Roadwarrior carol proposes to gateway moon the ESP cipher suite AES_CCM_12-128 by defining esp=aes128gcm12-modp2048 or alternatively esp=aes128gcm96-modp2048 in ipsec.conf. A ping from carol to alice successfully checks the established tunnel.