Unleashed captive portals and firewalls

[ana_sm]

If we set up a captive portal on our master unleashed AP and allow traffic on firewall according to master AP's IP address, what will happen if master AP goes out and another AP takes over its roll? Do we have to allow traffic on the firewall for all AP's or?