diff --git a/tasks/main.yml b/tasks/main.yml
index a9432ac28dc76a363fadbcbed255a764925a3be0..166060745c8c97ca436f36db385f73ea90668eb1 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -22,4 +22,4 @@
       tags:
         - always
 
-  when: not excluded_roles or "vpn" not in excluded_roles and role_vpn_completed is not defined and vpn is defined and vpn.subnet is defined
+  when: (not excluded_roles or "vpn" not in excluded_roles) and role_vpn_completed is not defined and vpn is defined and vpn.subnet is defined