The roadwarrior carol sets up a connection to gateway moon. The authentication is based on X.509 certificates. carol requests a virtual IP using leftsourceip=%config and indicates support for the Cisco Unity extension. Gateway moon responds with two Split-Include subnets configured in the leftsubnet definition and a global Local-LAN exclude option defined in strongswan.conf.