multiple subnets via comma separation