IPSec client to be authenticated with AD Server

Hi all,

I know that SSL VPN clients connections can be authenticated with AD.

How about IPSEC clients?
As far as I know, IPSEC clients connections can only be authenticated locally and cannot be authenticated from the AD.

Is this true?
Is there anyway or method where IPSec clients credentials can be authenticated from the AD?

Edit:
Added the screen shot below (attachment).

If I managed to successfully integrate with AD, the user list should be shown on the left right?
What I want to do is to add the users on the left to the allowed user box.

Thanks.

Attached Images

auth.png (53.1 KB)