Roadwarrior carol proposes to gateway moon the ESP cipher suite AES_CBC_256 / AES_XCBC_96 by defining esp=aes256-aesxcbc in ipsec.conf. A ping from carol to alice successfully checks the established tunnel.