jose.martinez/eqt-network-meraki
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
87 Commits 19 Branches 0 Tags
4cf91c5c967e5152f12f2034fe2c6945581cefc9
Commit Graph
9 Commits
Author SHA1 Message Date
Jose Martinez 4cf91c5c96 wip: add SSID slot 3 placeholder for drift detection via terraform plan 2026-03-27 08:32:54 +01:00
Jose Martinez 252695d911 fix: use auth_mode=open-enhanced to match OWE config in Dashboard 2026-03-27 08:26:01 +01:00
Jose MartinezandClaude Sonnet 4.6 30379c343e docs: add comment explaining OWE API limitation on EQT-CORPO 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 07:21:03 +01:00
Jose MartinezandClaude Sonnet 4.6 5cdc09747e feat: SSID encryption + WAN/uplink switch ports 44-48 
SSIDs:
- EQT-CORPO: wpa_encryption_mode → null (OWE / Enhanced Open)
- EQT-GUEST: wpa_encryption_mode → WPA3 Transition Mode

Puertos stack bcn01-lab-stack01 (sw01 y sw02):
- Puerto 44: access VLAN 111 WAN — ISP router 1
- Puerto 45: access VLAN 111 WAN — WAN 1 BCN01-F04-MX01
- Puerto 46: access VLAN 111 WAN — WAN 1 BCN01-F04-MX02
- Puerto 47: trunk VLAN nativa 109, todas — UPLINK LAN BCN01-F04-MX01
- Puerto 48: trunk VLAN nativa 109, todas — UPLINK LAN BCN01-F04-MX02

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 07:17:42 +01:00
Jose MartinezandClaude Sonnet 4.6 89a8506f8b fix: add encryption_mode for PSK SSIDs (EQT-GUEST) 
La API de Meraki requiere encryption_mode="wpa" cuando auth_mode="psk",
además de wpa_encryption_mode. Sin este campo la API devuelve el error
"Pre-shared key mode requires a valid encryption mode (wep, wpa)".

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-26 11:38:39 +01:00
Jose MartinezandClaude Sonnet 4.6 314f1c5391 fix: psk no puede usar var. en tfvars, se inyecta via TF_VAR 
- ssids.auto.tfvars: eliminada referencia var.wifi_password_psk (inválida
  en ficheros tfvars)
- main.tf: psk usa each.value.psk si está definido, sino cae en
  var.wifi_password_psk (TF_VAR_wifi_password_psk desde GitHub Secrets)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-26 11:22:08 +01:00
Jose Martinez 33f9452bed feat(BCN01-LAB): añadir SSID EQT-GUEST con WPA2 PSK 2026-03-26 11:17:11 +01:00
Jose MartinezandClaude Sonnet 4.6 7cb7c22b5b fix(bcn01-lab): corregir errores de apply en VLAN 111 y SSID EQT-CORPO 
- meraki_appliance_vlan: filtrar VLANs sin subnet (if v.subnet != null)
  para que VLAN 111 WAN (L2-only) no se pase a la API del MX, que exige
  CIDR en el campo subnet.
- meraki_wireless_ssid: pasar wpa_encryption_mode = null cuando
  auth_mode = "open", ya que la API Meraki rechaza modos WPA con auth
  abierta. OWE/Enhanced Open se negocia a nivel beacon y no se expone
  como atributo API.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-26 06:32:39 +01:00
Jose MartinezandClaude Sonnet 4.6 cb77482368 refactor: rename site bcn01 to BCN01-LAB 
- Rename sites/bcn01/ -> sites/BCN01-LAB/
- Update S3 backend key: bcn01/terraform.tfstate -> BCN01-LAB/terraform.tfstate
- Rename Terraform module: bcn01 -> bcn01_lab
- Update working-directory in apply.yml and plan.yml
- Update job/step names to BCN01-LAB

NOTA: mover manualmente en S3 el objeto
  bcn01/terraform.tfstate  ->  BCN01-LAB/terraform.tfstate
antes de hacer terraform init en el nuevo directorio.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-18 10:29:58 +01:00