Abstract: A method and apparatus of a first wireless access node authenticating a second wireless access node is disclosed. The method includes the first wireless access node receiving a network advertisement from the second wireless access node, and the first wireless access node interrogating the second wireless access node by transmitting an A token. If the first wireless access node receives a response from the second wireless access node to the A token, and the response includes a B token which is cryptographically bound to the A token, and cryptographically bound to the first wireless access node and the second wireless access node, and a shared secret, then the first access node identifies the second wireless access node as friendly.