Right now our gateway has possibility to enable MASQUERADE. For one of our clients we need a feature API endpoint that will enable to bind a specific user to one of external IP that are defined in the location, which will on the gateway SNAT all devices of that user to this IP.