I guess there is a mistake in the IPSec-Wiki. Can someone validate my correction and update the Wiki (if necessary)?
http://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_with_Mode_Conf
For my understanding, the Source- and Destination-Address for the IPSec-Policy are always from the perspektive of the Mikrotik-Router. Therfore I would replace the following
/ip ipsec policy
add dst-address=192.168.77.0/24 group=RoadWarrior src-address=10.5.8.0/24 \
template=yes
add dst-address=10.5.8.0/24 group=RoadWarrior src-address=192.168.77.0/24 \
template=yes
add dst-address=192.168.77.0/24 group=RoadWarrior src-address=192.168.55.0/24 \
template=yes
…by this. Why: the Server and Workstation (Src) want to communicate with the Roadwarriro (Dest)
/ip ipsec policy
add dst-address=192.168.77.0/24 group=RoadWarrior src-address=10.5.8.0/24 \
template=yes
add dst-address=192.168.77.0/24 group=RoadWarrior src-address=192.168.55.0/24 \
template=yes
And with the Android Client Notes the same http://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Android_Client_Notes . This
/ip ipsec policy
add group=RoadWarrior src-address=192.168.77.0/24 dst-address=0.0.0.0/0 template=yes
…should be replaced by that (I validated it for my config already)
/ip ipsec policy
add group=RoadWarrior dst-address=192.168.77.0/24 src-address=0.0.0.0/0 template=yes