Roadwarrior carol proposes to gateway moon the ESP cipher suite AES_GCM_16-256 by defining esp=aes256gcm16-modp2048 or alternatively esp=aes256gcm128-modp2048 in ipsec.conf. A ping from carol to alice successfully checks the established tunnel.