Best practice in a wireless enterprise LAN

Till now, I didn’t care so much about wireless security, just use a WPA TKIP combination. Last week I buy for my company a Cisco Aironet access point and I discover the “enterprise security” for wireless networks. The problem is that in configuration web page I found a lot of combination of encryption, different EAP technology, words about radius server etc. The question is what is the best practice to secure the wireless lan much more then wpa tkip solution.
PS : excuse my bad English.