The roadwarrior carol sets up a connection to gateway moon. carol uses the Extensible Authentication Protocol in association with an MD5 challenge and response protocol (EAP-MD5) to authenticate against the gateway. The user password is kept in ipsec.secrets on both gateway and client Gateway moon additionally uses an RSA signature to authenticate itself against carol.