Various systems, methods, and programs executable on a computer readable medium are provided for providing secure communications in a wireless domain. In one embodiment, a method is provided in which access to a network is established a client in an originating subnet associated with an originating controller in a wireless domain. The access rights for the client are set based upon a first active control list. Access to the network for the client is established in a foreign subnet associated with a foreign controller in the wireless domain when the client roams from the originating subnet to the foreign subnet. A second active control list is tunneled from the foreign subnet to the originating subnet. The access rights to the network for the client in the originating controller are reset based upon the second active control list.