The roadwarriors carol an dave set up a connection to gateway moon. At the outset the gateway authenticates itself to the client by sending an IKEv2 RSA signature accompanied by a certificate. carol and dave then use the EAP-MD5 protocol to authenticate against the gateway moon.
The roadwarriors carol and dave request a virtual IP which is assigned by the RADIUS server alice using the Framed-IP-Address RADIUS attribute.