My method is internet --> switch --> 2 routers. Each router pulls a public IP. One has wireless enabled, the other doesn't. Then just establish an ssh tunnel or vpn through the unsecured wifi to the other one (which is obviously where you're network is physically plugged into). If you're paranoid you can turn on wpa2/aes on the wifi router.