Omada Ip address pass through to firewall/gateway setup needed

I need network engineer to create rules in a small TP-Link network that will allow all client ip addresses to pass through to the gateway/firewall where they can be monitored or blocked as needed. See diagram below.
The system consist of TP-Link OC200 controller, ER605 VPN Router, TL-SG2428P Switch, EAP-610 and RC150 SD-WAN cybersecurity router .
The ER650 has vlans with their own IP address pools.
I need for all of these addresses to be routed through the Roqos so they can be monitored.
Both the Roqos and vpn router supports custom routes.
This should be an easy job for someone that is a seasoned network guru.