How to configure IKEv2 (cert) VPN iPhone->2008R2?

Question

iOS

There are a small number of personal user devices on iOS (iPhone, iPad). There was a need to provide iOS users with a connection to corporate network resources. For this, there is and is used a VPN server based on Win2008R2 (RRAS).
The best option is IKEv2 with corporate CA (AD Certificate Services) certificate authorization with automatic VPN establishment when accessing a specific subnet.
The "first approach to the projectile" with an attempt to create a profile manually, obtaining a certificate through SCEP, testing Microsoft Intune and programs found in the App Store was not successful. In the process, I'm afraid, I got very lost. But surely someone has already encountered a similar problem and successfully solved it.

Answer 1

I'm wildly sorry. but what did l2tp not please?)