The roadwarriors carol and dave as well as the gateway moon use the openssl plugin based on the OpenSSL library for all cryptographical functions, thus making the Blowfish available as an IKEv2 cipher.

The roadwarriors carol and dave set up a connection each to gateway moon using Blowfish for both IKE and ESP encryption. Upon the successful establishment of the IPsec tunnels, leftfirewall=yes automatically inserts iptables-based firewall rules that let pass the tunneled traffic. In order to test both tunnel and firewall, both carol and dave ping the client alice behind the gateway moon.