diff --git a/omnibus/cookbooks/firezone/recipes/network.rb b/omnibus/cookbooks/firezone/recipes/network.rb
index 7d9b4b127..762b60316 100644
--- a/omnibus/cookbooks/firezone/recipes/network.rb
+++ b/omnibus/cookbooks/firezone/recipes/network.rb
@@ -54,6 +54,10 @@ execute 'wireguard_ipv6' do
   command "ip -6 address replace #{addr} dev #{wg_interface}"
 end
 
+execute 'set_mtu' do
+  command "ip link set mtu 1420 up dev #{wg_interface}"
+end
+
 execute 'set_wireguard_interface_private_key' do
   command "#{wg_path} set #{wg_interface} private-key #{private_key_path}"
 end
@@ -72,10 +76,6 @@ route 'fd00:3:2::0/120' do
   device wg_interface
 end
 
-execute 'set_mtu' do
-  command "ip link set mtu 1420 up dev #{wg_interface}"
-end
-
 replace_or_add "IPv4 packet forwarding" do
   path "/etc/sysctl.conf"
   pattern "^#net.ipv4.ip_forward=1"