The roadwarriors carol and dave set up a connection each to gateway moon.
The gateway requests an EAP-Identity and uses it to select an appropriate connection.
Based on dave's identity, the gateway requests an EAP-TLS certificate-based
client authentication. For carol, the gateway switches to a default config
that uses the EAP-MD5 password-based client authentication method.