300-430 · Question #202
A network administrator managing a Cisco Catalyst 9800 WLC must place all iOS connected devices to the guest SSID on VLAN 101. The rest of the clients must connect on VLAN 102 distribute load across s
The correct answer is C. Create a service template. E. Enable device classification on global wireless settings.. On the Cisco Catalyst 9800 WLC, assigning iOS devices to a specific VLAN via local policy requires enabling device classification globally and creating a service template that defines the VLAN action to apply.
Question
A network administrator managing a Cisco Catalyst 9800 WLC must place all iOS connected devices to the guest SSID on VLAN 101. The rest of the clients must connect on VLAN 102 distribute load across subnets. To achieve this configuration, the administrator configures a local policy on the WLC. Which two configurations are required? (Choose two.)
Options
- AAssign a policy map under global security policy settings.
- BAdd local profiling policy under global security policy settings.
- CCreate a service template.
- DAllow HTTP and DHCP profiling under policy map.
- EEnable device classification on global wireless settings.
How the community answered
(37 responses)- A3% (1)
- B8% (3)
- C84% (31)
- D5% (2)
Why each option
On the Cisco Catalyst 9800 WLC, assigning iOS devices to a specific VLAN via local policy requires enabling device classification globally and creating a service template that defines the VLAN action to apply.
Policy maps for local policies are applied within WLAN policy profiles, not under global security policy settings; the global security policy settings govern a different scope of configuration.
Local profiling is associated with a policy profile tied to a specific WLAN, not added under global security policy settings; placing it there does not activate device-type-based VLAN assignment.
A service template on the 9800 WLC defines the specific network policy actions - such as VLAN 101 assignment - that the policy map applies when an iOS device is detected, and it is a mandatory building block of any local policy.
HTTP and DHCP profiling options are part of the device classification probe configuration, not a standalone requirement inside a policy map, and the question scenario does not require them to be configured there specifically.
Enabling device classification under global wireless settings activates the WLC's built-in device profiling engine that identifies client operating systems like iOS, which is a prerequisite before any device-type condition in a local policy can match.
Concept tested: Catalyst 9800 local policy device classification VLAN assignment
Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/device-classification.html
Topics
Community Discussion
No community discussion yet for this question.