mip address. A MIP must be in the same subnet as the tunnel
interface to which it is linked to; however, for the untrusted
interface, a MIP does not need to be in the same subnet. In
either case, a MIP must not be the same as the interface
address or be in any DIP pool that might also be on that
subnet.