I have fibre to the premises with a BT single router setup. I am looking to install VPN software onto an additional Netgear router and have all but 1 device (work) running through the VPN Netgear router and have a single device (work laptop) connected to the standard (non VPN) router.
To do this I think I need to split the upstream ethernet cable (from FTTP box) into two via a bi-directional ethernet port. Then, downstream, 1 ethernet cable goes to the VPN Netgear router and another ethernet cable goes to the non VPN (standard) router. This setup needs to guarantee that once the non VPN/VPN router is setup that when using the work device I only connect to the non VPN router and never to the VPN router. This way should be idiot proof provided I never save the SSID/pasword from the VPN router to my work device.
Is this the best way to go about it?