Protocol Independent Multicast-Sparse Mode (PIM-SM or PIM) is the routing protocol most suited to get multicast routing up and running within a single domain.
http://www.telfor.rs/telfor2002/radovi/2-19.pdf

The MANAGEMENT role should be configured for administrative access to the wireless infrastructure using Cisco ISE. This role allows the configuration of WLC syslog settings, among other management tasks, ensuring proper logging and monitoring of the wireless network.

To route wireless traffic from the branch through the firewall at corporate headquarters, the correct Cisco FlexConnect configuration is central authentication and central switching. This setup ensures that both user authentication and data traffic are handled centrally at the corporate headquarters, allowing the firewall to inspect and route the traffic accordingly. Local RADIUS servers in each branch can still be used for redundancy or other purposes, but the central control of traffic is maintained.

To ensure the 1810 OEAP can join the controller from remote teleworker locations, the firewall must allow specific UDP ports that are used for AP communication with the controller. UDP ports
5246 and 5247 are used for Control and Provisioning of Wireless Access Points (CAPWAP) control and data messages, while UDP ports 12222 and 12223 are used for OfficeExtend APs' data traffic. Blocking these ports would prevent the APs from joining the controller, hence they must be allowed on the firewall.
Reference:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-
3/b_Cisco_OfficeExtend_Access_Point_.pdf

https://www.cisco.com/c/en/us/products/collateral/wireless/mobility-services-engine/datasheet- c78-734648.html