That is, if your repeaters are at different sites, you'll probably need different tunnels for each site, and therefore different allocations, one per site. (It's a restriction of the portal/tunnel system that you can't further subnet an allocation for different gateways).
Really? We do have that, and it appears to work fine... Or has there been a change that disallows new creation of subnets that way?