The roadwarrior carol sets up a connection to gateway moon.
At the outset the gateway authenticates itself to the client by sending
an IKEv2 RSA signature accompanied by a certificate.
carol then uses a mutual EAP-TLS authentication based
on X.509 certificates with the remote AAA RADIUS server alice.