To throttle download speeds for specific device types---such as ChromeOS devices---and assign them to a dedicated VLAN, the appropriate configuration is to create a Device Policy and apply it to the target WLAN.

According to the RUCKUS One Online Help -- Device Policy Management, and RUCKUS AI documentation -- Policy Control and Device Analytics, Device Policies can classify client devices based on operating system, MAC OUI, or fingerprinting data. Once identified, administrators can enforce rate limits, VLAN tagging, and access restrictions for that device type.

By applying this policy to the STUDENT SSID, all detected ChromeOS clients will have bandwidth limits applied and their traffic segmented into the configured VLAN for management and security isolation.

Other options---such as Layer 2 ACLs or Application Control Policies---manage packet-level permissions or app-level prioritization, not per-device bandwidth or VLAN segmentation. Creating a new WLAN is unnecessary since RUCKUS policy management allows dynamic device-based enforcement on a single SSID.

RUCKUS One Online Help -- Device Policy and VLAN Assignment by OS Type

RUCKUS Analytics 3.5 User Guide -- Client Behavior and Policy Enforcement Analytics

RUCKUS AI Documentation -- Policy Control: Device Classification and Rate Limiting