An engineer has configured Cisco Centralized Key Management for an enterprise that has remote branches. The remote offices are connected back to the data center using a VPN connection with low-bandwid

RF groups are used for radio resource management and dynamic channel/power assignment, not for key management or roaming optimization.

AP groups are used to apply WLAN and configuration policies to sets of APs, but do not provide CCKM key caching for roaming in FlexConnect deployments.

Interface groups bundle WLC interfaces for load balancing client assignments and are unrelated to key management or roaming.

Cisco FlexConnect groups allow APs at a remote site to share CCKM key caches among themselves, enabling fast secure roaming without sending re-authentication traffic across the low-bandwidth VPN link back to the WLC.