diff --git a/roles/config-virt/templates/qemu.j2 b/roles/config-virt/templates/qemu.j2
index 1c947f9..9d20379 100644
--- a/roles/config-virt/templates/qemu.j2
+++ b/roles/config-virt/templates/qemu.j2
@@ -5,6 +5,10 @@
 NIC=$( route|grep default|awk '{print $NF}' )
 PORTAL=$( dig +short portal.opencloud.us | tail -1 )
 
+SUBNET=$( ip addr show $NIC|grep "inet "|awk '{print $2}' )
+{% set vm_net = ( virt_nets | selectattr("head_vms", "defined") | first ) %}
+PRIVATENET=$( ip addr show {{ vm_net.name }} |grep "inet "|awk '{print $2}' )
+
 NAME="${1}"
 OP="${2}"
 SUBOP="${3}"
@@ -21,8 +25,6 @@
 }
 
 add_local_access_rules() {
-    SUBNET=$( ip addr show $NIC|grep "inet "|awk '{print $2}' )
-    PRIVATENET=$( ip addr show virbr0|grep "inet "|awk '{print $2}' )
     add_rule "FORWARD" "-s $SUBNET -j ACCEPT"
     # Don't NAT traffic from service VMs destined to the local subnet
     add_rule "POSTROUTING" "-t nat -s $PRIVATENET -d $SUBNET -j RETURN"