I have a cluster I am setting up behind a Cradlepoint running Verizon as the only ISP. I have a single static IP from Verizon. I'm curious how other folks have solved this. Would you trick the external interface with private IPs and static NAT them to the single Public IP? My first time working with a firewall behind cellular. Just looking for the simplest way to configure the external interfaces and VIP.