Problem: You are given a block of static IP addresses from your ISP (typically a /29) and you need to give one of those statics to a firewall or device behind your primary, edge firewall. (image is not entirely accurate to the problem)
Solution: There are two typical methods to tackle this. Static NAT or simply break the /29 into /30s. Let me explain both with scenarios I have recently dealt with.