The network of claim 38, wherein if a frame destination address (Address 1 field) is the address of a station then a unicast security association shared between that station and said PAP is used in said frame expansion; and wherein if said frame is a Data frame and its destination address is a group address then said MPDU bridge protocol identifies a destination virtual BSS for said frame, wherein