The setup of the post-quantum pre-shared key for an IPsec tunnel between two SRXs could not be completed. After creating the key profile, the ppk-profile under the ike gateway is unavailable.
root@jtac-srx1500-r2067# set security ike gateway IKE_GW ?
Possible completions:
Missing "ppk-profile"
Add the ike package to SRX device. Then we will be able to select the ppk-profile.
{primary:node1}
root@jtac-srx1500-r2067> request system software add optional://junos-ike.tgz
Verified junos-ike signed by PackageProductionECP256_2024 method ECDSA256+SHA256
Rebuilding schema and Activating configuration...
mgd: commit complete
Restarting MGD ...
primary:node1}[edit]
> aaa Use extended authentication
+ address Addresses or hostnames of peer:1 primary, upto 4 backups
> advpn Enable Auto Discovery VPN
+ apply-groups Groups from which to inherit configuration data
+ apply-groups-except Don't inherit configuration data from these groups
> dead-peer-detection Enable Dead Peer Detection
> dynamic Site to site peer with dynamic IP address
external-interface External interface for IKE negotiations
> fragmentation IKEv2 fragmentation configuration
general-ikeid Accept peer IKE-ID in general
ike-policy Name of the IKE policy
local-address Local IP address for IKE negotiations
> local-identity Set the local IKE identity
nat-keepalive Interval at which to send NAT keepalives (1..300 seconds)
no-nat-traversal Disable IPSec NAT traversal
> ppk-profile Set Post-Quantum Pre-shared-key profile
> remote-identity Set the remote IKE identity
tcp-encap-profile Ike over tcp profile name
Post-quantum Pre-shared Key (PPK) is introduced for the Platforms and supported for the Junos releases mentioned in the below article:
Post-quantum Pre-shared Key (PPK) | Juniper Networks Pathfinder Feature Explorer