgear switches trunked together) connected IF/04 and the LAN network to be 10.0.4.*0. All cabled computers and devices would be given either a fixed 10.0.4 IP or get a DHCP address from Nethserver. The default gateway would be set to 10.0.1.1
Connect my ISP router directly to the RED interface IF/01 on my Nethserver and configure it to be the default gateway 10.0.1.254 and set the RED interface on the card to be 10.10.1.1
I have disabled WiFi on the ISP router. I provide WiFi with a second router home TP-Link router is used for WiFi only. This way WiFi traffic does not bypass my FW, IDS and AV etc on the Nethserver.
By connecting the WAN side of this router to IF/03 on the NIC and configuring this to be a second GREEN LAN on a 10.0.3.0 network with the gateway as 10.0.1.1, WiFi devises connect to the LAN side of the TP-Link on 10.0.3.xxx and pass through the Nethserver and all the AV, IDS, FW etc to the internet just the same as the normal Ethernet LAN does
My last interface IF/02 will be for a DMZ VLAN created on my switches as 10.0.2.xxx but that will be later on when I get the rest working.
The last bit of this puzzle will be to allow devices in either GREEN LAN’s to be able to access nodes in the other LAN. I have a WiFi printer, it would be nice to be able to print to that from the main LAN, I have backup storage on the Nethserver, it would be nice for the laptops to be able to access that from the WiFi LAN
Good or bad design ?