This is phase 1 proposal mismatch
One think I noticed you using on SRX
set security ike gateway ike-gw local-identity inet 10.0.1.2
set security ike gateway ike-gw remote-identity inet 10.0.1.1
Remove it at all or reconfigure to
set security ike gateway ike-gw local-identity inet 2.2.2.2
set security ike gateway ike-gw remote-identity inet 1.1.1.1.1
You do not need to specify the local IKE identity to send in the exchange with the destination peer to establish communication. If you do not configure a local-identity, the device uses the IPv4 or IPv6 address corresponding to the local endpoint by default.
Regards
Leon Smirnov
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too