WPA or WPA2 can be leveraged using pre-shared keys. Other common techniques such as mac-address association filtering and broadcast-key rotation in addition to standard IOS hardening would make sense.
Note that in a failure scenario, if both switches were EMI, a failure of the primary could be fully recovered with the exception of the possibly dead ports on the former master. In other words, the second switch upon seeing the master fail, could ta...
