/ip ipsec mode-config
add name=NordVPN responder=no src-address-list=VPN
/ip ipsec peer
add address=de497.nordvpn.com exchange-mode=ike2 name=NordVPN497
add address=de540.nordvpn.com exchange-mode=ike2 name=NordVPN540
/ip ipsec policy group
add name=NordVPN
/ip ipsec profile
add enc-algorithm=aes-256,aes-128 name=NordVPN
/ip ipsec peer
add address=de664.nordvpn.com exchange-mode=ike2 name=NordVPN profile=NordVPN
/ip ipsec proposal
set [ find default=yes ] pfs-group=none
add auth-algorithms=sha256,sha1 enc-algorithms=aes-256-cbc name=NordVPN \
pfs-group=none
/ip ipsec identity
add auth-method=eap certificate="" eap-methods=eap-mschapv2 generate-policy=\
port-strict mode-config=NordVPN peer=NordVPN540 policy-template-group=\
NordVPN username=*****
/ip ipsec policy
set 0 disabled=yes
add action=none dst-address=0.0.0.0/0 dst-port=41274 src-address=0.0.0.0/0
add action=none dst-address=0.0.0.0/0 dst-port=9993 src-address=0.0.0.0/0
add dst-address=0.0.0.0/0 group=NordVPN proposal=NordVPN src-address=\
0.0.0.0/0 template=yes
, наверно не так написал, только 1-но устройство ходит через IPSEC