Is it possible to have an external device, such as a camera, connected to an access point's second Ethernet port and IPSEC tunnel (the access point will only have an Internet connection) that traffic back to the controller tagged as a different VLAN to the wireless traffic?