Treat the Wireless LAN as another "Internet" or Public interface. Best way to handle this IMO.