A connection between the subnets behind the gateways moon and sun is set up using the IKEv2 key exchange protocol. The authentication is based on locally imported X.509 certificates. In order to test the established tunnel, client alice behind gateway moon pings client bob located behind gateway sun.