A campus network has 60 access points spread across three buildings. The network administrator wants to centrally manage RF settings, push configuration and firmware updates, and enforce security policies without configuring each AP individually. Which network component provides this capability?