other places where bridge name was used
diff --git a/vars/cord.yml b/vars/cord.yml
index 0103ec8..8770221 100644
--- a/vars/cord.yml
+++ b/vars/cord.yml
@@ -1,31 +1,30 @@
 ---
 # file: group_vars/aztest.yml
 
-# IP prefix for VMs
-mgmtbr_prefix: 192.168.122
+# VM networks/bridges on head
+virt_nets:
+  - name: mgmtbr
+    ipv4_prefix: 192.168.123
+    head_vms: true
 
 # site domain suffix
 site_suffix: cordtest.opencloud.us
 
-# NSD/Unbound settings
+# resolv.conf settings
+dns_search:
+  - cordtest.opencloud.us
 
+# NSD/Unbound settings
 nsd_zones:
   - name: cordtest.opencloud.us
-    ipv4_first_octets: 192.168.122
+    ipv4_first_octets: 192.168.123
     name_reverse_unbound: "168.192.in-addr.arpa"
     soa: ns1
     ns:
       - { name: ns1 }
     nodelist: head_vm_list
 
-unbound_interfaces:
-  - 128.104.222.180/23
-
-# resolv.conf settings
-dns_servers:
-  - 128.104.222.180
-
-dns_search:
-  - cordtest.opencloud.us
+# If true, unbound listens on the head node's `ansible_default_ipv4` interface
+unbound_listen_on_default: True