IPsec IKEv2 Server for Road Warriors/Site to Site behind double NAT - rb4011 and OS6.48.1

[xylograde]

but the behavior is exactly the same as with the pre-shared key solution and the native Android client

That pretty much excludes issues at the Android end. So I’d myself try 6.46.8 before digging further. Not because that version is special in some way but because I know IKEv2 works on it, whereas I haven’t tested 6.47.9 nor 6.48.1 yet.

I need to put this Mikrotik out of my main network before do that… Never tried downgrading MT devices, but I would expect issues on existing configurations, etc. I asked also official support from Mikrotik about that issue, still no news.
For the moment, thanks for all your support!