If anybody has suggestions, I would appreciate it. Meanwhile I have enabled the "guest wireless access" function on my Belkin router. This sets up a WPA2 / PSK authentication on a separate SSID. The devices that connect to it get internet access but no access to the rest of my LAN. For me this is an acceptable compromise, if not my prefered way of operating.