Encrypt wireless traffic from Mikrotik Hotspot.

Hi all.
Please help me.
I make wireless hotspot network (network scheme below). Hotpot - mikrotik. User access manage with Radius server.
AP - Cisco Aironet 1300 BR.
How i can encrypt my wireless traffic? I want that user can connect without enter a network key (WPA, WPE). Only login and pass on hotspot. But that traffic still encrypt.
If enemy sniff wireless traffic and change their own ip and mac in mac and ip authorised user, then enemy will access in network.
How i can encrypt wireless traffic?

P.S. sorry my english
Document 1.png

The only methods to encrypt wireless traffic are either static or dynamic keys (WEP/WPA/WPA2), or certificates - which are even more difficult to deploy than username/password/passphrase based information. You’re asking for encryption without that - that’s not possible. That’s equivalent to saying you want to cross the ocean in less than 12 hours, but don’t want to use an airplane. It’s not gonna happen.