I say certainly use WPA2 with AES if you can, set up all your wireless devices, then hide SSID if you want. Its really not going to add that much security, but as long as you have the wireless info programmed into the devices, it's not going to hurt anything either. But if it does give your trouble, just re-enable the SSID. As for MAC filtering, I'm not a fan of it, because everytime you add a device, you have to add the MAC to your whitelist. And anyone that can break WPA2, changing their mac address is infinity easy, so it is kind of pointless.