You have set up FlexConnect APs. For which scenario is Fast Roaming supported, providing the WLAN is mapped to the same VLAN and the client is roaming to an AP on the same Cisco WLC?

OKC with central switching between different FlexConnect groups is not supported for fast roaming because inter-group key distribution is unavailable and central switching adds a WLC dependency that slows the handoff.

Local switching with CCKM (Cisco Centralized Key Management) within the same FlexConnect group supports fast roaming because CCKM proactively distributes pairwise master keys to neighboring APs, enabling rapid re-authentication without a full 802.1X exchange. Local switching ensures the data path does not rely on WLC availability, and same-group membership guarantees key synchronization among APs.

Central switching with CCKM between different FlexConnect groups is not a supported fast roaming scenario because cross-group roaming and central switching together introduce excessive latency and require WLC involvement for each client transition.

PMKID is a passive key identification mechanism and does not provide proactive key distribution; without CCKM, a full 802.1X re-authentication must occur, which does not qualify as fast roaming.