You may have difficulty doing this because the ingress and egress traffic is on the same physical (WAN) port of the second router, and you wont have the granular control on the Tplink to override...