# Reglas de firewall L3
firewall_rules = [
  {
    comment        = "Bloqueo temporal switch a 8.8.8.8"
    policy         = "deny"
    protocol       = "any"
    src_cidr       = "192.168.8.50/32"
    src_port       = "any"
    dest_cidr      = "8.8.8.8/32"
    dest_port      = "any"
    syslog_enabled = true
  },
  {
    comment        = "Bloqueo especifico DNS Cloudflare 1.1.1.1 desde VC"
    policy         = "deny"
    protocol       = "any"
    src_cidr       = "10.2.48.0/24" # VLAN 102 - VC
    src_port       = "any"
    dest_cidr      = "1.1.1.1/32"
    dest_port      = "any"
    syslog_enabled = false
  },
  {
    comment        = "Denegar el resto del trafico de salida"
    policy         = "deny"
    protocol       = "any"
    src_cidr       = "any"
    src_port       = "any"
    dest_cidr      = "any"
    dest_port      = "any"
    syslog_enabled = false
  }
]