> Generally, people do NOT want to be reprompted for passwords in the > middle of a session, though... this is no doubt one of the reasons why PIC does legacy authentication and issues certs prior to kicking off IKE. - Bill