i have used both kerberos and ssh for quite a while, though kerberos first, of course, as ssh is fairly new. each has its features, easy points, hard points. that's why i use 'em both, i guess. i only played with kerberos to ciscos for a bit. works. i use ssh to junipers. works. i can imagine that router vendors see licensing issues between the two. randy