I have a hidden SSID network. I know that although the SSID is hidden, someone can sniff the Wi-Fi channels to get my SSID, and with that SSID he can use some OpenWRT-ish things to spoof my Wi-Fi network to force me type my password to authenticate his device. That is unacceptable, and I am looking for better security for my Wi-Fi network.
What options do I have? How can 802.1X be used, I need to keep it as simple as possible.
I have D-Link DWS-4026 that manages D-Link wifi access points, user credentials are stored in AD. My AD is not the CA of my infrastructure, I can change that, should I? Will users be asked to input their logins and passwords two times, for windows login and for connecting to wifi?