An IPv6 ESP transport connection between the hosts <b>moon</b> and <b>sun</b> is successfully set up.
The authentication is based on X.509 certificates. Upon the successful establishment of
the IPsec SA, <b>leftfirewall=yes</b> automatically inserts ip6tables-based firewall
rules that let pass the protected traffic. In order to test both the transport connection
and the firewall rules, <b>moon</b> sends an IPv6 ICMP request to <b>sun</b> using the ping6 command.