The roadwarrior carol proposes DES_CBC encryption with HMAC_MD5 authentication as the only cipher suite for the IPsec SA. Because gateway moon does not use an explicit esp statement any strong encryption algorithm will be accepted but any weak key length will be rejected by default and thus the ISAKMP SA is bound to fail.