Cisco Automates Post-Quantum IPsec Configurations with New API Feature

Cisco routers are now capable of automating post-quantum IPsec configurations using APIs and Ansible. This feature is part of a larger effort to make network configuration more programmable and less reliant on manual CLI commands.

The automation process begins with the creation of a YANG model, which defines the desired state of the network. This model is then used to push changes to multiple routers simultaneously using Ansible playbooks.

The post-quantum configuration itself involves specifying the use of ML-KEM-768 or optional ML-KEM-768 and ML-DSA-65 for key exchange and authentication, respectively. The router must be configured with both a PQC proposal and a transform set that includes PQC encryption.