Double tagged VLAN on WAN

I have a L009UiGS-RM and by ISP it is necessary to have two tagged VLANs (IEEE 802.1q) on WAN: 132 for data and 232 for VoIP
For easier use case: ether1 is WAN // ether2 should only send data via VLAN 132 and ether3 only via VLAN 232.
WAN IP via DHCP client
Do firewall rules, do they need adjusting? Same for PBR?

I set up single VLAN132 for data and it works but I’m lost with two seperate VLANs, I thought about two seperate bridges but couldn’t get it to work.
Should the phone station be confgured to tagged VLAN or will it be done by ether3 config?
Hopefully, togehter we can get it running.

Create a VRF with the VoIP VLAN interface and ether3 in it.
Add a default route in the VRF out the VoIP VLAN interface if not already there via DHCP.
Put VoIP VLAN interface in WAN interface list and ether3 in LAN interface list.