Suggestions
The sender MAC address in the ARP reply of the USG was the virtual MAC address, but the source MAC address of the ARP reply was the physical MAC address.
SW5300 was unable to handle ARP replies whose sender MAC address is not the same as the source MAC address. This is a known issue of SW5300 and a patch is available to fix the problem.