Gre over ipsec. Mikrotik usb4g white IP and mikrotik ether1 white IP?

Question

Mikrotik

I can’t encrypt vpn traffic between two mikrotiks
In the office, there is a white IP on the ether1 interface
in a white IP on a usb 4g modem, then NAT and Mikrotik.
gre tunnels rise without problems, but as soon as I turn on IPSEC in transport mode, the tunnels fall off.
in the usb modem, udp ports 500, 4500, 1701 are forwarded to the Mikrotik interface.
In feasts on both sides I specify white addresses.
in politicians too white addresses of the beginning and the end of enciphering.
nat-t option on both ends.

Answer 1

Use the Use IPsec checkbox in the GRE settings - and you will be happy)

Answer 2

Yes, with

in dope white ip on usb 4g modem, then NAT and mikrotik.

can you be a little more specific?
Is the address white on the second router? If yes - show policies and configs