If you have geo-separation based networks in your organization only way is Layer 3 concentrator. But there are very well known bugs which causes packet drops in this mode. Rather I would recommend bring all of your AP's to one single network under your organization, and use Bridge mode. Only in cases where there is a coverage hole when roaming client will have to go through the whole auth process again, otherwise it will be a seamless roam.
... View more