A connection between the subnets behind the gateways moon and sun is set up. The authentication is based on X.509 certificates. In order to test both tunnel and firewall, client alice behind gateway moon pings client bob located behind gateway sun.