A network administrator managing a Cisco Catalyst 9800-80 WLC must place all iOS connected devices to the guest SSID on VLAN 101. The rest of the clients must connect on VLAN 102 distribute load across subnets. To achieve this configuration, the administrator configures a local policy on the WLC. Which two configurations are required? (Choose two.)

To implement device-based VLAN assignment using a local policy on a Cisco Catalyst 9800 WLC, two fundamental steps are necessary. First, the WLC must be enabled to identify and classify the connecting devices. This is accomplished by enabling device classification in the global wireless settings (E), which allows the WLC to use methods like DHCP and HTTP to determine the device type (e.g., iOS). Second, a policy must be defined and applied. This involves creating a policy map that links a class map (matching the device type) to an action (assigning VLAN 101) and then assigning this policy map to the WLAN's policy profile (A) to enforce the rule.

B: "Local profiling policy" is not a standard Cisco configuration term. The correct components for creating the logic are class maps and policy maps. C: A service template is primarily used to apply attributes, such as per-user ACLs, that are pushed from an external AAA server like Cisco ISE. D: HTTP and DHCP profiling methods are enabled as part of the global device classification configuration, not directly within the policy map that applies the action.

1. Cisco Catalyst 9800 Series Wireless Controller Configuration Guide, Release IOS XE Cupertino 17.9.x, "Device Profiling and Local Policies" chapter, "Information About Device Profiling and Local Policies" section. This section states, "For the controller to start device profiling, you must enable device classification." This directly supports option E as a required prerequisite.

2. Cisco Catalyst 9800 Series Wireless Controller Configuration Guide, Release IOS XE Cupertino 17.9.x, "Configuring Local Policies (GUI)" section, Step 5. The procedure for applying the policy specifies navigating to the WLAN's Policy Profile and, under the Access Policies tab, selecting the created policy map from the "Service Policy" drop-down list. This action of assigning the policy map to the WLAN profile validates option A.

3. Cisco Catalyst 9800 Series Wireless Controller Configuration Guide, Release IOS XE Cupertino 17.9.x, "Configuring Device Classification" section. This section details that profiling methods (DHCP, HTTP) are enabled globally via the wireless device classification command, which demonstrates why option D is incorrect as this is not configured within the policy map.

4. Cisco Catalyst 9800 Series Wireless Controller Configuration Guide, Release IOS XE Cupertino 17.9.x, "Configuring Security" chapter. This chapter distinguishes between local policies and AAA-based policies. The configuration for AAA-pushed attributes often involves service templates, confirming that a service template (Option C) is not the correct mechanism for a local WLC policy.