Doesn't make sense. It shouldn't have a problem with this. Also if it's not behind a NAT, it technically is not a teleworker phone. No license required.
So, have you added the private IP ranges to the network list (trusted)?
Also are you able to connect from public IP's (you mentioned private IP's are problematic). If so is your MBG in Edge (server-gateway), DMZ or LAN mode?