I have followed your documentation and configured NordVPN (IKEv2) with address-list option to tunnel traffic.
VPN is established and also tracert shows ICMP is tunneled.

Problem is that when I open page in browser (different pages) it does not work. Browser is stuck in negotiation TLS or something.
I have tried almost everything. If I use client on PC behind Mikrotik it works. I have connected my old MikroTik with default config and only configuration from guide. It behaves the same.
I have tried with configuring (PMTUD - with mangle rule as suggested in one of the topics, I have changed MTU of internet facing interface, no success).

Any idea what could be wrong?

Tnx

P.S. I am attaching config...