Juniper Mist Access Assurance is a cloud-native service that can function as a RADIUS server for both Juniper and third-party network devices. To integrate Cisco APs, you must configure them as RADIUS clients. This involves creating a new WLAN/SSID profile on the Cisco infrastructure configured for 802.1X (WPA2/WPA3-Enterprise) and pointing it to the Juniper Mist cloud's RADIUS server IP addresses with the appropriate shared secret. Concurrently, within the Mist Access Assurance dashboard, you must create authentication policies and rules that define which users or devices are permitted to access the network.

A. Mist Access Assurance is designed to work with both Juniper and third-party hardware, not exclusively with third-party devices.

C. Juniper Mist Edge is an on-premises appliance for specific functions like tunneling traffic, but the primary RADIUS service for Access Assurance resides in the Mist cloud, which is the direct target for the APs.

D. While RADSEC provides enhanced security and is supported, it is not the only or mandatory method. Standard RADIUS over UDP is also a valid configuration method.

1. Juniper Mist. (2023). Access Assurance Deployment Guide. Section: "Onboard Third-Party RADIUS Clients". This guide explicitly states, "You can use Mist Access Assurance with third-party access points (APs) and switches. You must configure the third-party devices to forward authentication requests to the Mist cloud." It then details the steps, which align with option B.

2. Juniper Networks. (2023). Mist Access Assurance Datasheet. Page 2, "How it Works". The diagram and description show third-party APs/switches pointing directly to the Juniper Mist Cloud, which hosts the RADIUS server and policy engine.