route additional subnets into the vpn tunnel