IKE v2 VPN is the best to use on Mikrotik routers, as a way to keep the smartphone in the home network after leaving the home:
a) secure
b) it survives client IP address change when client roams from one WiFi to another or from WiFi to 4G/5G and back
c) hardware accelerated on many Mikrotik models,
d) iPhone has built-in IKE v2 VPN client.
But the certificate based connections from mobile phones are too complex and require the user to be on admin level of skills just to prepare the iPhone for VPN connection to the home network.
Is it possible to setup IKE v2 VPN server so that iPhone connects to home network via IKEv2 just with username and strong password, where certificate based client setup complexity is not wanted, perhaps with public trusted certificates on router, if required? If this is possible on MikroTik routers - please provide 1..2..3.. instruction how to launch it. Thank you.