Edgerouter X firewall

Long time ago i bought a edgerouter x, a tiny but powerful wired router. This product is just tiny enough to fit my ethernet accessory box in my house. After i setup my pppoe connection on it, i began to think about setup Vlans and firewall rules and DHCP and everything to make it meet my need.

For every network product in my house like iOT devices i use a vlan to separate it from my main network for security reason. So i set vlan 20 for iOT devices and vlan 10 for my main network.

Vlans on edgerouter x should be set on the switch interface of the product.

Firewall rules on edgerouter x is a little bit confusing.

DNS and DHCP is easy enough to be configured, but dns forwarding is a little bit confusing.