nsNatVipCfgIp 1.3.6.1.4.1.3224.11.3.1.1.2

The IP address for the VIP, which must be in the same subnet as the untrusted interface and can even be the same address as the untrusted interface.