Starting with Samba 4.20, administrators have reported that using include = /etc/samba/smb.conf.%I does not reliably apply settings like server min protocol = NT1. The reason is that protocol negotiation happens at the very start of the connection, before the include file is loaded. As a result, even if you specify NT1 in the per-IP include file, the server has already locked onto the global default (SMB2_02 or higher), and the client will fail with “No protocol supported”.
This article explains why this happens and how to fix it using config file = %I.