Instead of creating two IKE_SAs with different identities, this scenario uses simple labels to select the correct child config.
Tobias Brunner