The roadwarrior carol sets up a connection to host alice sitting behind the NAT router moon using IKEv2. Port Forwarding is used to publish host alice. UDP encapsulation is used to traverse the NAT router. The authentication is based on locally loaded X.509 certificates. In order to test the tunnel the roadwarrior carol pings the host alice.