Following cmarti's example, I am checking on @IPADDR1. If the subnet matches that issued by the VPN gateway, the shorter script is executed.

I am trying to keep the code lean, no point incurring more overhead. Right?

regards