[admin@MikroTik] > ip ipsec export verbose
# jun/16/2014 11:50:39 by RouterOS 6.15
# software id = RH2I-QMHR
#
/ip ipsec mode-config
set (unknown) name=request-only send-dns=yes
/ip ipsec policy group
set default name=default
/ip ipsec proposal
set [ find default=yes ] auth-algorithms=sha1 disabled=yes enc-algorithms=3des,aes-128-cbc,aes-256-cbc lifetime=8h name=default pfs-group=modp1024
/ip ipsec peer
add address=AZURE_IP/32 auth-method=pre-shared-key dh-group=modp1024 disabled=yes dpd-interval=17m4s dpd-maximum-failures=5 enc-algorithm=aes-128 exchange-mode=main generate-policy=no hash-algorithm=sha1 lifebytes=0 lifetime=8h local-address=\
0.0.0.0 my-id-user-fqdn=EXT_IP nat-traversal=yes passive=no port=500 proposal-check=obey secret=qtCthIBfb8xzr3d9hW2vFJNRJbudDq5v send-initial-contact=yes
/ip ipsec policy
add action=encrypt disabled=yes dst-address=10.0.0.0/24 dst-port=any ipsec-protocols=esp level=require priority=0 proposal=default protocol=all sa-dst-address=AZURE_IP sa-src-address=EXT_IP src-address=192.168.1.0/24 src-port=any \
tunnel=yes
add action=encrypt disabled=yes dst-address=10.0.0.0/24 dst-port=any ipsec-protocols=esp level=require priority=0 proposal=default protocol=all sa-dst-address=AZURE_IP sa-src-address=EXT_IP src-address=192.168.10.0/24 src-port=any \
tunnel=yes
add action=encrypt disabled=yes dst-address=10.0.0.0/24 dst-port=any ipsec-protocols=esp level=require priority=0 proposal=default protocol=all sa-dst-address=AZURE_IP sa-src-address=EXT_IP src-address=192.168.3.0/24 src-port=any \
tunnel=yes
add action=encrypt disabled=yes dst-address=192.168.0.0/16 dst-port=any ipsec-protocols=esp level=require priority=0 proposal=default protocol=all sa-dst-address=EXT_IP sa-src-address=AZURE_IP src-address=10.0.0.0/24 src-port=any \
tunnel=yes
add action=encrypt disabled=yes dst-address=10.0.0.0/24 dst-port=any ipsec-protocols=esp level=require priority=0 proposal=default protocol=all sa-dst-address=AZURE_IP sa-src-address=77.222.151.182 src-address=192.168.0.0/24 src-port=any \
tunnel=yes