Another simple explanation would be that your users would be using PAT or Port Address Translation as opposed to NAT or Network Address Translation. In other words, the users will be identified as arbitrary and different ports with that legitimate IP address rather than different hosts with that IP address.
netrangers
