jose.martinez/eqt-network-meraki
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
50 Commits 19 Branches 0 Tags
c86569436bac7ba6a6e83f3a54f0754ec497c252
Commit Graph
50 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jose Martinez c86569436b feat(BCN01-LAB): sync manual Dashboard changes to Terraform 
- Management VLAN switches → 109
- Puerto 47 stack: trunk, native VLAN 109
- SVI stack bcn01-lab-stack01: VLAN 109, 10.2.55.2/24, GW 10.2.55.1
- MX puerto 7: trunk, native VLAN 109
- Firewall: allow MANAGEMENT → internet (primera regla)
- Puerto 1 eqt-lab-st01-sw01: VLAN 110 (SERVERS)
 2026-03-25 18:24:47 +01:00
Jose MartinezandClaude Sonnet 4.6 88ae4a7574 chore: ignorar carpeta docs/ en git 
La documentacion (HLD, LLD) se almacena en docs/ localmente
pero no se versiona en el repositorio.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-25 12:55:22 +01:00
Jose MartinezandClaude Sonnet 4.6 67268df12d fix: correct stack name to bcn01-lab-stack01 (matches Meraki Dashboard) 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-25 09:05:17 +01:00
Jose MartinezandClaude Sonnet 4.6 73497c1b49 fix: correct stack name typo bcn01 -> bnc01 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-25 08:59:16 +01:00
Jose MartinezandClaude Sonnet 4.6 418b0e94f4 feat: configure port 5 of bcn01-lab-stack01 to VLAN 101 (GUEST) 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-25 08:55:13 +01:00
Jose MartinezandClaude Sonnet 4.6 c6343d977e feat: add switch stack port config with dynamic serial resolution 
- Add data source meraki_switch_stacks to resolve member serials by stack name
- Add switch_stack_port_configs variable: specify stack_name + port_range
  instead of individual switch serials
- Terraform applies port_range to ALL members of the stack automatically
- Merge switch_port_configs and switch_stack_port_configs into all_ports local
- Add example for bcn01-lab-stack01 (2x48p) in switch.auto.tfvars

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-25 08:42:48 +01:00
Jose MartinezandClaude Sonnet 4.6 16c09f8cc5 docs: fix comments - Group Policies en switches no asignan VLAN, es estatica en el puerto 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-19 09:50:26 +01:00
Jose MartinezandClaude Sonnet 4.6 711dfa79bf docs: add APs port example in switch.auto.tfvars 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-18 12:13:14 +01:00
Jose MartinezandClaude Sonnet 4.6 dcc7398355 docs: add port config examples (802.1X, impresoras, uplink) in switch.auto.tfvars 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-18 12:11:02 +01:00
Jose MartinezandClaude Sonnet 4.6 775dbce9a8 feat: support port ranges in switch_port_configs (e.g. port_range = "1-24") 
Replace port_id with port_range in variable; add local to expand ranges
into individual port entries before creating meraki_switch_port resources.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-18 11:37:11 +01:00
Jose MartinezandClaude Sonnet 4.6 67420fc099 feat: change access_policy_type to Hybrid authentication (802.1X + MAB fallback) 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-18 11:27:25 +01:00
Jose Martinez 0536a2f1b0 trigger: re-run apply with DOT1X-CORPO name 2026-03-18 11:24:36 +01:00
Jose Martinez 4500466248 Merge branch 'feature/switch-dot1x' 2026-03-18 11:19:21 +01:00
Jose MartinezandClaude Sonnet 4.6 cc5c3615b0 fix: rename access policy 802.1X-CORPO to DOT1X-CORPO (Meraki naming rules) 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-18 11:16:02 +01:00
Jose MartinezandGitHub Enterprise 9cccd25e85 Merge pull request #7 from its-corp/feature/switch-dot1x 
Feature/switch dot1x
 2026-03-18 11:14:50 +01:00
Jose MartinezandClaude Sonnet 4.6 51622ab923 fix: remove unsupported voice_vlan_id from meraki_switch_port resource 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-18 11:12:02 +01:00
Jose MartinezandClaude Sonnet 4.6 cecf38efd7 fix: add required radius_testing_enabled and radius_coa_support_enabled to switch_access_policy 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-18 11:10:42 +01:00
Jose MartinezandClaude Sonnet 4.6 0aa21b56f9 fix: set critical VLAN to 101 (GUEST) for 802.1X policy 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-18 11:04:35 +01:00
Jose MartinezandClaude Sonnet 4.6 9b86ba97af feat: add 802.1X switch access policy support 
- Add meraki_switch_access_policy resource to module (multi-auth, critical VLAN)
- Add meraki_switch_port resource for per-port policy assignment
- Add switch_access_policies and switch_port_configs variables to module and site
- Create switch.auto.tfvars for BCN01-LAB with 802.1X-CORPO policy
  (RADIUS: 15.15.15.15:1912, critical VLAN: 100, host_mode: Multi-Auth)
- switch_port_configs starts empty; add serial + port_id to assign policy to ports

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-18 11:01:55 +01:00
Jose MartinezandClaude Sonnet 4.6 cb77482368 refactor: rename site bcn01 to BCN01-LAB 
- Rename sites/bcn01/ -> sites/BCN01-LAB/
- Update S3 backend key: bcn01/terraform.tfstate -> BCN01-LAB/terraform.tfstate
- Rename Terraform module: bcn01 -> bcn01_lab
- Update working-directory in apply.yml and plan.yml
- Update job/step names to BCN01-LAB

NOTA: mover manualmente en S3 el objeto
  bcn01/terraform.tfstate  ->  BCN01-LAB/terraform.tfstate
antes de hacer terraform init en el nuevo directorio.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-18 10:29:58 +01:00
Jose Martinez ed9ee66972 Merge branch 'main' of github.mpi-internal.com:its-corp/eqt-network-meraki 2026-03-16 18:52:14 +01:00
Jose MartinezandClaude Sonnet 4.6 f0cc9781a6 fix: set auth_mode=open for RADIUS splash page on EQT-CORPO SSID 
open-with-radius es para MAC-based RADIUS (sin splash), incompatible
con splash pages. auth_mode=open con custom RADIUS splash es la
combinacion correcta para captive portal + autenticacion RADIUS.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-16 18:49:50 +01:00
Jose Martinez fea7b85099 fix: remove wpa_encryption_mode to fix MAC-based AC incompatibility 2026-03-16 18:44:57 +01:00
Jose MartinezandGitHub Enterprise 8a72f5aa6c Merge pull request #6 from its-corp/feature/add-ssid-eqt-corpo 
fix: use radius_servers as list attribute in wireless SSID
 2026-03-16 18:42:13 +01:00
Jose Martinez bbe4921bc9 fix: use radius_servers as list attribute in wireless SSID 2026-03-16 17:18:07 +01:00
Jose MartinezandGitHub Enterprise e60ea38939 Merge pull request #5 from its-corp/feature/add-ssid-eqt-corpo 
feat: add EQT-CORPO SSID with OWE and Okta RADIUS
 2026-03-16 17:16:10 +01:00
Jose Martinez c1595cd9d5 feat: add EQT-CORPO SSID with OWE and Okta RADIUS 2026-03-16 17:13:40 +01:00
Jose MartinezandGitHub Enterprise 9857fde037 Merge pull request #4 from its-corp/feature/borrar-vlan-test 
borrando vlan test
 2026-03-16 14:15:08 +01:00
Jose Martinez 6b995dfc4b borrando vlan test 2026-03-16 14:11:54 +01:00
Jose MartinezandGitHub Enterprise 24d7ba41ba Merge pull request #3 from its-corp/feature/crear-vlan-test 
testeando la creacion de una nueva VLAN
 2026-03-16 13:45:01 +01:00
Jose Martinez 7079c7cfaf testeando la creacion de una nueva VLAN 2026-03-16 13:42:46 +01:00
Jose Martinez 13261ce136 fix: disable syslog on firewall rules (no syslog server configured) 2026-03-16 13:36:19 +01:00
Jose Martinez 7c56b8a6c4 fix: revert to dynamodb_table for state locking 2026-03-16 13:33:54 +01:00
Jose Martinez 1ca684c20f fix: replace deprecated dynamodb_table with use_lockfile 2026-03-16 13:28:18 +01:00
Jose Martinez 4de8fa62dd fixing the problem with meraki key 2026-03-16 12:05:28 +01:00
Jose Martinez 303e816754 fix: remove vlan_profile_name output from module 2026-03-16 11:36:20 +01:00
Jose MartinezandGitHub Enterprise fffc900cc6 Merge pull request #2 from its-corp/feature/remove-vlan-999-test 
test: remove VLAN 999 TEST
 2026-03-16 11:33:58 +01:00
Jose Martinez d112d6298d Merge branch 'main' into feature/remove-vlan-999-test 2026-03-16 11:31:20 +01:00
Jose Martinez 0bcf568759 fix: add required_providers to meraki-site module 2026-03-16 11:28:13 +01:00
Jose Martinez 09af746345 fix: use self-hosted runner and SSH for git 2026-03-16 11:15:05 +01:00
Jose Martinez 26818e009f retry: trigger workflow 2026-03-16 11:11:40 +01:00
Jose Martinez 1b37741dcc fix: use self-hosted runner 2026-03-16 10:54:35 +01:00
Jose Martinez 5bf030700e test: remove VLAN 999 TEST 2026-03-16 10:27:52 +01:00
Jose MartinezandGitHub Enterprise a3e951c8bd Merge pull request #1 from its-corp/feature/add-vlan-999-test 
feat: add VLAN 999 TEST for testing
 2026-03-16 10:16:42 +01:00
Jose Martinez 32b472837d feat: add VLAN 999 TEST for testing 2026-03-16 10:12:26 +01:00
Jose Martinez af57439a83 feat: add S3 backend and GitHub Actions workflows 2026-03-16 09:29:16 +01:00
Jose Martinez addf16640b First commit 2026-03-13 15:15:59 +01:00
Jose Martinez c8c802a7ab fix: add .DS_Store to .gitignore 2026-03-13 14:13:45 +01:00
Jose Martinez 98969e41c3 fix: remove .DS_Store files and update .gitignore 2026-03-13 14:12:53 +01:00
Jose Martinez 266d20f194 Initial commit: meraki network configuration 2026-03-13 14:01:53 +01:00