There are tools if you google that can help you build the AllowedIPs entry whilst excluding ranges that you want/need to go over your physical network interface