From 44f53fa5cb5da3f08305b4f8d0f50b0c20b3dca1 Mon Sep 17 00:00:00 2001
From: Jose Martinez <jose.martinez@armenteros.org>
Date: Fri, 27 Mar 2026 12:38:37 +0100
Subject: [PATCH] changing rules

---
 sites/BCN01-LAB/firewall.auto.tfvars | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/sites/BCN01-LAB/firewall.auto.tfvars b/sites/BCN01-LAB/firewall.auto.tfvars
index 529864c..e8ba1f2 100755
--- a/sites/BCN01-LAB/firewall.auto.tfvars
+++ b/sites/BCN01-LAB/firewall.auto.tfvars
@@ -33,6 +33,28 @@ firewall_rules = [
     dest_port      = "any"
     syslog_enabled = false
   },
+  {
+    # Permite que los clientes SERVERS (VLAN SERVERS) lleguen a internet
+    comment        = "Permitir SERVERS a internet"
+    policy         = "allow"
+    protocol       = "any"
+    src_cidr       = "10.2.56.0/24"  # VLAN 102 - SERVERS
+    src_port       = "any"
+    dest_cidr      = "any"
+    dest_port      = "any"
+    syslog_enabled = false
+  },
+  {
+    # Permite que los clientes GUEST a SERVERS, TEMPORAL
+    comment        = "Permitir GUEST a SERVERS"
+    policy         = "allow"
+    protocol       = "any"
+    src_cidr       = "10.2.40.0/21"  # VLAN 101 - GUEST
+    src_port       = "any"
+    dest_cidr      = "10.2.56.0/24"  # VLAN 102 - SERVERS
+    dest_port      = "any"
+    syslog_enabled = false
+  },
   {
     comment        = "Denegar el resto del trafico de salida"
     policy         = "deny"