The other good thing about doing it this way is that you can get device _and_ user level authentication (by using client certificates and password authenticatio

The other good thing about doing it this way is that you can get device _and_ user level authentication (by using client certificates and password authentication). No more lame MAC filtering on your wireless firewall to limit access. The access point becomes just a dumb ethernet <-> wireless bridge.