The roadwarrior <b>carol</b> sets up a connection to gateway <b>moon</b>.
At the outset the gateway authenticates itself to the client by sending
an IKEv2 <b>RSA signature</b> accompanied by a certificate.
<b>carol</b> then uses a mutual <b>EAP-TLS</b> authentication based
on X.509 certificates with the remote AAA RADIUS server <b>alice</b>.
