In a dual SSID design for BYOD, one SSID is used for provisioning devices, and the other is for network access. It's important not to enforce an ACL to switch SSIDs after provisioning because this could disrupt the user experience. Instead, the process should be seamless, with the device automatically connecting to the access SSID after provisioning is complete. References := (CCNP Enterprise Wireless Design ENWLSD 300-
425 and Implementation ENWLSI 300-430 Official Cert Guide)