Of course there is, but you may end up with the same issue I’ve mentioned above. You may have more than one IPsec policy in place (or even more than one dynamic address assigned by an IKEv2 peer using mode-config), so the match criteria used to select the proper address have to be tailored to your environment in any case, regardless whether you fetch it from the dynamically assigned IP addresses or from the dynamically created IPsec policies (or both).
I have it working but need two routers in serie (cascade).
If I was you I eould wait till Mirotik implement the promised way to be able to do this in one one router.
Thanks sindy! Your script worked.
I tried find address from ipsec policy by peer get the ip too.
local currentIP [/ip ipsec policy get [find peer~"pure"] src-address];
So I can routing package by set the routing-mark of the source nat,