Hi,
if 10.0.0.1 is the default gateway for clients in your more secure network (the LAN side), the DSR LAN port must own this address (and not 10.0.0.2).
The same is true for WAN1: If 192.168.1.1 is the default gateway for clients in your less secure network (the WAN side), the DSR WAN1 port must own this address (and not 192.168.1.3).
You don't have to configure routes on your clients: If they want to send packets to the other network they send them to their default gateway. Of course you must configure the correct default gateway at each client (10.0.0.1 for clients in the more secure network, 192.168.1.1 for clients in the less secure network). Clients in the more secure network (the LAN side) can get their configuration (including their gateway) via DHCP while clients in the less secure network (the WAN side) probably need to be configured manually.
PT