I have the following Network topology
WAN -> eth1 Internal -> eth0 (default VLAN untagged) 10.10.10.0/24 Internal2 -> eth2 (VLAN 10 untagged) 10.10.20.0/24
On the switch, I simply have dedicated untagged ports for VLANs for the respective networks…