Hi,
It is possible and very simple,
before that you should ensure that RAP is up and formed IPSec with the LMS.
you can check by using command.
1. show ap active
2. show datapath tunnel
3. show crypto ipsec sa
once you confirm please follow the bellow steps,
you can configure eth-port of RAP/ CAP through " wired-ap-profile" under,
AP-group-->AP-->Ethernet interface 1 port configuration.
Note : don't make any changes in deault profile if it is mapped to eth 0 port.
create a new wired ap profile and map it to the port which you want to use.
Eg :
(Aruba3200) (config) #ap wired-ap-profile myprofile
(Aruba3200) (Wired AP profile "myprofile") #wired-ap-enable
(Aruba3200) (Wired AP profile "myprofile") #trusted
(Aruba3200) (Wired AP profile "myprofile") #switchport mode access
(Aruba3200) (Wired AP profile "myprofile") #switchport access vlan 10
(Aruba3200) (Wired AP profile "myprofile") #forward-mode tunnel
this is an example, please modify according to your requirement.
Hope you got some clarity, please feel free for any further help on this :)
Cheers,
Venu Puduchery