| Using <b>[<protocol>/<port>]</b> selectors in the |
| <b>local_ts</b> and <b>remote_ts</b> child parameters, three IPsec tunnels |
| between the roadwarrior <b>carol</b> and the gateway <b>moon</b> are defined. |
| The first CHILD_SA is restricted to ICMP request packets, the second |
| covers ICMP reply packets and the third TCP-based FTP and SSH connections. |
| <p/> |
| The established tunnels are tested by <b>carol</b> by first pinging <b>alice</b> |
| behind <b>moon</b> and then setting up an SSH session to the same client. |
