The secondary IP was enabled by default but I may have configured the passthrough on a different port. Setting it up by mac address worked. Then I just refresh the DHCP release and the box had the external ip. And yes, you need a router or firewall to get a different IP. One port can have one address at a time.