feat(bcn01-lab): onboard BCN01-LAB site and extend module with WAN2 support

- Add sites/BCN01-LAB with full Meraki configuration: VLANs, SSIDs, switch ports, 802.1X policy, firewall rules, WAN uplinks and warm spare - Extend modules/meraki-site to support wan2_* fields in mx_wan_uplinks Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-29 07:02:06 +02:00
parent 097a3c5b6c
commit 29614e1dc4
12 changed files with 457 additions and 0 deletions
@@ -0,0 +1,93 @@
+locals {
+  switch_vlans = {
+    "100" = {
+      name         = "ACCESS"
+      subnet       = "10.2.32.0/21"
+      appliance_ip = "10.2.32.1"
+      reserved_ip_ranges = [
+        { comment = "Static reserved", id = "static", start = "10.2.32.1", end = "10.2.32.49" }
+      ]
+    }
+    "101" = {
+      name         = "GUEST"
+      subnet       = "10.2.40.0/21"
+      appliance_ip = "10.2.40.1"
+      reserved_ip_ranges = [
+        { comment = "Static reserved", id = "static", start = "10.2.40.1", end = "10.2.40.49" }
+      ]
+    }
+    "102" = {
+      name         = "VC"
+      subnet       = "10.2.48.0/24"
+      appliance_ip = "10.2.48.1"
+      reserved_ip_ranges = [
+        { comment = "Static reserved", id = "static", start = "10.2.48.1", end = "10.2.48.49" }
+      ]
+    }
+    "103" = {
+      name         = "PRINTERS"
+      subnet       = "10.2.49.0/24"
+      appliance_ip = "10.2.49.1"
+      reserved_ip_ranges = [
+        { comment = "Static reserved", id = "static", start = "10.2.49.1", end = "10.2.49.49" }
+      ]
+    }
+    "104" = {
+      name         = "DISPLAYS"
+      subnet       = "10.2.50.0/24"
+      appliance_ip = "10.2.50.1"
+      reserved_ip_ranges = [
+        { comment = "Static reserved", id = "static", start = "10.2.50.1", end = "10.2.50.49" }
+      ]
+    }
+    "105" = {
+      name         = "BOOKING"
+      subnet       = "10.2.51.0/24"
+      appliance_ip = "10.2.51.1"
+      reserved_ip_ranges = [
+        { comment = "Static reserved", id = "static", start = "10.2.51.1", end = "10.2.51.49" }
+      ]
+    }
+    "106" = {
+      name         = "BADGE_READERS"
+      subnet       = "10.2.52.0/24"
+      appliance_ip = "10.2.52.1"
+      reserved_ip_ranges = [
+        { comment = "Static reserved", id = "static", start = "10.2.52.1", end = "10.2.52.49" }
+      ]
+    }
+    "107" = {
+      name         = "CCTV"
+      subnet       = "10.2.53.0/24"
+      appliance_ip = "10.2.53.1"
+      reserved_ip_ranges = [
+        { comment = "Static reserved", id = "static", start = "10.2.53.1", end = "10.2.53.49" }
+      ]
+    }
+    "108" = {
+      name         = "APs"
+      subnet       = "10.2.54.0/24"
+      appliance_ip = "10.2.54.1"
+      reserved_ip_ranges = [
+        { comment = "Static reserved", id = "static", start = "10.2.54.1", end = "10.2.54.49" }
+      ]
+    }
+    "109" = {
+      name          = "MANAGEMENT"
+      subnet        = "10.2.55.0/24"
+      appliance_ip  = "10.2.55.1"
+      dhcp_handling = "Do not respond to DHCP requests"
+    }
+    "110" = {
+      name          = "SERVERS"
+      subnet        = "10.2.56.0/24"
+      appliance_ip  = "10.2.56.1"
+      dhcp_handling = "Do not respond to DHCP requests"
+    }
+    "111" = {
+      name          = "WAN"
+      dhcp_handling = "Do not respond to DHCP requests"
+      # No subnet or appliance_ip — L2-only switching VLAN toward the ISP
+    }
+  }
+}