Before configuring a Subnet as a Service, VPN Topology should be changed to custom. Read how.
Navigate to Network
As ‘Any’ has been chosen for the Service, all protocols and ports for IP as well as ICMP are accessible. This means that the entire subnet is accessible at the IP-layer.