Dynamic address configuration is the best alternative. Simply set up a DHCP consumer on the general public interface.The 1st rule accepts packets from already proven connections, assuming they are Protected not to overload the CPU. The next rule drops any packet that link tracking identifies as invalid. Following that, we set up regular accept guid