I have successfully gotten L2TP (built-in vpn client in PocketPC) to connect through the 3000, but you have to use certs on the Radius server and the Pocketpc client.bernie

Do you have the trunks setup on the AP and switches?

PEAP will fail if the client is checking for a server cert and your ACS server doesn't have one.

here's the link for configuring wpa on Windows CE:http://www.cisco.com/en/US/products/hw/wireless/ps4555/products_installation_and_configuration_guide_chapter09186a008015486f.html#1174037looks like you don't have the CE version that supports WPA.the...

You can also set up multiple vlans on the access point with different SSIDs. Then set up a 802.1q trunk on the switch. This allows segmenting the wireless traffic further. The routing at layer 3 still applies.