I called the hotline and a super nice supporter activated CAA for me (5CHF/month) for all my multi sim.
I tested it with a secondary data-only sim and it worked flawlessly.
I had to change the APN to corporate.swisscom.ch (empty user, empty password), disconnect my router (or just reboot it) and I got a publicly routable IP, which means I can now run my VPN server, DynDNS and all I want…
Thanks a lot support 🙂