jose.martinez/eqt-network-meraki
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

changing rules

Browse Source
This commit is contained in:
Jose Martinez
2026-03-27 12:38:37 +01:00
parent e0273cfdb1
commit 44f53fa5cb
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sites/BCN01-LAB/firewall.auto.tfvars
+22
View File
@@ -33,6 +33,28 @@ firewall_rules = [
dest_port = "any" dest_port = "any"
syslog_enabled = false syslog_enabled = false
}, },
{
# Permite que los clientes SERVERS (VLAN SERVERS) lleguen a internet
comment = "Permitir SERVERS a internet"
policy = "allow"
protocol = "any"
src_cidr = "10.2.56.0/24" # VLAN 102 - SERVERS
src_port = "any"
dest_cidr = "any"
dest_port = "any"
syslog_enabled = false
},
{
# Permite que los clientes GUEST a SERVERS, TEMPORAL
comment = "Permitir GUEST a SERVERS"
policy = "allow"
protocol = "any"
src_cidr = "10.2.40.0/21" # VLAN 101 - GUEST
src_port = "any"
dest_cidr = "10.2.56.0/24" # VLAN 102 - SERVERS
dest_port = "any"
syslog_enabled = false
},
{ {
comment = "Denegar el resto del trafico de salida" comment = "Denegar el resto del trafico de salida"
policy = "deny" policy = "deny"