TomatoUSB

I am having a bit of trouble getting a router to work the way I would like it to. It's a Netgear R7000 running Shibby Tomato build 119.

I have four different VLANs setup to each port on the back and working properly.

192.168.10.1(br0)
192.168.20.1(br1)
194.168.30.1(br2)
192.168.40.1(br3)

I have two OpenVPN clients setup. I would like for br0 and br1 to be regular internet from the ISP, which they are now with where I am at with the current setup. I would like br2 to be VPN 1 and for br3 to be VPN 2. I can get both br2 and br3 to to be either VPN 1 or VPN 2 but not each one be different.

Here is what I have currently setup:

VPN Tunneling > OpenVPN Client > Client 1 > Advanced

persist-key
persist-tun
tls-client
comp-lzo
verb 1

VPN Tunneling > OpenVPN Client > Client 2 > Advanced

persist-key
persist-tun
tls-client
comp-lzo
verb 1

Administration > Scripts > Init

mkdir /etc/iproute2

echo -e "#\n\
# reserved values\n\
#\n\
255     local\n\
254     main\n\
253     default\n\
0       unspec\n\
#\n\
# local\n\
#\n\
#1      inr.ruhep\n\
# Our custom tables\n\
10 ETHER" >/etc/iproute2/rt_tables

Administration > Scripts > Firewall

ip rule add from 192.168.10.0/24 table ETHER
ip rule add from 192.168.20.0/24 table ETHER

ip route flush all table ETHER
ip route add 127.0.0.0/8 dev lo table ETHER
ip route add 192.168.10.0/24 dev br0 table ETHER
ip route add 192.168.20.0/24 dev br1 table ETHER
ip route add default via 10.10.10.10 dev vlan2 table ETHER

ip route flush cache

iptables -t nat -I POSTROUTING -s 192.168.30.0/255.255.255.0 -o tun11 -j MASQUERADE
iptables -t nat -I POSTROUTING -s 192.168.40.0/255.255.255.0 -o tun11 -j MASQUERADE

With that firewall script both the 192.168.30.0(br2) and the 192.168.40.0(br3) subnets use the VPN from client 1 and it works. I was thinking I could just change the last line so it would be tun12 instead of tun11 but that does not work.

Is there something simple that I am missing or is there another way I should be going about doing this?