How will guests and customers be accessing LAN 2 (192.168.20.1)? wired, wireless, both?
Go review responses to your previous threads. There were thoughtful responses from @anav @Sob @sindy @mkx covering firewall, vlans, etc.