An access point is configured by a WLAN controller in the management plane of the three networking planes. The management plane is responsible for the configuration, administration, and monitoring of network devices, such as access points, switches, routers, and controllers. The WLAN controller communicates with the access point using a management protocol, such as CAPWAP or SNMP, to send configuration commands and receive status information. The control plane is responsible for the routing, switching, and forwarding of network traffic, such as data frames and control frames. The WLAN controller may also participate in the control plane by performing functions such as authentication, encryption, roaming, and load balancing. The security plane is responsible for the protection of network devices and data from unauthorized access, modification, or disclosure. The WLAN controller may also participate in the security plane by implementing features such as firewall, VPN, IDS/IPS, and WIPS. The data plane is responsible for the transmission and reception of user data, such as voice, video, or web traffic. The WLAN controller may or may not participate in the data plane depending on the architecture of the WLAN. In some cases, the access point forwards the user data directly to the wired network without involving the WLAN controller (distributed data forwarding). In other cases, the access point tunnels the user data to the WLAN controller before forwarding it to the wired network (centralized data forwarding). References: CWNA-109 Study Guide, Chapter 9: Wireless LAN Architecture, page 279
