TP-Link600/200 Segmentation of my router setup from BLUE to BLUE/ORANGE zones

Starlink (Bypass Mode)
│
IPFire RED
│
IPFire BLUE
│
MR600 (LAN Port 1)
AP/Switch Mode
│
MR200 (LAN Port)
AP/Switch Mode
│
Wi‑Fi Clients
DHCP/DNS from IPFire

This is my old setup, I need more control. I wiped everything, now GREEN and ORANGE are working properly. The New One should similar to following topology.

Internet (Starlink Bypass)
│
[ IPFire RED ]
│
[ IPFire ORANGE ]
│
┌──────────────────────────────┐
│ MR200 (Router) │
│ WAN: 192.168.20.x │
│ LAN: 192.168.60.0/24 │
│ NAT ON?/OFF?(turned offin setuo), DHCP ON │
└──────────────────────────────┘
│
MR200 Wi‑Fi / LAN clients
→ get DHCP from MR200 (192.168.60.x)

Internet (same Starlink/IPFire)
│
[ IPFire RED ]
│
[ IPFire BLUE ]
│
┌──────────────────────────────┐
│ MR600 (AP) │
│ LAN Port → BLUE │
│ WAN Port → NOT used or used │
│ DHCP OFF, NAT OFF / ON ? │
└──────────────────────────────┘
│
MR600 Wi‑Fi clients
→ get DHCP from IPFire BLUE (192.168.30.x) or dot it on ur own.

I have manged that temporal Setup atfter i Decide to bring the mr200 back to live on orange becouse it does not wanted to work on blue alone , mr 600 worked fine on this setup until i wiped evrything.

My Question, should i Reset my Router to default and put it on BLUE-WithoutDHCP ore should i Use BLUEDHCP - I evry time deaktivating evrything which makes that router shamless, ALG , DHCP , NAT , Firewall , UPNP , Mesh so it would work as Semi SWitch as BLue Device. Now Do i have to Reset becouse Firmware already doing evrything on its own or something.

Or am i not able to use two devices on my i350 nic becouse my hardware cant handle two AP Switches ?

I Have DNS Problems, Lokal Area Working Fine , Firewall Bypass out configured Port 53 UDP TCP Too

Also finde, i decide to put tp link WLAN aps device to Green and Orange and IT propertly works. To spend two WLAN. My local area Network is now without DHCP manual on Blue x. X. BLUE. 1 and both PC with switch or one without have one big Problem. I gave IP but i cant See DNS which should be x. X. Green. 1

Ipconfig dont Show any dns Adress.

Firewall active with Blue to Red all

My last Workaround would be to use blue dhc for Local Area Network Only , i have two x86 devices , one for dvbt can use phone internet some days and my may pc have Wlan on his own. If this is allowed or not. I want to use my Storage on both PC in LAN.