Hi,
after much pain I have identified why my internal network could not connect to the ASG, but IP addresses were correctly assigned.
I have disabled "SPOOF" checking
Network security -> firewall -> advanced -> protocol handling -> Spoof protection -> off
and my network is now happy.
Regards
Ian M
