If one plans to configure the link and leave it alone, one way to prevent access to the radios is to leave them configured for out of band management and change the default management password.
This prevents the radios from being managed from the data port and it prevents access via the management port with the default password.
I'm sure there are myriad other ways to prevent unauthorized access!
Does anyone else have any other ideas?
:)
Dave