You need this - http://forum.mikrotik.com/t/terrible-slow-performance-through-ipsec/133400/1 and this - http://forum.mikrotik.com/t/mtu-troubles-using-ikev2-providers-like-nordvpn-work-around/135154/1