A connection between the subnets behind the gateways moon and sun is set up using the IKEv1 protocol. With ah=sha1,sha256! gateway moon proposes the use of AH. Gateway sun selects SHA2_256_128 for integrity protection with its ah=sha256! configuration.

Upon the successful establishment of the AH CHILD SA, client alice behind gateway moon pings client bob located behind gateway sun.