The roadwarriors carol an dave set up a connection to gateway moon. At the outset the gateway authenticates itself to the client by sending an IKEv2 RSA signature accompanied by a certificate. carol and dave then use the EAP-MD5 protocol to authenticate against the gateway moon. The user credentials of carol and dave are kept both on the local clients and the RADIUS server alice. carol possesses the RADIUS class attribute Research and therefore obtains access to the research subnet behind gateway moon whereas dave belongs to the class Accounting and has access to the acccess subnet.