Starting off with a let's encrypt client.
Android 13:
Chose WPA2, PEAP, MSCHAPv2
Select a System certificate
Enter the domain of the issued let's encrypt domain
Identity: Username
Password: Password
VPN:
LEAP
IKEv2 does not work on Android unless you have a transparent router/modem that passes on the public IP to the Omada Gateway