When entering NEW IP Subnet convert them to IP Range
Since you need to enter the subnet mask when entering an IP Subnet, it would make sense to convert these to IP Ranges. Then add the subnet details to the description. The major benefit of this is to allow for better boundary reporting. Using the table BoundaryEx which listed the NumbaricValueLow and NumericValueHigh value you can easily determine if a client belong to that IP Range. This is done by using the fnGetNumericIPAddress function.