3.4.5.2 Receiving Message #2

On receipt of message #2, the host MUST check whether the proposal that the peer selected contains the AUTH_CGA authentication method defined in section 3.4.1. The host then MUST construct message #3, as specified in [RFC2409] section 5.1.