under V4 i played around with the Netgear FVS318 it works fine and supports even AES, but only with static IP (leased line. Problem is, that the 'Local IPSEC identifier' in the box is a static name, but ASL needs the dynamic IP which changes frequently (with dialup line like T-DSL). Switched to FWAG114, which works fine, but only PreSharedKey. There you have an option to send the current IP of the router as 'Local IPSEC identifier'. Tried this last November, maybe it is 'fixed' with a firmware upgrade.
should be possible with V5. There you can setup a network definition wich will be resolved via DNS. Biggest problem should be the 'fine tuning' of the equivalent parameters. Check the Manual and the HowTo's under the Astaro Documentation site.
Good luck, Karsten
P.S.: Hey,please post some information if you got it up and running [;)]