correct. ( from the Matrix )
Encryption and decryption of IP packets and the tunnel setup using IKEv2 can be done only on the BR-MLX-10GX4-M IPSEC line card.
Have a look please into the "Security Configuration Guide" page 203 ff.. for the features you looking for .