The roadwarriors carol and dave set up a connection each to gateway moon. The authentication is based on distinct pre-shared keys and fully qualified domain names. By setting the wildcard rightid=@*.strongswan.org on carol and dave, no IDr payloads are sent by the roadwarriors. In order to test the tunnel, both carol and dave ping the client alice behind the gateway moon.