That's probably what I'll end up doing, since I want the machine to automatically get one of the available IP's based on its mac address.
I do use Wireguard now and put the IPMI ports on a seperate VLAN. WAN is currently set to 1 static IP. To be frank I did not really understand how to actually configure the settings to be able to set one of the public IP's straight on the devices themselves while still using the device as firewall.
Do you mean to set a static IP on the devices? I would prefer to bind the mac addresses to the public IP's in the router, so the user of the machine can't mess around with it & gets the correct config via DHCP.
As is clear, I don't really know what I'm doing here so forgive my ignorance.