The roadwarrior carol sets up a connection to gateway moon. The authentication is based on Preshared Keys (PSK) and IPv4 addresses (ID_IPV4_ADDR). firewall=yes automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test the tunnel carol pings the client alice behind the gateway moon.