A Dynamic Internet Pool (DIP) address pool is a range of IP addresses from which the security device can dynamically take addresses to use when performing Network Address Translation NAT on the source IP address of incoming or outgoing IP packets.
You can link three types of interfaces to DIP pools: physical interfaces and sub-interfaces for network and VPN traffic, and tunnel interfaces for VPN tunnels only.
At the top of the Interface DIP list page, you can see the interface to which the DIP pools in the list belong. For example, you see:
Interface: ethernet3/2 (IP/Netmask: 209.122.17.1/24)
The table lists all the DIP pools configured on the device and contains the following information for each:
Incoming NAT: Select this option to direct the device to perform NAT on sessions initiated by incoming traffic, such as SIP or H.323.
ID: Indicates the ID number of the DIP pool.
IP Address Range: Indicates the starting and ending numbers of the DIP address range.
DIP Type: Indicates if port translation is enabled (Port-Xlate) or not (Fix-Port).
Configure: Click Edit to modify the dynamic IP pool entry, or click Remove to remove the entry. Click New to create a new dynamic IP pool.
Note: You cannot remove a DIP pool that is being used by a policy. First, you must either delete the policy that is using the DIP pool, or you can modify the policy to not use the DIP pool.
Scale size: Indicates the number of times you override the port pool of an IP address.
For more information on creating a new DIP pool, see Dynamic IP Address Pool Configuration.