While it supports IPsec and GRE when running RouterOS, these protocols are implemented in software, so the throughput is determined by the CPU power and is far below the switching throughput of the switch.
Also be aware of http://forum.mikrotik.com/t/crs354-48p-4s-2q-traffic-problem-on-ports-1-to-8/139024/1 .