Configuration review

- Encryption and cipher suite selection (CCMP vs TKIP, SAE) - Authentication mode (EAP-TLS, PEAP, EAP-TTLS, EAP-FAST) - RADIUS server configuration and certificate validation - VLAN and isolation between wireless clients