Certificate-based authentication in networks employing small cell wireless stations

At least one network device receives a first network address of a first small cell wireless station that has been registered as an authorized wireless station for network access to a target network. The at least one network device adds the first network address of the first small cell wireless station to a small cell wireless station data structure that lists a plurality of network addresses associated with a plurality of authorized small cell wireless stations, and validates, upon power-up of the first small cell wireless station, the first small cell wireless station against the small cell wireless station data structure to selectively establish a first tunnel, between the first small cell wireless station and a gateway connected to the target network, to enable network access to the target network.