This website requires JavaScript.
629614cba8
Merge pull request #28 from its-corp/feat/bcn01-lab-sw01-port15-servers
Jose Martinez and GitHub Enterprise
2026-05-12 11:52:28 +02:00
9b8c29d5dc
feat(bcn01-lab): set port 15 sw01 to SERVERS VLAN (110) access mode
Jose Martinez and Claude Sonnet 4.6
2026-05-12 11:47:20 +02:00
885365ff73
Merge pull request #27 from its-corp/feat/bcn01-lab-nat-port-5001
Jose Martinez and GitHub Enterprise
2026-05-07 15:02:11 +02:00
5e009ef49a
ci: retrigger plan for PR #27
Jose Martinez
2026-05-07 15:00:25 +02:00
4d9b4c13bd
feat(bcn01-lab): add port 5001 to Synology 1:1 NAT rule
Jose Martinez and Claude Sonnet 4.6
2026-05-07 14:56:13 +02:00
9223699c79
Merge pull request #26 from its-corp/feat/bcn01-lab-sw01-ports-management-dhcp
Jose Martinez and GitHub Enterprise
2026-05-07 12:28:43 +02:00
88895cbf8c
feat(bcn01-lab): assign ports 11/12 on sw01 and enable DHCP on MANAGEMENT VLAN
Jose Martinez and Claude Sonnet 4.6
2026-05-07 12:26:50 +02:00
59427707e7
Merge pull request #25 from its-corp/feat/bcn01-lab-nat-ports
Jose Martinez and GitHub Enterprise
2026-05-07 10:33:53 +02:00
85ef316745
feat(bcn01-lab): restrict 1:1 NAT to specific service ports, allow any source
Jose Martinez and Claude Sonnet 4.6
2026-05-07 10:30:29 +02:00
36f08cc7cb
Merge pull request #24 from its-corp/fix/radius-secret-default
Jose Martinez and GitHub Enterprise
2026-05-07 09:54:03 +02:00
6d0f186795
fix(meraki-site): correct 1:1 NAT resource type name
Jose Martinez and Claude Sonnet 4.6
2026-05-07 09:52:27 +02:00
b8e517cb40
feat(bcn01-lab): add 1:1 NAT support and import Synology rule
Jose Martinez and Claude Sonnet 4.6
2026-05-07 09:42:59 +02:00
3268bae474
Merge pull request #23 from its-corp/fix/radius-secret-default
Jose Martinez and GitHub Enterprise
2026-05-05 07:53:44 +02:00
4a93967012
fix(bcn01-lab): use null default for radius_secret variable
Jose Martinez and Claude Sonnet 4.6
2026-05-05 07:51:24 +02:00
de90079f32
ci: retrigger apply for BCN01-LAB port 1 sw01
Jose Martinez and Claude Sonnet 4.6
2026-04-29 07:34:00 +02:00
d71ae52979
ci: retrigger apply for BCN01-LAB port 1 sw01
Jose Martinez and Claude Sonnet 4.6
2026-04-29 07:32:30 +02:00
3fe5a1722b
ci: retrigger apply to fix port 1 sw01 profile binding
Jose Martinez and Claude Sonnet 4.6
2026-04-29 07:31:10 +02:00
1157b7cfc7
Merge pull request #22 from its-corp/bcn01-lab
Jose Martinez and GitHub Enterprise
2026-04-29 07:13:35 +02:00
9227e3a1ab
fix(bcn01-lab): set DOT1X-CORPO host_mode to Multi-Host to match Dashboard
Jose Martinez and Claude Sonnet 4.6
2026-04-29 07:09:09 +02:00
9184567152
fix(bcn01-lab): correct auth_mode value for EQT-CORPO SSID
Jose Martinez and Claude Sonnet 4.6
2026-04-29 07:04:35 +02:00
29614e1dc4
feat(bcn01-lab): onboard BCN01-LAB site and extend module with WAN2 support
Jose Martinez and Claude Sonnet 4.6
2026-04-29 07:02:06 +02:00
097a3c5b6c
Merge pull request #21 from its-corp/feature/multi-site-scalability
Javier Veral and GitHub Enterprise
2026-04-21 10:33:53 +02:00
fde7a160ac
fake change: just to force checks
Xavier Lario
2026-04-21 10:29:53 +02:00
d1839fce7a
temp fix: remove BCN01-LAB to commit just code
Xavier Lario
2026-04-21 10:26:00 +02:00
824ba83f93
fix(ci): use MERAKI_API_KEY env var — correct name for CiscoDevNet/meraki provider
Xavier Lario
2026-04-21 09:03:57 +02:00
79ee5868ee
revert last changes
Xavier Lario
2026-04-21 08:58:41 +02:00
55a6a98044
fix: pass meraki api key explicitly via provider block and TF_VAR
Xavier Lario
2026-04-20 16:43:24 +02:00
6ffe6bfcc5
ix(BCN01-LAB): add required_providers to root module — not inherited from child modules
Xavier Lario
2026-04-20 16:27:20 +02:00
c6dfd9deef
fix(ci): add contents: read permission to plan job
Xavier Lario
2026-04-20 16:24:10 +02:00
01acb2e54d
fix(ci): reset git SSH override before checkout to prevent self-hosted runner state pollution
Xavier Lario
2026-04-20 16:20:39 +02:00
20c9b142fd
fix: problem with the sites discovery
Xavier Lario
2026-04-20 16:14:17 +02:00
a797a18909
fix: change ubuntu for selfhosted for tests
Xavier Lario
2026-04-20 15:00:24 +02:00
43d696a3c6
change: add vscode files to gitignore
Xavier Lario
2026-04-20 10:24:02 +02:00
8ff53503db
feat: multi-site scalability, locals refactor, README
Xavier Lario
2026-04-20 10:16:49 +02:00
881d0ac5b8
docs: add MANUAL_STEPS.md with Client VPN and OWE manual config
Jose Martinez
2026-04-07 06:28:43 +02:00
44f53fa5cb
changing rules
Jose Martinez
2026-03-27 12:38:37 +01:00
e0273cfdb1
feat: remove firewall rules - Acceso Javi, Bloqueo 8.8.8.8, Bloqueo Cloudflare
Jose Martinez
2026-03-27 12:31:44 +01:00
76a0ef9d93
fix: split SSID resource - ssids_open omits wpa_encryption_mode (API rejects it for auth_mode=open)
Jose Martinez
2026-03-27 12:24:21 +01:00
21bdb41e9d
fix: change wpa_encryption_mode default to null to avoid WPA3 incompatibility with open SSIDs
Jose Martinez
2026-03-27 12:19:53 +01:00
e8172f35d7
fix: set wpa_encryption_mode=null for EQT-CORPO-OWE-OK (open incompatible with WPA3)
Jose Martinez
2026-03-27 12:16:57 +01:00
57c1b9f2a2
Merge pull request #20 from its-corp/feature/bcn01-ssid-encryption-wan-ports
Jose Martinez and GitHub Enterprise
2026-03-27 12:02:16 +01:00
e6668edd37
feat: add visible field to SSID module + hide EQT-CORPO-OWE-OK
Jose Martinez
2026-03-27 11:53:02 +01:00
1919e1ffc9
feat: add EQT-CORPO-OWE-OK SSID (slot 2) synced from Dashboard
Jose Martinez
2026-03-27 11:35:06 +01:00
ab3f30469b
fix: sync wpa_encryption_mode WPA3 only for EQT-CORPO OWE + pass through from tfvars
Jose Martinez
2026-03-27 08:43:08 +01:00
27292fddb6
fix: set real name for SSID slot 2 (EQT-CORPO-OWE-OK)
Jose Martinez
2026-03-27 08:39:00 +01:00
02381faf91
fix: SSID slot 3 -> slot 2 (Meraki indexa desde 0)
Jose Martinez
2026-03-27 08:38:20 +01:00
af7f59f3c2
fix: only inject PSK and wpa_encryption_mode for auth_mode=psk SSIDs
Jose Martinez
2026-03-27 08:37:14 +01:00
4cf91c5c96
wip: add SSID slot 3 placeholder for drift detection via terraform plan
Jose Martinez
2026-03-27 08:32:54 +01:00
cb3fa39a6f
Merge pull request #19 from its-corp/feature/bcn01-ssid-encryption-wan-ports
Jose Martinez and GitHub Enterprise
2026-03-27 08:28:04 +01:00
252695d911
fix: use auth_mode=open-enhanced to match OWE config in Dashboard
Jose Martinez
2026-03-27 08:26:01 +01:00
65452a8f05
Merge pull request #18 from its-corp/feature/bcn01-ssid-encryption-wan-ports
Jose Martinez and GitHub Enterprise
2026-03-27 07:26:47 +01:00
30379c343e
docs: add comment explaining OWE API limitation on EQT-CORPO
Jose Martinez and Claude Sonnet 4.6
2026-03-27 07:21:03 +01:00
5cdc09747e
feat: SSID encryption + WAN/uplink switch ports 44-48
Jose Martinez and Claude Sonnet 4.6
2026-03-27 07:17:42 +01:00
ee0f34bd34
Merge pull request #17 from its-corp/feature/bcn01-ap-internet-rule
Jose Martinez and GitHub Enterprise
2026-03-27 06:30:26 +01:00
493ef14933
fix: add virtual_ip2 10.212.160.40 for WAN2 warm spare
Jose Martinez and Claude Sonnet 4.6
2026-03-27 05:27:52 +01:00
25cf428235
fix: remove virtual_ip2 — WAN2 se desconecta, todo el tráfico por WAN1
Jose Martinez and Claude Sonnet 4.6
2026-03-26 21:33:03 +01:00
0afeda07bc
fix: change virtual_ip2 to free IP (can't use WAN IP itself)
Jose Martinez and Claude Sonnet 4.6
2026-03-26 21:27:20 +01:00
363174c2c3
Merge pull request #16 from its-corp/feature/bcn01-ap-internet-rule
Jose Martinez and GitHub Enterprise
2026-03-26 21:25:57 +01:00
4e319962a8
fix: add virtual_ip2 for WAN2 in warm spare (WAN2 DHCP activo)
Jose Martinez and Claude Sonnet 4.6
2026-03-26 21:20:42 +01:00
5525f12094
Merge pull request #15 from its-corp/feature/bcn01-ap-internet-rule
Jose Martinez and GitHub Enterprise
2026-03-26 21:13:36 +01:00
632205f997
fix: sync dashboard drift — Javi synology rule + Servers port VLAN
Jose Martinez and Claude Sonnet 4.6
2026-03-26 21:10:30 +01:00
c171ebee5f
fix: remove unsupported interfaces_wan1_enabled from device_management_interface
Jose Martinez and Claude Sonnet 4.6
2026-03-26 21:02:55 +01:00
4a2eeb6c17
feat: add Warm Spare (HA) with VIP for MX appliances
Jose Martinez and Claude Sonnet 4.6
2026-03-26 20:59:20 +01:00
5d0f043503
refactor: resolve MX serial by device name instead of hardcoded serial
Jose Martinez and Claude Sonnet 4.6
2026-03-26 20:52:29 +01:00
7fdb3e956e
feat: configure static WAN1 IP for primary and spare MX
Jose Martinez and Claude Sonnet 4.6
2026-03-26 20:50:14 +01:00
f53df53cf8
Merge pull request #14 from its-corp/feature/bcn01-ap-internet-rule
Jose Martinez and GitHub Enterprise
2026-03-26 11:50:50 +01:00
1dd08e5a28
feat: allow GUEST VLAN (101) internet access
Jose Martinez and Claude Sonnet 4.6
2026-03-26 11:48:25 +01:00
bf2210db21
Merge pull request #13 from its-corp/feature/bcn01-sync-dashboard-changes
Jose Martinez and GitHub Enterprise
2026-03-26 11:42:14 +01:00
89a8506f8b
fix: add encryption_mode for PSK SSIDs (EQT-GUEST)
Jose Martinez and Claude Sonnet 4.6
2026-03-26 11:38:39 +01:00
e12329899a
Merge pull request #12 from its-corp/feature/bcn01-sync-dashboard-changes
Jose Martinez and GitHub Enterprise
2026-03-26 11:33:58 +01:00
b110644466
feat(BCN01-LAB): actualizar main.tf del site
Jose Martinez
2026-03-26 11:32:22 +01:00
314f1c5391
fix: psk no puede usar var. en tfvars, se inyecta via TF_VAR
Jose Martinez and Claude Sonnet 4.6
2026-03-26 11:22:08 +01:00
33f9452bed
feat(BCN01-LAB): añadir SSID EQT-GUEST con WPA2 PSK
Jose Martinez
2026-03-26 11:17:11 +01:00
b332b15871
Merge pull request #11 from its-corp/feature/bcn01-sync-dashboard-changes
Jose Martinez and GitHub Enterprise
2026-03-26 07:25:26 +01:00
ed5a2f2728
Agregando regla para que los APs puedan salir a internet
Jose Martinez
2026-03-26 07:23:48 +01:00
d0566dbaf3
Merge pull request #10 from its-corp/feature/bcn01-sync-dashboard-changes
Jose Martinez and GitHub Enterprise
2026-03-26 07:16:46 +01:00
6dc629ea18
feat: soporte port_range con listas y combinaciones ("2,3", "1-3,5")
Jose Martinez and Claude Sonnet 4.6
2026-03-26 07:09:12 +01:00
a1068c831d
feat(BCN01-LAB): puerto 2 eqt-lab-st01-sw01 como AP trunk
Jose Martinez and Claude Sonnet 4.6
2026-03-26 07:07:38 +01:00
3d5d5f0481
Merge pull request #9 from its-corp/feature/bcn01-sync-dashboard-changes
Jose Martinez and GitHub Enterprise
2026-03-26 07:02:21 +01:00
76af4e256a
ci: re-trigger plan with fixes
Jose Martinez
2026-03-26 06:48:14 +01:00
380c8adea8
ci: re-trigger apply with fix
Jose Martinez
2026-03-26 06:46:43 +01:00
fb56dc23c4
ci: re-trigger apply with fix
Jose Martinez
2026-03-26 06:44:47 +01:00
7cb7c22b5b
fix(bcn01-lab): corregir errores de apply en VLAN 111 y SSID EQT-CORPO
Jose Martinez and Claude Sonnet 4.6
2026-03-26 06:32:39 +01:00
551b755b2b
Merge pull request #8 from its-corp/feature/bcn01-sync-dashboard-changes
Jose Martinez and GitHub Enterprise
2026-03-26 06:28:41 +01:00
7378e9977c
feat(BCN01-LAB): puerto AP trunk y VLAN 111 WAN sin L3
Jose Martinez
2026-03-25 23:07:09 +01:00
f55a54064d
fix: usar meraki_network_devices y nombres correctos de recursos
Jose Martinez
2026-03-25 18:33:50 +01:00
c86569436b
feat(BCN01-LAB): sync manual Dashboard changes to Terraform
Jose Martinez
2026-03-25 18:24:47 +01:00
88ae4a7574
chore: ignorar carpeta docs/ en git
Jose Martinez and Claude Sonnet 4.6
2026-03-25 12:55:22 +01:00
67268df12d
fix: correct stack name to bcn01-lab-stack01 (matches Meraki Dashboard)
Jose Martinez and Claude Sonnet 4.6
2026-03-25 09:05:17 +01:00
73497c1b49
fix: correct stack name typo bcn01 -> bnc01
Jose Martinez and Claude Sonnet 4.6
2026-03-25 08:59:16 +01:00
418b0e94f4
feat: configure port 5 of bcn01-lab-stack01 to VLAN 101 (GUEST)
Jose Martinez and Claude Sonnet 4.6
2026-03-25 08:55:13 +01:00
c6343d977e
feat: add switch stack port config with dynamic serial resolution
Jose Martinez and Claude Sonnet 4.6
2026-03-25 08:42:48 +01:00
16c09f8cc5
docs: fix comments - Group Policies en switches no asignan VLAN, es estatica en el puerto
Jose Martinez and Claude Sonnet 4.6
2026-03-19 09:50:26 +01:00
711dfa79bf
docs: add APs port example in switch.auto.tfvars
Jose Martinez and Claude Sonnet 4.6
2026-03-18 12:13:14 +01:00
dcc7398355
docs: add port config examples (802.1X, impresoras, uplink) in switch.auto.tfvars
Jose Martinez and Claude Sonnet 4.6
2026-03-18 12:11:02 +01:00
775dbce9a8
feat: support port ranges in switch_port_configs (e.g. port_range = "1-24")
Jose Martinez and Claude Sonnet 4.6
2026-03-18 11:37:11 +01:00
67420fc099
feat: change access_policy_type to Hybrid authentication (802.1X + MAB fallback)
Jose Martinez and Claude Sonnet 4.6
2026-03-18 11:27:25 +01:00
0536a2f1b0
trigger: re-run apply with DOT1X-CORPO name
Jose Martinez
2026-03-18 11:24:36 +01:00
4500466248
Merge branch 'feature/switch-dot1x'
Jose Martinez
2026-03-18 11:19:21 +01:00
cc5c3615b0
fix: rename access policy 802.1X-CORPO to DOT1X-CORPO (Meraki naming rules)
Jose Martinez and Claude Sonnet 4.6
2026-03-18 11:16:02 +01:00
