> You mean for double authentication within their network although the > client is already identified by IP (being dialled in to them)? I think > almost no ISP does this.
Then perhaps it's time. Simply authenticating based on IP has already proven an obsolete method. I'm going to recommend it at the ISP I work for. -- Stephen.