You are better off using a dual nic setup, VLAN will require a router and managed switches that need to be configured. To do VLAN's correctly you would need a layer 3 switch to route vlans and not your router doing the routing,
I suggest you read the dual nic setup and VPN's on the WIKI at top...