Fast transitions between access points (APs) in a wireless network may be accomplished when a mobile unit (MU) moves between the APs, by causing a first tunnel to be established between the APs, and causing a second tunnel to be established between the new AP and the MU. A data path having established security and quality of service parameters between the MU and the old AP may be extended through the tunnels, so that communication with the MU is not disrupted while transitioning between APs. Transition processing thus may be decoupled from movement of the MU, so that the MU may continue to receive access to data over the data path. Optionally, once the data path has been so extended, the MU and new AP may engage in authentication and other messaging to formally affect a handover of the data path to the new AP. The APs and MU may be configured to communicate according to the 802.11 protocol.