I have a endor is telling me I can vlan tag based on IP address.. ie, if 1.1.1.1/24 hits an accessport, tag it with VLAN1, if 1.2.2.2/24 hits the same access port, tag it with VLAN2.. but since VLANs are at Layer 2, I don't see how this is possible....