Years ago, I've read that passthrough relies on setting up a fake small subnet where the ISP gateway is valid, the router IP is only locally valid (not routed via WAN) and a DHCP service running on the router hands out the Public WAN IPv4 address to another device on your network plus ISP gateway for IP passthrough.