map subnets to layers (public, shared, private)
fix gateway comparison