In which device state does a WAN Edge create control connections but not establish data tunnels?

The "staging" state allows a WAN Edge device to establish control plane connections with the vSmart controllers, learn routes, and receive policies, but it prevents the device from forming data plane tunnels (IPsec tunnels) with other WAN Edge devices. This is useful for pre-provisioning or troubleshooting a device before it fully participates in the data plane. "Valid" is not a device state in this context. "Backup" is not a standard device state for this purpose; while a device might have backup roles, it doesn't describe a state where data tunnels are specifically suppressed. "Active" indicates a fully operational device participating in both control and data planes.