An IPsec AH transport-mode connection using AES-XCBC between the hosts moon and sun is successfully set up. leftfirewall=yes automatically inserts iptables-based firewall rules that let pass the decrypted IP packets. In order to test the host-to-host connection moon pings sun.