1 The roadwarrior <b>alice</b> sets up a connection to host <b>bob</b> using IKEv2. The hosts
2 sit behind NAT router <b>moon</b> (SNAT) and <b>sun</b> (DNAT) respectively.
3 UDP encapsulation is used to traverse the NAT router.
4 The authentication is based on locally loaded <b>X.509 certificates</b>.
5 In order to test the tunnel the NAT-ed host <b>alice</b> pings the host