RE: Re[2]: PPP over IPSec (without L2TP)?

[Stephen Kent <[e-mail]>]

Pyda,

>User vs. Machine authentication is really a key management protocol
>issue (i.e., IKE) - somewhat orthogonal to IPsec architecture (RFC 2401).

RFC 2401 defines ID types that must be supported in the SPD, and which are
aligned with IKE ID payload types. These ID types include X.500 DNs, that
can certainly be used to identify users, and RFC 821 names, which are
specifically user IDs (vs. the DNS ID type, which is designated for
machines).  So I disagree with your assertion that this is purely a key
management protocol issue. I do agree that protocols such as XAUTH
demonstrate a clear intent to authenticate users, not just machines, but
IKE and 2401 make definite statements to that effect already.

Steve