pfSense

By "host address" do you mean a single IP address without a CIDR mask ("x.x.x.x") or an FQDN?

OK so you literally meant a host address inside a network, and not the network address.

We could do one of two things here:

• Have input validation reject the input if the address is not the network address for the subnet (harsh)
• Change the host address the user input into the appropriate network address on save (easier for the user, but the change may surprise them)

I'm leaning toward the latter approach, and note under the field that it should be/will be changed to a network address

fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/601

Merged

Updating subject for release notes.

Fixed

the host address will be changed to be the the network address in IPv4 Tunnel Network.

I entered 10.0.8.1/24 and it was changed to be 10.0.8.0/24 and 10.10.10.1/24 to be 10.10.10.0/24.

openvpn service was up and running

2.7.0.a.20220416.0600