diff --git a/files/ansible-playbooks/redirect_and_block.yml b/files/ansible-playbooks/redirect_and_block.yml
index ea5c0f4..e1e560b 100644
--- a/files/ansible-playbooks/redirect_and_block.yml
+++ b/files/ansible-playbooks/redirect_and_block.yml
@@ -46,6 +46,15 @@
       - "stopblock.sh"
 
   tasks:
+    - name: Initialize passfile facts (avoid undefined vars in later templates)
+      delegate_to: localhost
+      ansible.builtin.set_fact:
+        dev2_passfile_used_direct: "NONE"
+        dev2_passfile_used_tunnel: "NONE"
+        dev2_passfile_used_lldp4: "NONE"
+        dev2_passfile_used_lldp6: "NONE"
+      changed_when: false
+
     # ============================ PHASE 0: LLDP DISCOVERY (IPv4 + IPv6) ============================
     - name: Compute hostname digits key for LLDP lookup (DEV2)
       ansible.builtin.set_fact: