The roadwarriors carol and dave set up a connection each
to gateway moon. The authentication is based on distinct pre-shared keys
and fully qualified domain names. By setting the wildcard remote.id=@*.strongswan.org
on carol and dave, no IDr payloads are sent by the roadwarriors.
Upon the successful establishment of the IPsec tunnels, the updown-script automatically
inserts iptables-based firewall rules that let pass the tunneled traffic.
In order to test both tunnel and firewall, both carol and dave ping the
client alice behind the gateway moon.