diff --git a/config.global.example b/config.global.example
index 1990b09..226cd78 100644
--- a/config.global.example
+++ b/config.global.example
@@ -36,6 +36,8 @@ ADMIN_BRIDGE=
 DFL_WAN_IP=192.168.1.101/24
 DFL_WAN_GATE=192.168.1.252
 
+DFL_WAN_SSH_IP:192.168.1.102/24
+
 
 # Doman and email configuration
 #
diff --git a/ssh/make.sh b/ssh/make.sh
index 7eca5e1..a458582 100755
--- a/ssh/make.sh
+++ b/ssh/make.sh
@@ -34,6 +34,9 @@ LAN_GATE=SKIP
 
 REBOOT=${REBOOT:=1}
 
+DFL_WAN_SSH_IP=${DFL_WAN_SSH_IP:=}
+xread "WAN ssh ip:" WAN_SSH_IP
+
 readVars
 
 
@@ -47,6 +50,7 @@ OPTS_STAGE_1="\
 	--swap $SWAP \
 	--net0 name=lan,bridge=vmbr${LAN_BRIDGE},firewall=1,ip=dhcp,type=veth \
 	--net1 name=admin,bridge=vmbr${ADMIN_BRIDGE},firewall=1,ip=dhcp,type=veth \
+	--net2 name=wan,bridge=vmbr${WAN_BRIDGE},firewall=1${WAN_SSH_IP:+,ip=${WAN_SSH_IP}},type=veth \
 	--storage local-lvm \
 	--rootfs local-lvm:$DRIVE \
 	--unprivileged 1 \