In conjunction with developing wireless local area networks, the need for wireless metropolitan area networks (WMAN) is ever increasing. For this purpose, the standard IEEE 802.16-2001 was first developed in 2001 and entered the market with the brand of WiMAX . Wireless area networks consist of two major parts which are wired and wireless sections. The wireless part of this network complies with IEEE 802.16 standard. Due to more importance of the wireless network, performance and efficiency of WMAN depends on IEEE 802.16 standard. In the security sublayer all security mechanisms for channel radio domain are implemented. Up to now many versions of the standard have been released. The most recent couple are 2004 and e that have been published in 2004 and 2006 respectively. In this research, security mechanisms of versions 2004 and e are analyzed. Based on required security features in the standard, the available security services are evaluated. Moreover, vulnerabilities as well as the probable corresponding attack scenarios are studied. Finally, a preliminary comprehensive security architecture is proposed which includes all security domains of the WMAN along with their corresponding security services.