Basic setup with VLAN tagging

Here's how to use search to find info

Start with the default config, your router has no firewall (other than nat masquerade).

See @mkx answer in first link above and @mszru 's follow up