Hi,
Can you check the following:
- both routers have "host inbound traffic system services ike" on the declared external interfaces
- enable nat traversal on both ends, the dynamic IP side might go through a NAT from the ISP
Also, please paste output from "show security ike sec assoc"
Regards,
Radu
