The roadwarrior carol sets up a connection to gateway moon. The authentication is based on X.509 certificates. Upon the successful establishment of the IPsec tunnel, leftfirewall=yes automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, carol pings the client alice behind the gateway moon.