A wireless network requires per-user enterprise authentication. Which design is most appropriate?

1. 802.1X with a RADIUS authentication service
2. An unrestricted open WLAN with MAC learning
3. One shared WPA2-Personal passphrase
4. An SSID hidden from beacon frames