Sometimes it is required or socially expected to offer an internet connection to untrusted devices. Segmentation in a guest network keeps these away from trusted devices. Hpwever, letting untrusted devices use the Internet connection directly can have unforeseen consequences, especially for the owner of the connection. In this guide an outgoing VPN connection on the router is configured as a mandatory WAN interface for a guest network. Traffic from and to the guest network will seemingly enter and exit the Internet at the VPN server.
Official documentation only notes how to make a bootable USB medium for either legacy BIOS or UEFI systems. This guide covers how to make a single USB medium that boots on both. In addition, any leftover space on the USB medium can be used to store Clonezilla images.