In a FlexConnect deployment, which role does the site tag play?

In the Cisco Catalyst 9800 IOS XE WLC configuration framework, the site tag serves as the primary organizational and functional grouping element for FlexConnect APs at a given physical location. The site tag defines the FlexConnect site — a logical boundary within which APs can perform local switching and local inter-AP roaming without requiring CAPWAP tunnel traversal to the WLC for every client handoff. Within a FlexConnect site defined by the site tag, APs can exchange client roaming context information directly with each other (peer-to-peer), enabling fast Layer 2 roaming for clients moving between APs that share the same site tag — effectively defining the roaming domain for FlexConnect APs at that site. The site tag also references the flex profile (which defines VLAN mappings, local auth settings, and split tunneling parameters) and the AP join profile. Switch port configuration (Option A) is performed on the infrastructure switches, not through the WLC site tag. IP address assignment (Option B) is a DHCP function. Firewall policies (Option C) are applied through ACLs and policy tags, not site tags. Reference: WLSD Study Guide — Catalyst 9800 Tag Architecture, FlexConnect Site Tag Role, Local Roaming in FlexConnect Deployments.