in that scenario, only devices running the client have access to the subnet