The roadwarrior carol sets up a connection to gateway moon. The authentication is based on RSA signatures (RSASIG) using X.509 certificates followed by extended authentication (XAUTH) of carol based on a user name equal to the IKEv1 identity (carol@strongswan.org) and a user password defined and stored by carol in ipsec.secrets. Gateway moon starts an EAP-RADIUS connection with AAA server alice and uses carol's forwarded XAUTH user credentials for an EAP-MD5 based client authentication with alice.