Minimwatch subnet not found with VPN

[Fotospecht]

The 192.168.2.1 is used by the Internet sharing service, where my Mac is configured as a local Wifi access point.

The VPN is a Cisco IPSec VPN. I've verified that the host is routing correctly over the VPN interface (which Mac OS/X calls "utun0"):

Code:

~$ scutil --nc list | grep Connected
* (Connected)      D7EB7C34-F481-436A-B259-7DB89602628B IPSec              "VPN (Cisco IPSec)"              [IPSec]


~$ route -v get 192.168.1.100
u: inet 192.168.1.100; u: link ; RTM_GET: Report Metrics: len 128, pid: 0, seq 1, errno 0, flags:<UP,GATEWAY,HOST,STATIC>
locks:  inits:
sockaddrs: <DST,IFP>
nas.fritz.box
   route to: nas.fritz.box
destination: default
       mask: default
  interface: utun0
      flags: <UP,DONE,CLONING,STATIC>
recvpipe  sendpipe  ssthresh  rtt,msec    rttvar  hopcount      mtu     expire
       0         0         0         0         0         0      1280         0

locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK,IFP,IFA>
default  default utun0 192.168.1.202