The roadwarrior carol sets up a connection to gateway moon.
The strong mutual authentication of both peers is based on EAP-TLS only
(without a separate IKEv2 authentication), using TLS client and server certificates,
respectively. Elliptic curve cryptography is used by both the IKE and TLS
protocols.