Enable WPA2-Personal for encryption with a long passphrase. Configure it over a wired connection, then make the laptop disconnect/reconnect from the wireless network in order to get prompted for the passphrase.

Turn off MAC filtering; it's easily bypassed by anyone with a few extra seconds to spare, but it'll bite you badly later on when you've forgotten about it and you bring a new machine into the system.

That's pretty much it.