[Router Address][Dst Router Address](Router Address)(Some Dst Internet Address)(IP Packet Content)[IPIP Trailer]
/ip firewall nat
add action=src-nat chain=srcnat out-interface-list=IPIP to-addresses=10.0.0.2
add action=masquerade chain=srcnat ipsec-policy=out,none out-interface-list=!LAN