Configuring VPN

I’m not the most experienced network buff, so please excuse possible wrong wording…

I got an IoT device that I want sometimes to use a VPN connection, sometimes a standard connection. I can’t tune the device itself, it has very restricted network configuration capabilities (basically DHCP or fixed IP/GW/Subnet).

The device is wired over Ethernet directly with the switch on my ISP branded router. I can configure the router to use VPN, but this is only possible for the entire home network - which I don’t want.

Is there a way (probably with the help of an VPN arbitrating extra device?) to create a “VPN switch” solution for that piece of IoT?

Could you configure a vlan and have the vlan be constantly on the VPN, then on the switch, untag the port connected to the IOT device with whatever vlan you want at the time

See if your VPN supports Policy Based Routing. PBR allows you to specify (by IP address) which devices go through the VPN tunnel and which devices go to the standard WAN.

If you want the IoT device to use the tunnel only sometimes, you would have to modify the PBR each time you want to switch.