Huntgroups how to?

[Unknown]

Hello, i'm pretty new to the freeradius world, so please forgive me if i
don't use the correct terms.

Here is my situation:
1 AP with a freeradius auth backend used to gain access to the inner
network. All works fine, i've setup both clients and server to use
EAP-TLS.

Now the question:
I need to add one more AP and another user class, specifically:
UserClass1 Users (Students) must be able to gain access through AP1 Only
UserClass2 Users (Staff) must be able to gain access through both APs

I think that i can accomplish this using huntgroups, forcing all
requests coming from AP2 (Staff only) to auth through EAP-TLS AND mysql
backend, maybe.

I need not to change the actual enviroment, so I cannot redestribuite
certs again nor order the users to use another auth method.

Is there a Way ?

Thank you all in advance,

Pieces of code, howto, links and whatsoever are wellcome :)

Thanks Again