Allow VPN subnet