You should try NAT-T or read relevant issue here
http://forum.mikrotik.com/t/ipsec-behind-nat/33047/1