A network with wireless connectivity, a vehicle connected to and including the network and a method of managing network data flow. The network includes multiple wireless access points, each connected to an Ethernet aggregation switch. Each Ethernet aggregation switch is virtual local area network (VLAN) aware and matches client traffic from connected access points with access VLANs. A virtual network switch maintains an association table between access VLANs and core VLANs. The virtual network switch uses the association table to manage free-form client traffic between mobile stations at access VLANs at connected Ethernet aggregation switches and appropriate core VLANs. The vehicle, including the network, may be a train with access points located trackside connecting train passengers to a public network, e.g., the Internet. Wireless devices on the train may also connect to an on-board such network.