Route one VLAN over VPN, another straight to the WAN?

[zandr]

I have an idea that I've tried a couple of times to implement, but have never managed to get working.

I'd like to configure two VLANs on the LAN side (which will map to SSIDs on the AP). All traffic on this VLAN would be routed through an OpenVPN connection (where pfSense is the OpenVPN client). The other VLAN should be the normal, NAT-to-the-internet WAN connection.

Basically, I'm trying to create a remote/home office solution where there's an Wireless network that tunnels all traffic, and a 'guest' network that has internet access and acts like any home router.

A point in the right direction would be appreciated.