Jose MartinezandClaude Sonnet 4.6
5cdc09747e
SSIDs: - EQT-CORPO: wpa_encryption_mode → null (OWE / Enhanced Open) - EQT-GUEST: wpa_encryption_mode → WPA3 Transition Mode Puertos stack bcn01-lab-stack01 (sw01 y sw02): - Puerto 44: access VLAN 111 WAN — ISP router 1 - Puerto 45: access VLAN 111 WAN — WAN 1 BCN01-F04-MX01 - Puerto 46: access VLAN 111 WAN — WAN 1 BCN01-F04-MX02 - Puerto 47: trunk VLAN nativa 109, todas — UPLINK LAN BCN01-F04-MX01 - Puerto 48: trunk VLAN nativa 109, todas — UPLINK LAN BCN01-F04-MX02 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
37 lines
1.2 KiB
HCL
37 lines
1.2 KiB
HCL
# SSIDs wireless - BCN01
|
|
# NOTA: El shared secret de RADIUS NO está aquí.
|
|
# Se pasa como variable de entorno TF_VAR_radius_secret (GitHub secret: RADIUS_SECRET)
|
|
|
|
wireless_ssids = [
|
|
{
|
|
number = 0
|
|
name = "EQT-CORPO"
|
|
enabled = true
|
|
auth_mode = "open"
|
|
wpa_encryption_mode = null # OWE (Opportunistic Wireless Encryption / Enhanced Open)
|
|
splash_page = "Password-protected with custom RADIUS"
|
|
ip_assignment_mode = "Bridge mode"
|
|
use_vlan_tagging = true
|
|
default_vlan_id = 100
|
|
redirect_url = "https://www.adevinta.com"
|
|
radius_servers = [
|
|
{
|
|
host = "15.15.15.15"
|
|
port = 1912
|
|
}
|
|
]
|
|
},
|
|
{
|
|
number = 1
|
|
name = "EQT-GUEST"
|
|
enabled = true
|
|
auth_mode = "psk" # Modo para contraseña compartida
|
|
encryption_mode = "wpa" # Requerido por la API Meraki para PSK
|
|
wpa_encryption_mode = "WPA3 Transition Mode"
|
|
# psk se inyecta via TF_VAR_wifi_password_psk (GitHub secret WIFI_PASSWORD_PSK)
|
|
ip_assignment_mode = "Bridge mode"
|
|
use_vlan_tagging = true
|
|
default_vlan_id = 101
|
|
}
|
|
]
|