From ab3f30469b3bda76767cd741c1fd708afb2f4ba3 Mon Sep 17 00:00:00 2001 From: Jose Martinez Date: Fri, 27 Mar 2026 08:43:08 +0100 Subject: [PATCH] fix: sync wpa_encryption_mode WPA3 only for EQT-CORPO OWE + pass through from tfvars --- modules/meraki-site/main.tf | 4 ++-- sites/BCN01-LAB/ssids.auto.tfvars | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/modules/meraki-site/main.tf b/modules/meraki-site/main.tf index be04d4f..4379bdd 100755 --- a/modules/meraki-site/main.tf +++ b/modules/meraki-site/main.tf @@ -162,8 +162,8 @@ resource "meraki_wireless_ssid" "ssids" { auth_mode = each.value.auth_mode # PSK solo se envía para SSIDs con auth_mode "psk"; para open/open-enhanced se deja null psk = each.value.auth_mode == "psk" ? (each.value.psk != null ? each.value.psk : var.wifi_password_psk) : null - # wpa_encryption_mode solo aplica a SSIDs con PSK; open y open-enhanced (OWE) no lo usan - wpa_encryption_mode = each.value.auth_mode == "psk" ? each.value.wpa_encryption_mode : null + # wpa_encryption_mode se pasa directamente desde el tfvars (null si no aplica) + wpa_encryption_mode = each.value.wpa_encryption_mode encryption_mode = each.value.encryption_mode splash_page = each.value.splash_page ip_assignment_mode = each.value.ip_assignment_mode diff --git a/sites/BCN01-LAB/ssids.auto.tfvars b/sites/BCN01-LAB/ssids.auto.tfvars index ae89504..2e210ed 100644 --- a/sites/BCN01-LAB/ssids.auto.tfvars +++ b/sites/BCN01-LAB/ssids.auto.tfvars @@ -10,7 +10,7 @@ wireless_ssids = [ auth_mode = "open-enhanced" # OWE (Opportunistic Wireless Encryption) # Meraki API utiliza "open-enhanced" para indicar Enhanced Open / OWE. # Este valor refleja exactamente lo que está configurado en el Dashboard. - wpa_encryption_mode = null + wpa_encryption_mode = "WPA3 only" splash_page = "Password-protected with custom RADIUS" ip_assignment_mode = "Bridge mode" use_vlan_tagging = true