Efficient data path encapsulation between access point and access switch

An apparatus for processing encrypted wireless station data at a network device in communication with an access point, the method comprising:

• a processor configured for:
• receiving from an access point, one or more frames of wireless station data comprising a plurality of encrypted protocol data units, said one or more received frames configured to identify said plurality of encrypted protocol data units associated with said wireless station data;
• decrypting said encrypted protocol data units;
• and
• forwarding said wireless station data;
• and
• memory for storing encryption keys.

A method for transmitting encrypted multicast data for a wireless client to an access point in communication with the wireless client, the method comprising:

• receiving multicast data from a virtual local area network;
• replicating said multicast data for wireless clients in a wireless local area network mapped to the virtual local are network;
• encrypting said multicast data;
• and
• transmitting said encrypted multicast data to the AP for forwarding to the wireless clients in an encrypted form.

A method for processing encrypted wireless station data at an access point without decrypting said data, the method comprising:

• receiving from a wireless station, a plurality of frames comprising wireless station data fragmented into a plurality of encrypted protocol data units;
• reassembling said encrypted protocol data units;
• and
• forwarding said encrypted protocol data units to a network device.