Roadwarrior carol proposes to gateway moon the ESP cipher suite AES_CCM_12_128 by defining esp=aes128ccm12-curve25519 or alternatively esp=aes128ccm96-curve25519 in ipsec.conf. A ping from carol to alice successfully checks the established tunnel.