an address that must be within the subnetwork