yes, if the vpn1 node is an ingress gateway then the client can be an external client which runs regular wireguard.