Which device centralizes authentication and roaming control in an enterprise wireless network?

A Wireless LAN Controller (WLC) centralizes the management, control, and monitoring of multiple Lightweight Access Points (LAPs) in an enterprise wireless network. This centralization simplifies configuration, security policy enforcement, and roaming for wireless clients, as the WLC handles authentication and seamless transitions between APs. Lightweight access points are client-serving devices that require a WLC for operation, making them a component rather than the centralizing device. A firewall primarily provides network security by filtering traffic, not centralizing wireless authentication or roaming. A LAN switch connects wired devices within a local area network and does not manage wireless infrastructure.