A network administrator for a corporation must create a guest SSID for a captive portal redirect powered by Cisco Catalyst Center (formerly DNA Center). The network includes a Cisco Catalyst 9800-80…

A network administrator for a corporation must create a guest SSID for a captive portal redirect powered by Cisco Catalyst Center (formerly DNA Center). The network includes a Cisco Catalyst 9800-80 WLC, Cisco 9130AXI APs, and Cisco Spaces (formerly Cisco DNA Spaces) using a connector. To support guest client captive portal redirect the administrator must create a security ACL and an intercept ACL. The ACL requirement is:

• ACL WA-v4-int34.235.248.212 must be applied first on traffic coming from the client and keep

HTTP(s) traffic toward Cisco DNA Spaces portal IP 34.235.248.212 on the data plane No drop or forward action, just hand the traffic over to the data plane. Then send it to the CPU for redirection except for virtual IP traffic, which is serviced by the web server for all HTTP(s) traffic. Other types of traffic is given to the data plane.

• ACL WA-sec-34.235.248.212 must permit HTTP and HTTPS traffic to the Cisco Spaces portal

IP 34.235.248.212 that the administrator configured in the web authentication parameter map. DNS and DHCP traffic must be allowed, but drop the rest HTTP traffic is intercepted before reaching this ACL and therefore does not need to be covered by this ACL. Which configuration implements the ACL requirements?