Yes it works great.
The only 2 slight issues I ran into was (if anyone else hits these)
1. That I run a VPN on the Asus and I couldn't access my CCTV after this change from the internet. However it is accessible via the SH2 Wan interface directly, bypassing the VPN.
2. My JFFS code on the Asus to update my dynamic hosts address if the WAN IP changes no longer functions because the ASus now cannot determine the correct public WAN IP address, because it is now static and cannot retrieve the VPN assigned address. The SH2 can see the right address but the tools on the SH2 to manage Dynamic DNS/VPN are woeful with a limited choice of how to manage it and most either require a paid service or just do not work (DYNO-Matic for example now requiring an HTTPS instruction which the SH2 cannot provide.) Settled in the end for NOIP but have to keep in alive every 30 days manually. Which is a nuisance.
I may try the subsequent configuration example to see if this gives any benefits. But still, it works great and I'm very grateful for the solutions.
