I think this is what you are looking for:
You can configure 802.1X authentication between a lightweight access point and a Cisco switch. The access point acts as an 802.1X supplicant and is authenticated by the switch using EAP-FAST with anonymous PAC provisioning.
This feature is supported on the following hardware:
•Cisco Aironet 1130, 1140, 1240, 1250, 1260, and 3500 series access points
Hope that helps!