In response to movement of a wireless device, an active tunnel between switches is dynamically included as a member of a virtual network over which the wireless device communicates, where data communicated in the virtual network is carried over the active tunnel, and where the virtual network is overlaid on an underlay physical network that includes the switches and the wireless access points.