The roadwarrior carol sets up a connection to gateway moon. The authentication is based on RSA signatures (RSASIG) using X.509 certificates followed by extended authentication (XAUTH) based on user name and password. Because user carol cannot find her XAUTH credentials in ipsec.secrets, the IKE negotation is aborted and the ISAKMP SA is deleted.