i need to make a vpn between 2 offices , and i only want the vpn to work wiht some ip (the printer’s ip only ) the rest of the traffic i want to be outside of vpn so i can use full speed of my network (1gbps) on both side i want to put mikrotik routers , something with hardware encryption
The good news is: Every MikroTik device running RouterOS is able to make use of different VPN-methods (IPSEC, Openvpn[tcp only], SSTP, L2TP and so on).
If your only purpose is to connect multiple printers together you wont need that much speed going over your VPN - but if you are unsure what your demands are in the future i would go with the RB4011 since its outperforming almost every other SoHo Router and is able to make use of hardware encryption.
Restricting VPN access to ports/services or ip addresses is no problem, you could either go with routing rules (routing marks, or table-lookups) or just route specific destination addresses via VPN.