Site to Site VPN with only IKEv2

[RoD]

Hi,

I have question about S2S VPN between two firewall and IKEv2.

Is it possible to have Site to Site VPN with only IKEv2 and Perfect Forward Secrecy,
if one firewall have Static IP and other firewall have Dinamic public IP ?

Thanks

[PhoneBoy]

Yes, assuming certificate-based authentication.
We do not support using pre-shared secrets with a dynamic IP VPN endpoint.