System for providing of control plane and data plane in a WLAN, comprising: a physical access point providing data connectivity for a user equipment, wherein the physical access point comprises one or more wireless termination points, at least one virtual access point being configured to control the data connectivity, wherein the at least one virtual access point is a virtual machine that is configured to execute an access point firmware/operating system, an isolation layer connected with the physical access point and the virtual access point, wherein the isolation layer comprises an isolation switch and an isolation switch controller, wherein the isolation layer is configured to handle data frames in the data plane and control messages in the control plane between the physical access point and the virtual access point, wherein the control messages are to configure WLAN cards on a wireless termination point, wherein the isolation switch is connected with the isolation switch controller via a switch control connection using a switch control protocol, wherein the isolation switch is configured to perform said handling of the data frames and the control messages according to rules defined by the isolation switch controller, wherein the virtual access point comprises a virtual wireless network interface card, wherein the virtual wireless network interface card is configured to create the control messages including an operational change instruction which is an instruction to change a channel, and to forward the control messages to the isolation switch controller, and wherein the isolation switch controller is configured to process the control messages, and if allowed, to forward the control messages to the physical access point for performing the operational change. a physical access point providing data connectivity for a user equipment, wherein the physical access point comprises one or more wireless termination points, at least one virtual access point being configured to control the data connectivity, wherein the at least one virtual access point is a virtual machine that is configured to execute an access point firmware/operating system, an isolation layer connected with the physical access point and the virtual access point, wherein the isolation layer comprises an isolation switch and an isolation switch controller, wherein the isolation layer is configured to handle data frames in the data plane and control messages in the control plane between the physical access point and the virtual access point, wherein the control messages are to configure WLAN cards on a wireless termination point, wherein the isolation switch is connected with the isolation switch controller via a switch control connection using a switch control protocol, wherein the isolation switch is configured to perform said handling of the data frames and the control messages according to rules defined by the isolation switch controller, wherein the virtual access point comprises a virtual wireless network interface card, wherein the virtual wireless network interface card is configured to create the control messages including an operational change instruction which is an instruction to change a channel, and to forward the control messages to the isolation switch controller, and wherein the isolation switch controller is configured to process the control messages, and if allowed, to forward the control messages to the physical access point for performing the operational change.