to force the client to re-authenticate upon roaming to a new Controller

to apply firewall policies based on authentication credentials

to validate a host MAC address against a whitelist or a blacklist

to authenticate users or devices before granting them access to a network

to transmit messages to the NAD/NAS to modify a user’s session status