git clone http://gitlab.local/student/network-configs.git

acls.yaml

---
# Access Control Lists - Network Security Policy
acls:
  - name: PERMIT_ENGINEERING
    rules:
      - sequence: 10
        action: permit
        protocol: ip
        source: 192.168.100.0/24
        destination: any
        description: "Engineering department access"

  - name: PERMIT_SALES
    rules:
      - sequence: 10
        action: permit
        protocol: tcp
        source: 192.168.200.0/24
        destination: any
        destination_port: 443
        description: "Sales - HTTPS only"


vlans.yml

---
# VLAN Configuration - Network Segmentation
vlans:
  - id: 10
    name: ENGINEERING
    description: "Engineering department"
    subnet: 192.168.100.0/24

  - id: 20
    name: SALES
    description: "Sales department"
    subnet: 192.168.200.0/24

  - id: 99
    name: MANAGEMENT
    description: "Network management"
    subnet: 10.0.0.0/24


modify vlans:


  - id: 30
    name: GUEST_WIFI
    description: "Guest wireless network - internet only"
    subnet: 192.168.30.0/24