diff --git a/cluster/vagrant/provision-network.sh b/cluster/vagrant/provision-network.sh
index cdf2c4627f2..6a24936cf16 100755
--- a/cluster/vagrant/provision-network.sh
+++ b/cluster/vagrant/provision-network.sh
@@ -98,11 +98,10 @@ grep -q kbr0 /etc/sysconfig/docker || {
   systemctl restart docker.service
 
   # setup iptables masquerade rules so the pods can reach the internet
-  iptables -t nat -A POSTROUTING -s ${BRIDGE_BASE}.0.0/16 ! -d ${BRIDGE_BASE}.0.0/16 -j MASQUERADE
+  iptables -t nat -A POSTROUTING -s ${CONTAINER_SUBNET} ! -d ${CONTAINER_SUBNET} -j MASQUERADE
 
   # persist please
   iptables-save >& /etc/sysconfig/iptables
-
 }
 EOF