An engineer must implement a CPU ACL that blocks web management traffic to the controller,...

For guests to reach a Web Authentication Redirect page while blocking web management traffic to the controller, guest client HTTPS traffic must be allowed to a specific IP address that does not interfere with management access. The virtual interface IP on a Cisco Wireless LAN Controller serves as a DHCP relay and is used for web authentication processes. Therefore, allowing HTTPS traffic to this IP enables guests to reach the redirect page without granting them access to manage the controller. References: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide