I need a WiFi AP with EAP authentication with support for dynamic VLAN assignment controlled by a Radius server (e.g. by login name, client MAC address, etc.). So I have only one SSID, but multiple VLANs for WiFi. So its input port should act as a trunk port switch.

At the same time, it should have 1+ other, output port, which should act as an access port switch (for VLANs other than WiFi VLANs) - for PC connection.

Now I have it solved on Mikrotik cAP ac AP - which works well, but I have other HW problems with it.

Can the above requirements be met with some TP-Link AP?