If you had a VPN tunnel to another site and you wanted that subnet to be visible to the other site. Lets say you have a main datacenter and there are resources there that you need to use from that subnet, you would setup a VPN tunnel between your MX and the datacenter's firewall and change the "In VPN" to yes
CMNO, Dell Certified, A+