@kenw I do this with pfsense vms, both CE version and a + version..
I just put their wan into one of my other networks, 192.168.3.0/24 which I call my dmz off my pfsense..
Highly doubt your cable "modem is going to allow you to get more than 1 public IP? Does your ISP provide that functionality?