That is, if your repeaters are at different sites,
you'll probably
need different tunnels for each site, and therefore different allocations,
one per site. (It's a restriction of the portal/tunnel system that
you can't further subnet an allocation for different gateways).
Really? We do have that, and it appears to work fine...
Or has there been a change that disallows new creation of subnets that way?