Just to clarify my post.
My main router is connected directly to my DSL provider, but has a restricted range for DHCP (192.168.0.2-99), the others are used for static IP connections including my Buffalo router (which uses 192.168.1.1-99 ........there are a few static IP addresses on this router as well) which runs dd-wrt and a VPN connection through my VPN provider. Installation of the VPN on the Buffalo dd-wrt system was and is straight forward.
In general all WiFi is provided by 3 Ubiquiti AP's (one on each level of the house and controlled by Unify software), providing common WifI connection to all our Ipads, laptops etc... Wifi on the main router is disabled.