A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b> is set up. The host <b>moon</b> uses the Trusted Key Manager (TKM) and is the initiator of the tunnel connection. The authentication is based on X.509 certificates. In order to test the tunnel, client <b>alice</b> behind gateway <b>moon</b> pings client <b>bob</b> located behind gateway <b>sun</b>.