A wireless access node receives a first frame from a station through a first communication network such as an IEEE 802.11 network. The first frame comprises a source address identifying the station. The wireless access node applies a function to the source address to derive a destination address identifying an access controller coupled to the wireless access node through a second communication network such as an IEEE 802.3 network. The first frame is encapsulated in a second frame that comprises the destination address identifying the access controller and a source address identifying the wireless access node, respectively. The wireless access node sends the second frame to the access controller having the destination address through the second communication network. The access controller owns association and authentication state of the station, and shares the association and authentication state of the station with the wireless access node when needed to support desired service.