Here's the simple logic behind using your IP address to discover the WAN's IP address.
When devices join your network, they will authenticate using Smallstep’s RADIUS server.
Smallstep’s RADIUS server identifies your devices by their public source IP address. Usually, this is the public IP address your traffic is coming from.
Smallstep needs to know which source public IP address your devices will use when joining the network.