Jose MartinezandClaude Sonnet 4.6
7cb7c22b5b
- meraki_appliance_vlan: filtrar VLANs sin subnet (if v.subnet != null) para que VLAN 111 WAN (L2-only) no se pase a la API del MX, que exige CIDR en el campo subnet. - meraki_wireless_ssid: pasar wpa_encryption_mode = null cuando auth_mode = "open", ya que la API Meraki rechaza modos WPA con auth abierta. OWE/Enhanced Open se negocia a nivel beacon y no se expone como atributo API. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
25 lines
675 B
HCL
25 lines
675 B
HCL
# SSIDs wireless - BCN01
|
|
# NOTA: El shared secret de RADIUS NO está aquí.
|
|
# Se pasa como variable de entorno TF_VAR_radius_secret (GitHub secret: RADIUS_SECRET)
|
|
|
|
wireless_ssids = [
|
|
{
|
|
number = 0
|
|
name = "EQT-CORPO"
|
|
enabled = true
|
|
auth_mode = "open"
|
|
wpa_encryption_mode = "WPA3 only"
|
|
splash_page = "Password-protected with custom RADIUS"
|
|
ip_assignment_mode = "Bridge mode"
|
|
use_vlan_tagging = true
|
|
default_vlan_id = 100
|
|
redirect_url = "https://www.adevinta.com"
|
|
radius_servers = [
|
|
{
|
|
host = "15.15.15.15"
|
|
port = 1912
|
|
}
|
|
]
|
|
}
|
|
]
|