A corporate web-auth SSID uses ISE RADIUS and the guest VLAN must be assigned after authentication. What must be enabled so ISE can specify the guest VLAN?

Enabling AAA Override on the WLC allows it to accept and apply attributes sent by the RADIUS server (ISE) after successful authentication. These attributes can include a specific VLAN ID, which is crucial for dynamic VLAN assignment like moving a client to a guest VLAN post-authentication. Without AAA Override, the WLC would ignore these RADIUS-provided attributes and keep the client on the initial VLAN configured for the SSID. "Network Access Control State" refers to the overall NAC process, not a specific WLC feature for dynamic VLANs. "Set AAA Policy name" is for assigning a policy on the WLC, not for enabling dynamic attribute application. "Set RADIUS Profiling" is a feature on ISE to identify device types, not a WLC setting for VLAN assignment.