feat: add EQT-CORPO SSID with OWE and Okta RADIUS

sites/bcn01/variables.tf

@@ -27,6 +27,36 @@ variable "firewall_rules" {
   description = "Lista de reglas de firewall L3 para el site"
 }
 
+# SSIDs wireless
+variable "wireless_ssids" {
+  type = list(object({
+    number              = number
+    name                = string
+    enabled             = optional(bool, true)
+    auth_mode           = string
+    splash_page         = optional(string, "None")
+    wpa_encryption_mode = optional(string, "WPA3 only")
+    ip_assignment_mode  = optional(string, "Bridge mode")
+    use_vlan_tagging    = optional(bool, false)
+    default_vlan_id     = optional(number, null)
+    redirect_url        = optional(string, "")
+    radius_servers = optional(list(object({
+      host = string
+      port = number
+    })), [])
+  }))
+  default     = []
+  description = "Lista de SSIDs wireless a configurar en el site"
+}
+
+# Shared secret para servidores RADIUS (sensible, no incluir en tfvars)
+variable "radius_secret" {
+  type        = string
+  sensitive   = true
+  default     = ""
+  description = "Shared secret para autenticación RADIUS. Pasar via TF_VAR_radius_secret"
+}
+
 # Definición de VLANs
 variable "switch_vlans" {
   type = map(object({