A method includes receiving a first frame at a wireless access node, the first frame being received through a first communication network and having a source address; applying a function (e.g., a hash function) to the source address to derive a destination address; encapsulating the first frame in a second frame that includes the destination address and a source address identifying the wireless access node; and sending the second frame to a second communication network for receipt by a destination node having the destination address. The destination node is an access controller that maintains state for a station that sends the first frame. The first communication network may be an IEEE 802.11 network, and the second communication network may be an IEEE 802.3 network. The address of the access controller is one of potentially many virtual MAC addresses associated with the access controller that enables an N:M relationship between a particular access node and a plurality of access controllers that may be clustered, and a N:1 relationship between a Station and a virtual access controller.