802.1x Design for Huge School District-Executed a Proof of Concept for the district for Wired and Wireless access. As a secondary requirement we allowed fro Network Device Authentication as well.
I would do a lot differently but only from the approach, not by selecting different hardware or software.