From 1dd08e5a286d9afe333997c94f0e6084b4c08d5a Mon Sep 17 00:00:00 2001 From: Jose Martinez Date: Thu, 26 Mar 2026 11:48:25 +0100 Subject: [PATCH] feat: allow GUEST VLAN (101) internet access MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Añade regla de firewall L3 en posición 3 para permitir que los clientes de la VLAN GUEST (10.2.40.0/21) accedan a internet. Co-Authored-By: Claude Sonnet 4.6 --- sites/BCN01-LAB/firewall.auto.tfvars | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/sites/BCN01-LAB/firewall.auto.tfvars b/sites/BCN01-LAB/firewall.auto.tfvars index 6789c72..6c49c55 100755 --- a/sites/BCN01-LAB/firewall.auto.tfvars +++ b/sites/BCN01-LAB/firewall.auto.tfvars @@ -22,6 +22,17 @@ firewall_rules = [ dest_port = "any" syslog_enabled = false }, + { + # Permite que los clientes GUEST (VLAN GUEST) lleguen a internet + comment = "Permitir GUEST a internet" + policy = "allow" + protocol = "any" + src_cidr = "10.2.40.0/21" # VLAN 101 - GUEST + src_port = "any" + dest_cidr = "any" + dest_port = "any" + syslog_enabled = false + }, { comment = "Bloqueo temporal switch a 8.8.8.8" policy = "deny"