Using config mode together with extended authentication

["Geoffrey Huang" <ghuang@cisco.com>]

I've looked over the sections regarding EAP/XAuth and Config mode in
IKEv2-05, and there are packet descriptions in each section describing
what IKE looks like if either one is used.  But what happens if you do
the cfg request and EAP?  Based on the EAP description, the responder
sends an EAP request in the 4th message, starting off an EAP exchange.

But the Cfg Request description says that the initiator sends a CP
payload before the SAi2 payload.  Does this mean that if we do both CP
and EAP it looks like:

INIT             RESPO
msg1   ---->
       <----     msg2
msg3+CP ---->    
       <----     msg4+EAP
EAP    ---->
       <----     CP reply, etc.

Maybe it's described in the document, and I just missed it.

-g