mikrotik ipsec config

/ip ipsec profile
add dh-group=modp1024 enc-algorithm=aes-256 hash-algorithm=sha256 lifetime=1h \
    name=ikev2-profile
/ip ipsec peer
add name="peer1" address=192.168.16.1/32 local-address=10.1.2.1
       profile=ikev2-profile exchange-mode=ike2 send-initial-contact=yes
/ip ipsec proposal
add enc-algorithms=aes-128-cbc lifetime=1h name=prop pfs-group=modp1024
/ip ipsec identity
add peer=peer1 auth-method=pre-shared-key secret=sussybaka1337
/ip ipsec policy
add dst-address=192.168.15.0/24 peer=peer1 proposal=prop src-address=\
    10.1.1.0/24 tunnel=yes