Just a thought... try to remove all irregular variables.
Try ONT box --> eth0 Shield (bridge mode) eth2--> WAN in Asus Router (pulling external IP, serving internal DHCP), without AdTrap just yet.
You'll need to plug Shield eth1 into a LAN port on the Asus Router. In Bridge Mode, Shield doesn't provide DHCP to the LAN, your Asus Router will do that. You may need to manually assign/reserve the x.111 lan ip in the Asus for the shield MAC for eth1.
Then, you'll need to boot things in sequence: 1) ONT box, 2) Shield, 3) Router and hubs. You should see the Luci interface come up on your LAN at x.111 eventually, whether you have internet or not.
Log into Luci using 'Admin' as your user id and your password. Note that when accessing Shield via SSH or telnet your user id is 'root', with same password.
Shield Pro v1, Chaos Calmer, FW 1.51 SP1, v8.3.2, Bridge Mode