Roadwarrior carol proposes to gateway moon the ESP cipher suite NULL / HMAC_SHA256_128 by defining esp=null-sha256 in ipsec.conf. A ping from carol to alice successfully checks the established tunnel.