Excluding IP addresses
You can exclude multiple IP address from being allocated by a CGN IP pool if the IP pool could assign addresses that have been targeted by external attackers. You can't exclude IP addresses in a fixed allocation CGN resource allocation IP pool.