diff --git a/.env.template b/.env.template
index 17390c9..567b7a7 100644
--- a/.env.template
+++ b/.env.template
@@ -29,5 +29,9 @@ APP_TIMEZONE=America/Toronto
 # RADIUS config
 RADIUS_SECRET=changeme
 RADIUS_PORT=1812
-DEFAULT_VLAN=505  # Fallback VLAN when MAC not found
+
+# Fallback VLAN when MAC not found
+DEFAULT_VLAN=505
+
+# Assign MAC to this VLAN to deny them access (prevent fallback)
 DENIED_VLAN=999
\ No newline at end of file