PfSense allow one part of the network access to VPN Tunnel

[nijaz]

Hi
I Have two pfSense routers (Router 1 and Router 2)

ROuter 1 is VPN Server for other routers and in his LAN network are different servers like domain server, mail server…
Router 2 is WiFI captiv portal. We have one subnet 192.168.1.0/23 and all visitors connected on WiFi can surf on internet.

Is there possibility, and what will be best practise to allow our private laptops to connect to same WiFi and have access to VPN TUnnel and Router 1 and servers?

[robertfranz]

Easiest way would be to just create separate Guest and Secure vlans.

Leave Guest at your Linksys, and route Secure to your core.