Make an access point with authorization by certificates

Question

Computer networks

Good day

I must say that the absolute oak in this area.

A request came from our security officers to eliminate the possibility of intercepting and listening to WiFi traffic, and one of the solutions was to issue a connection certificate to each user.

Now the question is:
- We have a point (ASUS N55U) with native firmware
- we DO NOT have either AD or other infrastructure locally

How to ensure PERSONAL traffic encryption on the way from the client computer to the access point with minimal bloodshed?

Answer 1

To get started, read about 802.1x and radius, for example here - goo.gl/Pu6Py
Then decide if your access point supports 802.1x, and if so, raise this whole thing for yourself.