changing rules

2026-03-27 12:38:37 +01:00
parent e0273cfdb1
commit 44f53fa5cb
1 changed files with 22 additions and 0 deletions
@@ -33,6 +33,28 @@ firewall_rules = [
    dest_port      = "any"
    syslog_enabled = false
  },
+  {
+    # Permite que los clientes SERVERS (VLAN SERVERS) lleguen a internet
+    comment        = "Permitir SERVERS a internet"
+    policy         = "allow"
+    protocol       = "any"
+    src_cidr       = "10.2.56.0/24"  # VLAN 102 - SERVERS
+    src_port       = "any"
+    dest_cidr      = "any"
+    dest_port      = "any"
+    syslog_enabled = false
+  },
+  {
+    # Permite que los clientes GUEST a SERVERS, TEMPORAL
+    comment        = "Permitir GUEST a SERVERS"
+    policy         = "allow"
+    protocol       = "any"
+    src_cidr       = "10.2.40.0/21"  # VLAN 101 - GUEST
+    src_port       = "any"
+    dest_cidr      = "10.2.56.0/24"  # VLAN 102 - SERVERS
+    dest_port      = "any"
+    syslog_enabled = false
+  },
  {
    comment        = "Denegar el resto del trafico de salida"
    policy         = "deny"