Seth,
Thanks for the response! I was looking at documentation, and it looks like the data sheet for the S3500 also supports Site-to-Site VPN's. Is this a function of S1500 or a function of the Mobility Access Switches?
I like the idea of using a S1500-12P like you suggested, then a IAP-105 for wireless in a kit. Please let me know your thoughts. Ideally, I then just have a IPSec security policy on their Juniper SRX firewall allowing the client to setup shop dynamically where-ever they plop down.