Data Plane: - De-encapsulating and re-encapsulating a packet in a data-link frame (routers, Layer 3 switches) - Adding or removing an 802.1Q trunking header (routers and switches) - Matching an Ethernet frame's destination Media Access Control (MAC) address to the MAC address table (Layer 2 switches) - Matching an IP packet's destination IP address to the IP routing table (routers, Layer 3 switches) - Encrypting the data and adding a new IP header (for virtual private network [VPN] processing) - Changing the source or destination IP address (for Network Address Translation [NAT] processing) - Discarding a message due to a filter (access control lists [ACLs], port security)