Roadwarrior carol proposes to gateway moon the ESP cipher suite AES_CCM_12_128 by defining esp=aes128ccm12-modp2048 or alternatively esp=aes128ccm96-modp2048 in ipsec.conf. A ping from carol to alice successfully checks the established tunnel.