1 The hosts <b>carol</b>, <b>dave</b>, and <b>moon</b> use the <b>openssl</b> plugin
2 based on the <b>OpenSSL</b> library for all cryptographical functions.
4 The roadwarriors <b>carol</b> and <b>dave</b> set up a connection each
5 to gateway <b>moon</b>. The authentication is based on <b>ECDSA signatures</b>
6 using <b>Elliptic Curve certificates</b>.
7 Upon the successful establishment of the IPsec tunnels, <b>leftfirewall=yes</b>
8 automatically inserts iptables-based firewall rules that let pass the tunneled traffic.
9 In order to test both tunnel and firewall, both <b>carol</b> and <b>dave</b> ping
10 the client <b>alice</b> behind the gateway <b>moon</b>.