In this Mobile Pipeline article, I compare three affordable outsourced 802.1X/WPA Enterprise providers: WiTopia's SecureMyFi, BoxedWireless.com, and WSC Guard (now part of McAfee) each have their strengths. WSC Guard is incredibly simple to use and administer, but it's a Windows-only offering. SecureMyWiFi and BoxedWireless offer flexibility by providing full 802.1X support for PEAP (both), EAP-TTLS (SecureMyWiFi) and EAP-TLS with certificate management (BoxedWireless).
Smaller businesses that lack per-user Wi-Fi logins should consider adopting one of these outsourced services if they'd rather not run the server themselves. I wrote some months ago about in-house 802.1X offerings, but even the simpler ones may be too geeky for businesses with zero IT staff.
Another option is our free WIFI access blocker. Sends intruders to a captive portal when they try to surf. Features real-time intruder detection and logging. Download from http://www.myWIFIzone.com/download1.asp
Or, if you are looking for a FREE 802.1x solution, try Radiuz. For SMB security you will most likely want to use the "Private" rather than "cooperative" security mode.