Autonomous or LWAPP for fast roaming

Question

We are looking to deploy wifi to support Tablet PCs. The software we are using is very sensitive to loosing its connection to the SQL database. I am worried particually about roaming. We need to use 802.1x for security and would like to use the MS IAS servier with EAP-TLS for authentication. We have 4 locations which should each be well covered by 3 base stations at each location. Medical providers need to be able to move around the office without losing connections. Time is more important than money. An hour of lost provider time (and when our app crashes it crashes hard) is worth avoiding with addition money. My questions are the following:
1. Do we need LWAPP or will autonomous with WLSE work for us? (Specifically for fast secure roaming, or quick handoff, or whatever it is we need)
2. Do we need to use EAP-FAST (and thus a Cisco AAA server) or will EAP-TLS with IAS be enough?
3. If we use LWAPP do we need WCS or will managing each 2000 series WLAN controller be enough?
4. Will all this work with my HP switches and Andtran routers?

Answer 1

1. Do we need LWAPP or will autonomous with WLSE work for us? (Specifically for fast secure roaming, or quick handoff, or whatever it is we need)
A: Go with LWAPP, more reliable, and easier to work with.
2. Do we need to use EAP-FAST (and thus a Cisco AAA server) or will EAP-TLS with IAS be enough?
A: I'd recommend, PEAP. More secure, and with everything Cisco, much easier to support, since TAC does not support the IAS server.
3. If we use LWAPP do we need WCS or will managing each 2000 series WLAN controller be enough?
A: If you are only contemplatign using 2006 at 4 locations, WCS wouldn't be a necessity. If you expand beyond that and decide to do something else, then yes WCS.
4. Will all this work with my HP switches and Andtran router?
A: It probably will, and it should, but for best results, going Cisco for the whole solution works the best.
Now, why go with 2006's? They are nice boxes, but you would need 4 of them. If you are static at 4 locatiosn with out need for growth, I'd go with a 4402-25. This is a single controller that can handle up to 25 AP's. With this, if you purchase the 1242 or the 1131, you can do HREAP, and keep all the subnets locally switched, that way if the WAN goes out, or the controller goes out, then the WiFi stays up for the local subnets. Naturally anything acrosss the WAN is not accessable.
That beign said, if you are backhauling everything to a central site anyway, might as well go with one 4402-25, single point of controll, instead of 4. And if you do need to add another site, then you still have 13 more AP's that can join instead of having to purchase another controller.
my 2cents