To segregate iOS-connected devices onto a guest SSID on VLAN 101 and the rest of the clients on VLAN 102, specific configurations are needed on the Cisco Catalyst 9800 Wireless LAN Controller (WLC). The correct configurations required are:

Add local profiling policy under global security policy settings (Option B): This allows the WLC to profile devices based on their operating system. By identifying iOS devices, a local profiling policy can then direct these devices to the appropriate VLAN.

Enable device classification on global wireless settings (Option E): Device classification is necessary for the WLC to differentiate between device types. Once enabled, it can apply different policies based on whether a device is recognized as an iOS device or not.

References := ( CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide )