Clients at a remote FlexConnect site with ID 338789750 are experiencing poor roaming despite the fact that Cisco Centralized Key Management is enabled on the SSID. Which FlexConnect feature must be…

Local authentication controls where 802.1X EAP processing occurs but does not provide the shared PMK cache that CCKM requires to perform fast roaming between APs.

Central switching determines whether client data traffic is forwarded locally or tunneled back to the WLC via CAPWAP, and has no effect on the key caching mechanism used during a roam event.

Learn client IP address allows FlexConnect APs to track client IP assignments for local routing decisions, but it is unrelated to the security key distribution that CCKM depends on.

FlexConnect groups enable CCKM by distributing and synchronizing the Pairwise Master Key (PMK) cache among all APs at the remote site. Without this group configuration, each AP maintains its own isolated PMK cache, forcing clients into a full 802.1X re-authentication on every roam instead of the faster CCKM key exchange.