Additional Public ipv4 from VPS to home Router

Hello!
in the past i been using Sophos UTM until i discovered the magic of mikrotik Routers.

To get around not having an own public IPv4 assigned by my ISP due to “Carrier Grade NAT” i started with Site2Site with a small rented VPS Server. I figured out that once you make a bridge of WAN and RED (GRE Tunnel on Sophos) that you can get a second IP from the VPS and assign it directly to the other end of the GRE Tunnel on my home sophos. That way i get the second VPS IP directly at home without NAT and working like a “real” IPv4 Adress (in and outgoing)

I want to setup exactly this with my Mikrotik Hardware and a RouterOS running on a VPS.

So my Questions are:

  • is this doable? (i strongly assume yes since RouterOS can do everything)
  • how would i go with this? RED on Sophos is encrypted, so i assume i’d have to setup IPSec/OpenVPN on the Mikrotik Platform and make a Bridge. Would i use EoIP or GRE or do i go a totally different Route here?

I thank you in advanced and appreciate any suggestions on how i can make this happen!

You might need to use L2TP or PPTP since the home router is behind CGNat.
Make the CGNat box “dial in” to the publicly-available router with L2TP/IPSec, and then at the public router, assign the “remote IP” of the home router as the second VPS IP. (configure this in the “secrets” tab of the PPP configuration)