A connection between the hosts moon and sun is successfully set up. The authentication is based on X.509 certificates.

Upon the successful establishment of the IPsec tunnel, leftfirewall=yes automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test the host-to-host tunnel moon pings sun.