Roadwarrior carol proposes to gateway moon the ESP cipher suite 3DES_CBC / HMAC_MD5_96 by defining esp=3des-md5-modp1024! in ipsec.conf. The same cipher suite is used for IKE. A ping from carol to alice successfully checks the established tunnel.