radius works via udp. Most port scanners only handle TCP.

Unless you want to do some sort of MAC address blocking or 802.1x authentication, you can't. A public access point is open to anyone, even those you want to have connect to the secure one. This is one of those things thats best handled by user trai...