@misc{rfc5998, series = {Request for Comments}, number = 5998, howpublished = {RFC 5998}, publisher = {RFC Editor}, doi = {10.17487/RFC5998}, url = {https://www.rfc-editor.org/info/rfc5998}, author = {Pasi Eronen and Yaron Sheffer and Hannes Tschofenig}, title = {{An Extension for EAP-Only Authentication in IKEv2}}, pagetotal = 16, year = 2010, month = sep, abstract = {IKEv2 specifies that Extensible Authentication Protocol (EAP) authentication must be used together with responder authentication based on public key signatures. This is necessary with old EAP methods that provide only unilateral authentication using, e.g., one- time passwords or token cards. This document specifies how EAP methods that provide mutual authentication and key agreement can be used to provide extensible responder authentication for IKEv2 based on methods other than public key signatures. {[}STANDARDS-TRACK{]}}, }