Site2Site IPSec VPN between Windows 201x RRAS and OPNSense

[Allan Stark]

Did someone manage to make a site2site IPSec connection between Windows Server 2016 RRAS and OPNsense?
Windows Server RRAS service is very moody and unpredictable itself...

I tried to configure IPSec policies, allow packets fragmentation in the Windows registry, specify DH groups instead of the DH2 default ones.
Nothing works :(

Can someone have a working example?