RB1100X4
RB4011
The whole series supports ipsec, try to use SHA1 and SHA256 of AES-CBC.
original:
https://wiki.mikrotik.com/wiki/Manual:IP/IPsec