diff --git a/roles/network/tasks/install.yml b/roles/network/tasks/install.yml
index 08a749707..c41f88a09 100644
--- a/roles/network/tasks/install.yml
+++ b/roles/network/tasks/install.yml
@@ -55,11 +55,11 @@
     name: "{{ item.name }}"
     value: "{{ item.value }}"
   with_items:
-    - { name: 'net.ipv4.ip_forward', value: '1' }  # Masquerading LAN->Internet
-    - { name: 'net.ipv4.conf.default.rp_filter', value: '1' }
-    - { name: 'net.ipv4.conf.default.accept_source_route', value: '0' }
+    - { name: 'net.ipv4.ip_forward', value: '1' }  # Masquerading LAN->Internet; Default: 0
+    - { name: 'net.ipv4.conf.default.rp_filter', value: '1' }                  # Default: 2
+    - { name: 'net.ipv4.conf.default.accept_source_route', value: '0' }        # Default: 1
     #- { name: 'net.ipv4.tcp_syncookies', value: '1' }  # Very standard in 2020
-    - { name: 'net.ipv6.conf.all.disable_ipv6', value: '1' }    # IPv6 disabled
+    - { name: 'net.ipv6.conf.all.disable_ipv6', value: '1' }    # IPv6 disabled; Default: 0
     #- { name: 'net.ipv6.conf.default.disable_ipv6', value: '1' }    # AUTO-SET
     #- { name: 'net.ipv6.conf.lo.disable_ipv6', value: '1' }         # BY ABOVE