The roadwarriors carol and dave set up a connection each to gateway moon. The IKEv1 main mode authentication is based on pre-shared keys and IPv4 address identities. On the gateway two connections with differing parameters are defined: One for peers from the 192.168.0.96/28 subnet and one for peers from the range 192.168.0.150-192.168.0.200.

On the gateway for different shared keys are defined for the following hierarchcal peer address ranges: 0.0.0.0/0 0::0/0, 192.168.0.96/28, 192.168.0.150-192.168.0.200 and 192.168.0.200. Client carol uses the first and client dave the fourth PSK.

Upon the successful establishment of the IPsec tunnels, carol pings the client alice and dave the client venus lying in two different subnets behind the gateway moon.