| The roadwarrior <b>carol</b> sets up a connection to gateway <b>moon</b>. |
| The authentication is based on <b>X.509 certificates</b> that are valid until |
| the year 2039 and are issued by a certification authority with a root ca |
| certificate valid until the year 2059. On 32-bit platforms, dates after |
| Jan 19 03:14:07 UTC 2038 cannot by represented by the time_t data type. |
| Thus if a time wrap-around occurs during ASN.1 to time_t conversions, |
| dates contained in the certificates are set to the maximum value, |
| i.e. to Jan 19 03:14:07 UTC 2038. |
| <p/> |
| Upon the successful establishment of the IPsec tunnel, the updown script |
| automatically inserts iptables-based firewall rules that let pass the tunneled traffic. |
| In order to test both tunnel and firewall, <b>carol</b> ping the client <b>alice</b> |
| behind the gateway <b>moon</b>. |
