Roadwarrior carol proposes to gateway moon the cipher suite AES_CTR_128 both for IKE and ESP by defining ike=aes128ctr-aesxcbc-modp2048 and esp=aes128ctr-aesxcbc-modp2048 in ipsec.conf, respectively. A ping from carol to alice successfully checks the established tunnel.