diff --git a/doc/source/install/advanced_deployment/tls_everywhere.rst b/doc/source/install/advanced_deployment/tls_everywhere.rst
index 9193c877..f5c9bb6d 100644
--- a/doc/source/install/advanced_deployment/tls_everywhere.rst
+++ b/doc/source/install/advanced_deployment/tls_everywhere.rst
@@ -82,6 +82,10 @@ There are several things to note from the aforementioned command:
   if needed. Note that you can also specify manually the forwarders for the DNS
   setup through the ``--forwarder`` option.
 
+.. warning:: Take special care to ensure that the $FreeIPAIP is reachable by
+             the undercloud and overcloud nodes. This requirement is commonly
+             overlooked or misunderstood.
+
 For more information on FreeIPA and its capabilities, please consult the
 `FreeIPA documentation`_