Hi,
Do you get a type 3 NAT?
For the second question, when IPSec establishing across the NAT device, the NAT-T should be configured on both IPSec terminals, also the IPSec tunnel only can be configured in tunnel mode. Also, you might check the example https://support.huawei.com/hedex/hdx.do?docid=EDOC1100136696&id=EN-US_TASK_0172372521&lang=en