I would like to create hub and spoke vpn. Hub has a static public IP address whereas spokes are behind the NAT'd router or they could be 4G SIMs. I trawled the internet for draytek hub to spoke config but couldn't find any. So far, spokes to hub IPSEC is up and working. How can i make spoke to spoke IPSEC? I definitely need your help.

Thank You

When you configure VPN profiles on Draytek, you don't supply any topology information as such - you just specify each link in isolation.

What are the issues with your 'spoke-to-spoke' connections? ... is it just that they don't have Static IP addresses, or something else?

You may need to supply more information regarding the devices involved and their connections to the Internet...