A connection between the subnets behind the gateways moon and sun is set up. With ah=sha1-md5 gateway moon proposes the use of an AH proposal. Gateway sun selects SHA1 for integrity protection with its ah=sha1! configuration.
Upon the successful establishment of the AH CHILD SA, client alice behind gateway moon pings client bob located behind gateway sun.