I have a place where someone needs to have WAN on the LAN side of my router.
Since a client needs to have a router connected directly to WAN.
But I think make things more complicated that necessary,
I'm gonna put up a switch before my router and make a physical bypass with VLAN tagged traffic instead.
Keep it simple