Way up (from client to WLC) may vary, way back (from WLC to client) is a fixed tag value. Namely, 802.1X data from the client is classified according to the WLAN QoS settings, but packets containing 802.1X frames from the WLC are marked CS4.
Hope it helps
Jerome