74 lines
2.1 KiB
Terraform
Executable File
74 lines
2.1 KiB
Terraform
Executable File
terraform {
|
|
required_providers {
|
|
meraki = {
|
|
source = "CiscoDevNet/meraki"
|
|
version = "1.9.0"
|
|
}
|
|
}
|
|
}
|
|
|
|
# Búsqueda automática de IDs (Data Sources)
|
|
data "meraki_organization" "org" {
|
|
name = var.organization_name
|
|
}
|
|
|
|
data "meraki_networks" "net" {
|
|
organization_id = data.meraki_organization.org.id
|
|
}
|
|
|
|
# Local para extraer el network_id exacto de la lista de redes
|
|
locals {
|
|
network_id = [for n in data.meraki_networks.net.items : n.id if n.name == var.network_name][0]
|
|
}
|
|
|
|
# --- CONFIGURACIÓN GATEWAY (MX) ---
|
|
|
|
# 1. Activar VLANs en el Appliance (MX)
|
|
resource "meraki_appliance_vlans_settings" "activate_vlans" {
|
|
network_id = local.network_id
|
|
vlans_enabled = true
|
|
}
|
|
|
|
# 2. Crear las interfaces L3 y VLANs en el MX
|
|
resource "meraki_appliance_vlan" "mx_gateways" {
|
|
for_each = var.switch_vlans
|
|
depends_on = [meraki_appliance_vlans_settings.activate_vlans]
|
|
|
|
network_id = local.network_id
|
|
vlan_id = each.key
|
|
name = each.value.name
|
|
subnet = each.value.subnet
|
|
appliance_ip = each.value.appliance_ip
|
|
reserved_ip_ranges = each.value.reserved_ip_ranges
|
|
dhcp_handling = each.value.dhcp_handling
|
|
}
|
|
|
|
# 3. SSIDs wireless
|
|
resource "meraki_wireless_ssid" "ssids" {
|
|
for_each = { for s in var.wireless_ssids : tostring(s.number) => s }
|
|
depends_on = [meraki_appliance_vlans_settings.activate_vlans]
|
|
|
|
network_id = local.network_id
|
|
number = each.value.number
|
|
name = each.value.name
|
|
enabled = each.value.enabled
|
|
auth_mode = each.value.auth_mode
|
|
splash_page = each.value.splash_page
|
|
ip_assignment_mode = each.value.ip_assignment_mode
|
|
use_vlan_tagging = each.value.use_vlan_tagging
|
|
default_vlan_id = each.value.default_vlan_id
|
|
radius_servers = length(each.value.radius_servers) > 0 ? [
|
|
for server in each.value.radius_servers : {
|
|
host = server.host
|
|
port = server.port
|
|
secret = var.radius_secret
|
|
}
|
|
] : []
|
|
}
|
|
|
|
# 4. Reglas de firewall L3
|
|
resource "meraki_appliance_l3_firewall_rules" "reglas_firewall" {
|
|
network_id = local.network_id
|
|
rules = var.firewall_rules
|
|
}
|