Since there are 3 LAN ports, you can assign each port to a different VLAN for 3 wired VLANs. If you need to have more than 3 VLANs for wired connections, you’ll need to add a VLAN aware switch to the router and tag the Ethernet port connected to the switch.
For the VPN router setup, you can use one of the following options to expose the server port:
1. Set the pcWRT router as the DMZ host in your ISP router. Here’s an example for the AT&T router: https://www.pcwrt.com/2017/01/configure-att-nvg510-dmzbridge-to-the-pcwrt/
2. Set up port forwarding on the ISP router for the WireGuard server port. For example, if your WireGuard server runs on UDP port 51820, then set up a port forwarding rule on the ISP router for UDP port 51820.