A network administrator managing a Cisco Catalyst 9800-80 WLC must place all iOS connected devices to the guest SSID on VLAN 101. The rest of the…

To implement device-based VLAN assignment using a local policy on a Cisco Catalyst 9800 WLC, two fundamental steps are necessary. First, the WLC must be enabled to identify and classify the connecting devices. This is accomplished by enabling device classification in the global wireless settings (E), which allows the WLC to use methods like DHCP and HTTP to determine the device type (e.g., iOS). Second, a policy must be defined and applied. This involves creating a policy map that links a class map (matching the device type) to an action (assigning VLAN 101) and then assigning this policy map to the WLAN's policy profile (A) to enforce the rule.

B: "Local profiling policy" is not a standard Cisco configuration term. The correct components for creating the logic are class maps and policy maps.

C: A service template is primarily used to apply attributes, such as per-user ACLs, that are pushed from an external AAA server like Cisco ISE.

D: HTTP and DHCP profiling methods are enabled as part of the global device classification configuration, not directly within the policy map that applies the action.

1. Cisco Catalyst 9800 Series Wireless Controller Configuration Guide

Release IOS XE Cupertino 17.9.x

"Device Profiling and Local Policies" chapter

"Information About Device Profiling and Local Policies" section. This section states

"For the controller to start device profiling

you must enable device classification." This directly supports option E as a required prerequisite.

2. Cisco Catalyst 9800 Series Wireless Controller Configuration Guide

Release IOS XE Cupertino 17.9.x

"Configuring Local Policies (GUI)" section

Step 5. The procedure for applying the policy specifies navigating to the WLAN's Policy Profile and

under the Access Policies tab

selecting the created policy map from the "Service Policy" drop-down list. This action of assigning the policy map to the WLAN profile validates option A.

3. Cisco Catalyst 9800 Series Wireless Controller Configuration Guide

Release IOS XE Cupertino 17.9.x

"Configuring Device Classification" section. This section details that profiling methods (DHCP

HTTP) are enabled globally via the wireless device classification command

which demonstrates why option D is incorrect as this is not configured within the policy map.

4. Cisco Catalyst 9800 Series Wireless Controller Configuration Guide

Release IOS XE Cupertino 17.9.x

"Configuring Security" chapter. This chapter distinguishes between local policies and AAA-based policies. The configuration for AAA-pushed attributes often involves service templates

confirming that a service template (Option C) is not the correct mechanism for a local WLC policy.