BS: Allow SSH from subnet