Roadwarrior carol proposes to gateway moon the ESP cipher suite AES_CBC-256/AES_XCBC_96 by defining esp=aes256-aesxcbc-modp2048 in ipsec.conf. The same cipher suite is used for IKE: ike=aes256-aesxcbc-modp2048. A ping from carol to alice successfully checks the established tunnel.