Hello Yuriy
My name Eric Moyers. I am an Engineer in the Small Business Support Center.
The WAP351 is the only one of the two that has the switch ports, so I will only reference that it my response.
Here is the emulator for the WAP351 if you would like to look at that.
https://www.cisco.com/assets/sol/sb/WAP351_Emulators/WAP351_Emulator_v1-0-0-39/main.htm
Basically yes, the WAP351 can support 802.1x supplicant to a remote Radius Server and should support EAP-TLS since it does in fact support support 802.1x supplicant and EAP-TLS on the
wired ports.
Eric Moyers
.:|:.:|:. CISCO | Cisco Presales Technical Support | Wireless Subject Matter Expert
Please rate helpful Posts and Let others know when your Question has been answered.