The roadwarriors alice and venus sitting behind the NAT router moon set up a connection to gateway sun. alice uses the IKEv2 key exchange protocol whereas venus negotiates the connection via the IKEv1 protocol. UDP encapsulation is used to traverse the NAT router. In order to test the tunnel the NAT-ed hosts alice and venus ping the client bob behind the gateway sun.