The roadwarrior carol sets up a connection to gateway moon. The authentication is based on RSA signatures (RSASIG) using X.509 certificates followed by extended authentication (XAUTH) of carol based on a user name equal to the IKEv1 identity (carol@strongswan.org) and a user password defined and stored by carol in ipsec.secrets. Gateway moon verifies carol's XAUTH user credentials using a RADIUS connection with AAA server alice.