Merge pull request #14 from its-corp/feature/bcn01-ap-internet-rule

feat: allow GUEST VLAN (101) internet access
2026-03-26 11:50:50 +01:00
parent bf2210db21 1dd08e5a28
commit f53df53cf8
1 changed files with 11 additions and 0 deletions
@@ -22,6 +22,17 @@ firewall_rules = [
    dest_port      = "any"
    syslog_enabled = false
  },
+  {
+    # Permite que los clientes GUEST (VLAN GUEST) lleguen a internet
+    comment        = "Permitir GUEST a internet"
+    policy         = "allow"
+    protocol       = "any"
+    src_cidr       = "10.2.40.0/21"  # VLAN 101 - GUEST
+    src_port       = "any"
+    dest_cidr      = "any"
+    dest_port      = "any"
+    syslog_enabled = false
+  },
  {
    comment        = "Bloqueo temporal switch a 8.8.8.8"
    policy         = "deny"