Allow IPSEC remote site to use Mikrotik Router's internet

A snippet does not suffice to judge whether there are errors in the config:

/export file=anynameyouwish (minus sensitive info like serial numbers, passwords, etc.)