Roadwarrior carol proposes to gateway moon the authentication-only ESP cipher suite NULL_AES_GMAC_256 by defining esp=aes256gmac-modp2048! in ipsec.conf. A ping from carol to alice successfully checks the established tunnel.