Dynamic IP and Port (DIPP)—Allows multiple hosts
to have their source IP addresses translated to the same public
IP address with different port numbers. The dynamic translation
is to the next available address in the NAT address pool, which
you configure as a Translated Address pool be
to an IP address, range of addresses, a subnet, or a combination
of these.
As an alternative to using the next address in
the NAT address pool, DIPP allows you to specify the address of
the Interface itself. The advantage of specifying
the interface in the NAT rule is that the NAT rule will be automatically
updated to use any address subsequently acquired by the interface.
DIPP is sometimes referred to as interface-based NAT or network
address port translation (NAPT).
(Affects
only PA-7000 Series firewalls that do not use second-generation
PA-7050-SMC-B or PA-7080-SMC-B Switch Management Cards) When you
use Point-to-Point Tunnel Protocol (PPTP) with DIPP NAT, the firewall
is limited to using a translated IP address-and-port pair for only
one connection; the firewall does not support DIPP NAT. The workaround
is to upgrade the PA-7000 Series firewall to a second-generation
SMC-B card.