Ipsec tunnel vpn on rb2011il-in

Hi, This is my first post, please be patient I am still new to this. I currently have an Ipsec tunnel running on Strongswan between a subnet , that I want to into the mikroTik router.
Does the rb2011il-in support that, and can I keep it only inclusive the subnet the devices are on (the Vpn should only be for devices on 192.168.13.X)?

Yes: https://help.mikrotik.com/docs/display/ROS/IPsec#IPsec-Applicationexamples

be aware RB2011 does not support Hardware Acceleration of ipsec, and have a little CPU, the last time i checked RB2011 in the best scenario achieves almost 30mbit per second of ipsec throughput with 100% cpu usage

chechito, from those that support hardware acceleration for AES-CBC encryption SHA256 which would you recommend to get instead of the rb2011il-in?