diff --git a/sites/BCN01-LAB/firewall.auto.tfvars b/sites/BCN01-LAB/firewall.auto.tfvars
index cf2fb0d..6789c72 100755
--- a/sites/BCN01-LAB/firewall.auto.tfvars
+++ b/sites/BCN01-LAB/firewall.auto.tfvars
@@ -11,6 +11,17 @@ firewall_rules = [
     dest_port      = "any"
     syslog_enabled = false
   },
+  {
+    # Permite que los APs (VLAN APs) lleguen a internet para acceder al Dashboard de Meraki
+    comment        = "Permitir APs a internet (acceso Dashboard Meraki)"
+    policy         = "allow"
+    protocol       = "any"
+    src_cidr       = "10.2.54.0/24" # VLAN 108 - APs
+    src_port       = "any"
+    dest_cidr      = "any"
+    dest_port      = "any"
+    syslog_enabled = false
+  },
   {
     comment        = "Bloqueo temporal switch a 8.8.8.8"
     policy         = "deny"