diff --git a/roles/network/templates/gateway/iiab-internet-on b/roles/network/templates/gateway/iiab-internet-on
index 63e7ac3ff..ce4d507c3 100644
--- a/roles/network/templates/gateway/iiab-internet-on
+++ b/roles/network/templates/gateway/iiab-internet-on
@@ -1,3 +1,10 @@
 #!/bin/bash
 sed -i -e "s/^IIAB_GATEWAY_ENABLED.*/IIAB_GATEWAY_ENABLED=True/" {{ iiab_env_file }}
 /usr/bin/iiab-gen-iptables
+
+cat << EOF
+WARNING: If you want to _permanently_ change your IIAB's default behavior
+(i.e. to specify whether student client devices should have Internet or not,
+in general!) then modify variable 'iiab_gateway_enabled' in
+/etc/iiab/local_vars.yml — and finally run 'cd /opt/iiab/iiab ; ./iiab-network'
+EOF