add allowed subnets