I think I missed a step with a new client I setup but when I added egress to the client it does not seem to allow traffic to CIDR range I put in