Проблему решил. Рассказываю как.
Изначально неверно назначил vlan, привязяв его к br0.
В dd-wrt вывел из моста vlan2, отвечающий за WAN, к vlan2 привязял vlan3 и vlan4.
На шлюзе серой сети назначил vlan4, белой vlan3.
Получилось следующее:
root@dchub:~# ifconfig
eth0 Link encap:Ethernet HWaddr 00:01:6c:ee:49:a9
inet addr:10.158.33.130 Bcast:10.158.33.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:4184 errors:0 dropped:187 overruns:0 frame:0
TX packets:2605 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:672301 (672.3 KB) TX bytes:445513 (445.5 KB)
Interrupt:10 Base address:0xe000
eth1 Link encap:Ethernet HWaddr 00:11:2f:3e:99:33
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:867 errors:0 dropped:0 overruns:0 frame:0
TX packets:718 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:133221 (133.2 KB) TX bytes:242312 (242.3 KB)
Interrupt:11 Base address:0xcc00
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:2691 errors:0 dropped:0 overruns:0 frame:0
TX packets:2691 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:286502 (286.5 KB) TX bytes:286502 (286.5 KB)
ppp0 Link encap:Point-to-Point Protocol
inet addr:46.73.16.118 P-t-P:212.1.254.122 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1372 Metric:1
RX packets:2553 errors:0 dropped:0 overruns:0 frame:0
TX packets:2520 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:318550 (318.5 KB) TX bytes:383766 (383.7 KB)
ppp1 Link encap:Point-to-Point Protocol
inet addr:192.168.255.2 P-t-P:192.168.255.1 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:5 errors:0 dropped:0 overruns:0 frame:0
TX packets:5 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:50 (50.0 B) TX bytes:56 (56.0 B)
vlan3 Link encap:Ethernet HWaddr 00:11:2f:3e:99:33
inet addr:213.141.136.41 Bcast:213.141.136.47 Mask:255.255.255.248
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:734 errors:0 dropped:0 overruns:0 frame:0
TX packets:631 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:109059 (109.0 KB) TX bytes:226307 (226.3 KB)
vlan4 Link encap:Ethernet HWaddr 00:11:2f:3e:99:35
inet addr:172.16.10.1 Bcast:172.16.10.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:133 errors:0 dropped:0 overruns:0 frame:0
TX packets:87 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:12024 (12.0 KB) TX bytes:16005 (16.0 KB)
root@dchub:~#
root@DD-WRT:~# brctl show
bridge name bridge id STP enabled interfaces
br0 8000.1caff7241272 no vlan1
vlan3
ra0
br1 8000.00112f3e9936 no ra1
vlan4
root@DD-WRT:~#
lena@notik:~$ ip a;ping -c4 ya.ru
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether e0:cb:4e:94:42:7b brd ff:ff:ff:ff:ff:ff
3: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000
link/ether 00:25:d3:f2:88:44 brd ff:ff:ff:ff:ff:ff
inet 172.16.10.3/24 brd 172.16.10.255 scope global wlan0
inet6 fe80::225:d3ff:fef2:8844/64 scope link
valid_lft forever preferred_lft forever
4: vboxnet0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 0a:00:27:00:00:00 brd ff:ff:ff:ff:ff:ff
PING ya.ru (213.180.204.3) 56(84) bytes of data.
64 bytes from www.yandex.ru (213.180.204.3): icmp_seq=1 ttl=58 time=25.6 ms
64 bytes from www.yandex.ru (213.180.204.3): icmp_seq=2 ttl=58 time=10.8 ms
64 bytes from www.yandex.ru (213.180.204.3): icmp_seq=3 ttl=58 time=5.78 ms
64 bytes from www.yandex.ru (213.180.204.3): icmp_seq=4 ttl=58 time=4.72 ms
--- ya.ru ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3004ms
rtt min/avg/max/mdev = 4.722/11.769/25.699/8.372 ms
lena@notik:~$