A WLC must be configured to allow multiple mDNS profiles based on a user authentication profile configured in Cisco ISE. Which WLAN setting must be configured?

When AAA Override is enabled on a WLAN, the WLC accepts RADIUS VSA (Vendor Specific Attributes) returned by Cisco ISE during authentication and uses them to override local WLAN settings for that specific session. ISE can return an mDNS profile name as a RADIUS attribute based on the user's identity or group, allowing the WLC to apply a different mDNS profile per user without requiring separate WLANs. Without AAA Override, ISE attributes are ignored and only the statically configured mDNS profile applies.

Service advertisement configures which mDNS services the controller advertises or forwards, but does not enable ISE to dynamically assign different mDNS profiles per authenticated user.

The mDNS policy setting defines the policy itself on the WLC, but enabling it alone does not allow ISE to override it dynamically based on per-user authentication results.

mDNS Snooping enables the WLC to listen to and cache mDNS service announcements from the wired network, but does not provide the mechanism for ISE to assign per-user mDNS profiles.