So I was able to get it up and running. Relatively painless.
Under services>>freeradius tab.
1) Generate the CA
2) Create the clients for local AP and/or other AP's
3) Create user/password pairs (no need to gen certificate)
Now I can give a simple username/password pair to my friends when they visit. One caveat though is their devices need to support WPA2 Enterprise authentication. Most recent android devices do. Windows clients require installing your CA certificate first since it's self signed. Relavetively painless.
Thanks to the DDWRT team for making this possible. Keep up the great work.