Quickest solution:
Install a $50 Linksys wireless router. Set it up with it's own private IP subnet. WAN port will plug into your existing cable modem/router. You can use the wireless connection on your cable modem/router for admin access, or disable entirely.
When detecting suspicious wireless activity, it is easy to unplug the separate wireless router without taking down your entire LAN.