From ed5a2f27288c9e1113b0a86d931e2ef6aa13eb52 Mon Sep 17 00:00:00 2001
From: Jose Martinez <jose.martinez@armenteros.org>
Date: Thu, 26 Mar 2026 07:23:48 +0100
Subject: [PATCH] Agregando regla para que los APs puedan salir a internet

---
 sites/BCN01-LAB/firewall.auto.tfvars | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/sites/BCN01-LAB/firewall.auto.tfvars b/sites/BCN01-LAB/firewall.auto.tfvars
index cf2fb0d..6789c72 100755
--- a/sites/BCN01-LAB/firewall.auto.tfvars
+++ b/sites/BCN01-LAB/firewall.auto.tfvars
@@ -11,6 +11,17 @@ firewall_rules = [
     dest_port      = "any"
     syslog_enabled = false
   },
+  {
+    # Permite que los APs (VLAN APs) lleguen a internet para acceder al Dashboard de Meraki
+    comment        = "Permitir APs a internet (acceso Dashboard Meraki)"
+    policy         = "allow"
+    protocol       = "any"
+    src_cidr       = "10.2.54.0/24" # VLAN 108 - APs
+    src_port       = "any"
+    dest_cidr      = "any"
+    dest_port      = "any"
+    syslog_enabled = false
+  },
   {
     comment        = "Bloqueo temporal switch a 8.8.8.8"
     policy         = "deny"