apply /32 subnet patch