Roadwarrior carol proposes to gateway moon the ESP cipher suite AES_CBC_256 / HMAC_SHA2_512_256 by defining esp=aes256-sha512-modp4096! in ipsec.conf. The same cipher suite is used for IKE. A ping from carol to alice successfully checks the established tunnel.