In IKE phase 2 the roadwarrior carol proposes to gateway moon the ESP NULL encryption algorithm with SHA-1 authentication. moon must explicitly accept the choice of this insecure algorithm by setting the strict flag '!' in esp=null-sha1!. The tunnel is tested by carol sending a ping to client alice behind gateway moon.