The roadwarrior carol sets up a connection to gateway moon.
carol uses the Extensible Authentication Protocol
in association with an MD5 challenge and response protocol
(EAP-MD5) to authenticate against the gateway. The user password
is kept in ipsec.secrets on both gateway and client
Gateway moon additionally uses an RSA signature to authenticate itself
against carol.