Correct me if I'm wrong, but would this be one of the higher grade security configs for wireless, without using Layer 3 VPN:
Access Points: Cisco 1200 series
Wireless cards: Cisco Aironet a/b/g PCMCIA
AAA Server: Cisco ACS
EAP Authentication: LEAP (and then EAP-FAST when available)
Cipher: tkip
