Which Mist WLAN object is used to define user access policies?

In the Juniper Mist platform, user access policies are defined using a WLAN Policy, which functions as a role-based policy object. This object allows administrators to create rules that permit or deny traffic based on user identity or device type, often determined by attributes from a RADIUS server. These policies can control access to specific hostnames, IP addresses, or network services. By applying these policies to a WLAN, organizations can enforce granular, identity-based access control for wireless users, effectively segmenting traffic and enhancing security without relying solely on VLANs.

A. An SSID name is a broadcast identifier for a wireless network; it does not define access control rules for users connected to it.

B. A VLAN ID is used for Layer 2 network segmentation but does not provide the granular, application-aware access control that a policy does.

D. A band steering profile is an RF management feature used to encourage dual-band clients to connect to the 5 GHz band, not for security policy.

1. Juniper Networks Documentation, "WLAN Policy". The documentation states, "You can create policies to define rules that permit or deny users, roles, and devices from accessing certain resources on the network... These policies are applied at the WLAN level."

2. Juniper Networks Documentation, "Identity-Based Network Access Control". This document explains how Mist uses RADIUS attributes to assign users to different roles (labels), which are then used in WLAN policies to enforce access rules.