Android 12 and ikev2

I'm trying to use the wizard to connect an android phone (samsung!) to an ATP with latest firmware, the firewall is under a router, I modified phase 1: in my address instead of "interface" i selected "domain name/IPv4" and entered my public (static) ip.

this is what i get on the firewall:

this is what i get from strongswan:

any help?

update: i tried the same configuration on another firewall with the same firmware, the only difference is that the 2nd fw is not under NAT. In this case it works (same phone).

Well client VPN needs a fw exposed to a public IP. Hidden behind a NAT will obviously not work. The only exception is when this FW will act as a client to another one that has public IP, then they can build a tunnel between themselves.

If the certificate says a IP then the fw needs to have that IP and be WAN

for IPsec identifier on phone need to be:

ikev2

for IPSec pershared key