diff --git a/vars/default_vars.yml b/vars/default_vars.yml
index 258c2d5f6..3c5446f78 100644
--- a/vars/default_vars.yml
+++ b/vars/default_vars.yml
@@ -206,9 +206,13 @@ wan_try_dhcp_before_static_ip: True   # Facilitate field updates w/ cablemodems
 
 # 1-PREP
 
-# roles/iiab-admin runs here
-# SEE IIAB-ADMIN VARIABLES NEAR TOP OF THIS FILE: e.g. iiab_admin_user_install,
-# iiab_admin_user, iiab_admin_published_pwd, iiab_admin_pwd_hash
+# SSHD runs here & also below in 4-SERVER-OPTIONS
+sshd_install: True    # Required by OpenVPN
+sshd_enabled: True
+sshd_port: 22    # Not fully functional.  SEE: roles/sshd/tasks/install.yml
+
+# IIAB-ADMIN runs here - see its vars near top of this file:
+# e.g. iiab_admin_user_install, iiab_admin_user, iiab_admin_pwd_hash
 
 openvpn_install: True
 openvpn_enabled: False
@@ -282,9 +286,7 @@ apache_interface: 127.0.0.1    # 2020-01-13: Var unused
 
 # 4-SERVER-OPTIONS
 
-sshd_install: True    # Required by OpenVPN
-sshd_enabled: True
-sshd_port: 22    # Not fully functional.  SEE: roles/sshd/tasks/install.yml
+# SSHD runs here & also above in 1-PREP
 
 # DNS prep (dnsmasq, named &/or dhcpd) run here.  The full network stage runs
 # after 9-LOCAL-ADDONS (or manually run "cd /opt/iiab/iiab; ./iiab-network")
diff --git a/vars/local_vars_big.yml b/vars/local_vars_big.yml
index dba2a678c..7f818ec77 100644
--- a/vars/local_vars_big.yml
+++ b/vars/local_vars_big.yml
@@ -130,8 +130,12 @@ js_menu_install: True
 
 # 1-PREP
 
-# roles/sshd & roles/iiab-admin run here
-# SEE IIAB-ADMIN VARIABLES NEAR TOP OF THIS FILE:
+# SSHD runs here & also below in 4-SERVER-OPTIONS
+sshd_install: True    # Required by OpenVPN
+sshd_enabled: True
+sshd_port: 22    # Not fully functional.  SEE: roles/sshd/tasks/install.yml
+
+# IIAB-ADMIN runs here - see its vars near top of this file:
 # e.g. iiab_admin_user_install, iiab_admin_user, iiab_admin_pwd_hash
 
 # SECURITY WARNING: See http://wiki.laptop.org/go/IIAB/Security
@@ -170,8 +174,7 @@ apache_allow_sudo: True
 
 # 4-SERVER-OPTIONS
 
-sshd_install: True    # Required by OpenVPN
-sshd_enabled: True
+# SSHD runs here & also above in 1-PREP
 
 # DNS prep (dnsmasq, named &/or dhcpd) run here.  The full network stage runs
 # after 9-LOCAL-ADDONS (or manually run "cd /opt/iiab/iiab; ./iiab-network")
diff --git a/vars/local_vars_medium.yml b/vars/local_vars_medium.yml
index 7ef535511..3aef3a7e1 100644
--- a/vars/local_vars_medium.yml
+++ b/vars/local_vars_medium.yml
@@ -130,8 +130,12 @@ js_menu_install: True
 
 # 1-PREP
 
-# roles/sshd & roles/iiab-admin run here
-# SEE IIAB-ADMIN VARIABLES NEAR TOP OF THIS FILE:
+# SSHD runs here & also below in 4-SERVER-OPTIONS
+sshd_install: True    # Required by OpenVPN
+sshd_enabled: True
+sshd_port: 22    # Not fully functional.  SEE: roles/sshd/tasks/install.yml
+
+# IIAB-ADMIN runs here - see its vars near top of this file:
 # e.g. iiab_admin_user_install, iiab_admin_user, iiab_admin_pwd_hash
 
 # SECURITY WARNING: See http://wiki.laptop.org/go/IIAB/Security
@@ -170,8 +174,7 @@ apache_allow_sudo: True
 
 # 4-SERVER-OPTIONS
 
-sshd_install: True    # Required by OpenVPN
-sshd_enabled: True
+# SSHD runs here & also above in 1-PREP
 
 # DNS prep (dnsmasq, named &/or dhcpd) run here.  The full network stage runs
 # after 9-LOCAL-ADDONS (or manually run "cd /opt/iiab/iiab; ./iiab-network")
diff --git a/vars/local_vars_min.yml b/vars/local_vars_min.yml
index 7c95e4aed..0aad72c2b 100644
--- a/vars/local_vars_min.yml
+++ b/vars/local_vars_min.yml
@@ -130,8 +130,12 @@ js_menu_install: True
 
 # 1-PREP
 
-# roles/sshd & roles/iiab-admin run here
-# SEE IIAB-ADMIN VARIABLES NEAR TOP OF THIS FILE:
+# SSHD runs here & also below in 4-SERVER-OPTIONS
+sshd_install: True    # Required by OpenVPN
+sshd_enabled: True
+sshd_port: 22    # Not fully functional.  SEE: roles/sshd/tasks/install.yml
+
+# IIAB-ADMIN runs here - see its vars near top of this file:
 # e.g. iiab_admin_user_install, iiab_admin_user, iiab_admin_pwd_hash
 
 # SECURITY WARNING: See http://wiki.laptop.org/go/IIAB/Security
@@ -170,8 +174,7 @@ apache_allow_sudo: True
 
 # 4-SERVER-OPTIONS
 
-sshd_install: True    # Required by OpenVPN
-sshd_enabled: True
+# SSHD runs here & also above in 1-PREP
 
 # DNS prep (dnsmasq, named &/or dhcpd) run here.  The full network stage runs
 # after 9-LOCAL-ADDONS (or manually run "cd /opt/iiab/iiab; ./iiab-network")