diff --git a/vars/local_vars_medium.yml b/vars/local_vars_medium.yml
index bbe719070..4e5b6e3e4 100644
--- a/vars/local_vars_medium.yml
+++ b/vars/local_vars_medium.yml
@@ -40,6 +40,24 @@ host_channel: 6
 hostapd_secure: False
 hostapd_password: changeme
 
+# See "How do I set a static IP Address?" for Ethernet in http://FAQ.IIAB.IO
+wan_ip: dhcp       # wan_ip: 192.168.1.99
+wan_netmask:       # wan_netmask: 255.255.255.0
+wan_gateway:       # wan_gateway: 192.168.1.1
+wan_nameserver:    # wan_nameserver: 192.168.1.1
+#
+wan_try_dhcp_then_static_ip: True    # Facilitate field updates w/ cablemodems.
+dhcp_timeout: 10    # Revert to Static IP or 169.254.x.y if DHCP isn't
+# detected on the Ethernet network in 10 seconds (dhcpcd default is 30 sec).
+wan_link_local: False    # Keep this as 'False' to strongly mandate Ethernet
+# Static IP <wan_ip> (and avoid link-local 169.254.x.y if DHCP isn't detected).
+#
+# Change this to 'True' if you want the 3-steps below: (e.g. for eth0 or eno1)
+# 1. Try to set Ethernet Static IP <wan_ip> (if 'arp <wan_gateway>' responds).
+# 2. Try to set Ethernet IP using DHCP, if DHCP responds within ~10 seconds.
+# 3. Set Ethernet IP to a link-local address 169.254.x.y if both above fail.
+# Details in roles/network/templates/network/dhcpcd.conf.j2 for /etc/dhcpcd.conf
+
 # Enable "campus access" to ~10 common IIAB services like Kiwix (3000), KA Lite
 # (8008) and Calibre (8010 or 8080) etc, on the WAN side of your IIAB server.
 # Only 1 of the 6 lines below should be uncommented:
@@ -58,24 +76,6 @@ ports_externally_visible: 3     # ssh + http-or-https + common IIAB services
 # Make this True if client machines should have access to WAN/Internet:
 iiab_gateway_enabled: False
 
-# See "How do I set a static IP Address?" for Ethernet in http://FAQ.IIAB.IO
-# wan_ip: 192.168.1.99    # wan_ip: dhcp
-# wan_netmask: 255.255.255.0
-# wan_gateway: 192.168.1.1
-# wan_nameserver: 192.168.1.1
-#
-# wan_try_dhcp_then_static_ip: True  # Facilitate field updates w/ cablemodems.
-# dhcp_timeout: 10     # Revert to Static IP or 169.254.x.y if DHCP isn't
-# detected on the Ethernet network in 10 seconds (dhcpcd default is 30 sec).
-# wan_ipv4ll: False    # Keep this as 'False' to strongly mandate Static IP
-# <wan_ip> for eth0 (and avoid link-local 169.254.x.y if DHCP isn't detected).
-#
-# Change this to 'True' if you want the 3-steps below:
-# 1. Try to set eth0 as Static IP <wan_ip> (if 'arp <wan_gateway>' responds).
-# 2. Try to set eth0 using DHCP, if DHCP responds within 10 seconds.
-# 3. Set eth0 to a link-local address 169.254.x.y if both above fail.
-# Details in roles/network/templates/network/dhcpcd.conf.j2 for /etc/dhcpcd.conf
-
 dhcpd_install: False
 dhcpd_enabled: False