Hi lads, I already opened a ticket about this, but I said it can't hurt if I write here as well... In (quite common) scenario where Mikrotik and client (mobile phone or PC at remote location) have dynamic IP address, you can only use dynamic creation of IPSec policies to get around that issue. I am ...