The only complication (I think) is that managing the 502 through the web interface would require configuring it so that WAN-side access is allowed. Dunno if that's the default or not.