Route traffic from router itself over IPsec tunnel to host

Try if these are easier to understand:

http://forum.mikrotik.com/t/internal-clients-cannot-ping-remote-gateway-ipsec-vpn/155558/1
http://forum.mikrotik.com/t/how-it-works-ipsec/141882/1
http://forum.mikrotik.com/t/when-to-use-pref-src/157566/1

And it’s not about WinBox vs commands, there’s in most cases direct 1:1 mapping between them, it’s just that few lines of commands can give same info as several screenshots.