I am designing a wireless solution for a client and am looking for some valuable insite that this list might provide. The clients data infrastructure is all Cisco. Mostly 3500 series switches and 2600/3600 routers. I am looking at the 1200 series AP's for deployment as they support a/b/g for upgradeability. As far as client adapters go I am looking at the Aironet a/b/g PCMCIA cards for laptops and tablet PC's. I am pretty certain this is the hardware I will use, as in my research I found this to be the best feature/security wise.
I will also be looking at Cisco ACS to authenticate the users via 2000 Active Directory. All wireless users will be staff. So no issues with non-cisco cards being used or users not having accounts and needing them created. The security needs to be high so I will be using some form of EAP authentication. My questions are:
1) Does any configuration of 802.1X need to be done on the switches that the access points will be connected to or is this strictly between the AP, client and ACS ?(Ie, will I need to evaluate buying a couple newer switches that have advanced 802.1X features)
2) Which authentication would be best as I have control over all configuration of clients/laptops that access the wireless network, PEAP or LEAP ?
3) Users will be moving around the facility so disassociating with one access point and connecting to another should be as painless as possible to the user.
Thanks in advance.
