The roadwarrior carol sets up a connection to gateway moon. The strong mutual authentication of both peers is based on EAP-TLS only (without a separate IKEv2 authentication), using TLS client and server certificates, respectively.