Hybrid wireless mesh network (WMN) consists of two
types of nodes: Mesh Routers which are relatively static and
energy-rich devices, and Mesh Clients which are relatively
dynamic and power constrained devices. In this paper we present
a new model for WMN end-to-end security which divide
authentication process into two phases: Mesh Access Point phase
which based on asymmetric cryptography and Mesh Client phase
which based on a server-side certificate such as EAP-TTLS
and PEAP.