make external network work with /32 subnet