IPSec problem

RouterOS Beginner Basics
1

Hi,
I have problem with IPSec.

I use this manual:
http://wiki.mikrotik.com/wiki/Manual:IP/IPsec

SITE TO SITE
but site 2 is under NAT, if i print SA:
[adminka@CORE] /ip ipsec policy> print
Flags: T - template, X - disabled, D - dynamic, I - inactive
0 src-address=10.0.0.0/24 src-port=any dst-address=192.168.87.0/24
dst-port=any protocol=all action=encrypt level=require
ipsec-protocols=esp tunnel=yes sa-src-address=91.225.48.102
sa-dst-address=91.225.48.215 proposal=default priority=0

Tunel is not working, ping timeout.

Thanks for the advice

2

Post the whole export… also what are you connecting to?

3

Complete config:
http://pastebin.com/f6G6nER4

Topology:
https://dl.dropboxusercontent.com/u/14556610/isp.jpeg

For testing is all firewall rules disabled
Thanks for help.

4

Export from IPSec, NAT and LOG:
http://pastebin.com/f6G6nER4

Topology:
https://dl.dropboxusercontent.com/u/14556610/isp.jpeg

Firewall is down for testing.

Thanks for help!