I have an internet circuit that I would like to protect from untrusted peers. BUT I don't want the peers in the same broadcast domain to be able to affect other peers.
(e.g. Wifi user 1 shouldn't be able to affect Wifi user 2)
What set of authentication/encryption technologies will allow for safe sharing of an internet connection?
My threat model is to prevent peers on a guest network from interfering with other peers on the same subnet. In addition, I don't want the guests to be able to access internal resources.
Ideally there is a captive portal that enforces a sign-on, but this assumes a secure data link layer.
What set of technologies is appropriate for securing and isolating a Wifi Connection from untrusted peers?
(assume that a RADIUS server can authenticate the peers to some degree, enforcing some authentication if necessary)