Forbid SSID broadcasting, enable MAC-level access where appropriate, enable WEP, enable 802.11i where available, enable firewalls, enable WPA.