We have a similar setup (Ruckus, Smoothwall and freeradius) Android 13 devices can be very difficult. We import the CA certificate for the CA that signs the radius cert before attempting to join. For domain when joining on an Android device we use the CN attribute of the CA cert. This does seem important if we don't fill in the domain field correctly the join fails.