An engineer is responsible for a wireless network for an enterprise. The enterprise has distributed offices around the globe, and all APs are configured in FlexConnect mode. The network must be config

VLAN-based central switching controls how data traffic is forwarded to the WLC and has no bearing on fast roaming key exchange mechanisms like 802.11r or CCKM.

FlexConnect local authentication allows clients to authenticate when the WLC is unreachable, but it does not enable the PMK caching required for 802.11r or CCKM fast roaming.

FlexConnect local switching determines where data frames are bridged locally at the AP, which is a forwarding-plane decision unrelated to fast roaming authentication protocols.

FlexConnect groups allow APs to share Pairwise Master Key (PMK) cache entries with one another, which is a prerequisite for both 802.11r Fast BSS Transition and CCKM to function in a FlexConnect deployment. Without grouping, APs cannot exchange the keying material needed for seamless fast roaming. This is the specific Cisco WLC configuration step that enables these fast roaming standards in FlexConnect mode.