This is what I use in Asus Merlin on an axe16000. It works really well.
https://raw.githubusercontent.com/Ranger802004/asusmerlin/main/domain_vpn_routing/domain_vpn_routing.sh