Take a look here: Normal -> WAN / Guest -> VPN
That describes exactly what you want - how hard that would be depends on how deep you would like to dive into the system (not networking itself but openwrt administration). But as all the needed steps are described it’s no rocket science 
1 Like