Router to router (site to site) IKEV2 with Dynamic IP

[jaxed8]

Set them exactly as you would if both had a static public IP, using the site to site example from the manual, but set passive=yes address=0.0.0.0/0 in the peer properties at the one with static IP. And set exchange-mode to ike2 rather than main at both. That’s all.

Thanks man, I will try this one as well. Is using passive=yes address=0.0.0.0/0 in the peer properties is safe?
I tried this one at the link below but somehow didn’t worked for me. (got Active on client but no phase 2)

• Mikrotik (behind NAT) to Mikrotik IPSEC/IKE2 (with certs) tunnel + EoIP