Question about EAP payload

[Radia Perlman - Boston Center for Networking <Radia.Perlman@sun.com>]

I've been reading the new draft of IKEv2, which
has not yet been announced, but has been submitted.

Anyway, under EAP payload, there seems to be
"OTP", "MD5-challenge", and "generic token card".
But there doesn't seem to be anything there
for just plain sending a name and password.

Is this intentional, perhaps because MD5-challenge
is considered better? (though it requires the
server to store a password-equivalent, whereas
sending password in-the-clear allows the
server to store hashes of passwords)

Or is name/password really covered under "generic
token card", because EAP just passes text back
and forth, and the server could ask for name
and password, and the client could send it?

Radia