Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Everything works (IKEv2 routing, passes traffic) so will just post the bit that is relevant: VPN Gateway crypto ikev2 authorization policy PRINT_IKEV2_AUTH_POL----
dns 10.10.10.10 10.10.10.20---- Remote Site Router: show crypto ikev2 sa detailed
...