Jose MartinezandClaude Sonnet 4.6
775dbce9a8
Replace port_id with port_range in variable; add local to expand ranges into individual port entries before creating meraki_switch_port resources. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
44 lines
1.5 KiB
HCL
44 lines
1.5 KiB
HCL
# Configuración de switches MS - BCN01-LAB
|
|
# El shared secret de RADIUS se pasa via TF_VAR_radius_secret (GitHub secret: RADIUS_SECRET)
|
|
|
|
# --- POLÍTICAS DE ACCESO 802.1X ---
|
|
switch_access_policies = [
|
|
{
|
|
name = "DOT1X-CORPO"
|
|
access_policy_type = "Hybrid authentication"
|
|
host_mode = "Multi-Auth"
|
|
radius_accounting_enabled = false
|
|
radius_re_authentication_interval = 0
|
|
url_redirect_walled_garden_enabled = false
|
|
|
|
# VLAN a la que cae el puerto si el RADIUS no responde
|
|
radius_failed_auth_vlan_id = 101 # GUEST
|
|
|
|
radius_servers = [
|
|
{
|
|
host = "15.15.15.15"
|
|
port = 1912
|
|
}
|
|
]
|
|
}
|
|
]
|
|
|
|
# --- PUERTOS DE SWITCH CON 802.1X ---
|
|
# Para configurar puertos, añade entradas con el serial del switch y el port_id.
|
|
# El serial aparece en Dashboard > Switches > nombre del switch > Overview.
|
|
# access_policy_number: número auto-asignado por Meraki a la política creada arriba
|
|
# (visible en Dashboard > Switches > Switch settings > Access policies, o en el output de terraform)
|
|
#
|
|
# Ejemplo:
|
|
# switch_port_configs = [
|
|
# {
|
|
# serial = "XXXX-XXXX-XXXX" # serial del switch
|
|
# port_range = "1-24" # rango de puertos (o "1" para uno solo)
|
|
# type = "access"
|
|
# vlan = 100
|
|
# access_policy_type = "Custom access policy"
|
|
# access_policy_number = 1 # número de la política DOT1X-CORPO (id=1)
|
|
# },
|
|
# ]
|
|
switch_port_configs = []
|