| Previous | Next |
| FWP_E_DUPLICATE_AUTH_METHOD | FWP_E_L2_DRIVER_NOT_READY |
FWP_E_INVALID_TUNNEL_ENDPOINT
FWP_E_INVALID_TUNNEL_ENDPOINT means the local or remote endpoint definition for an IPsec tunnel cannot be accepted by WFP.
What to verify for FWP_E_INVALID_TUNNEL_ENDPOINT
- Check that local and remote endpoints use valid, compatible address families.
- Verify that the endpoint values match the tunnel policy mode and are not unspecified, malformed, or reversed.
- Check routing and address availability separately after the policy itself validates.
Microsoft: capture IPsec events with netsh wfp
Microsoft: WFP filtering layer identifiers
Diagnostic interpretation
This result has the HRESULT value 0x8032003D. AllStat records the condition as “A tunnel endpoint configuration is invalid.”.
Evidence to capture
- Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions this result or the fwp / tunnel / endpoint operation.
- Reproduce this result with the smallest valid input and note whether the result changes with identity, architecture, service state, or target object.
Retry and recovery
” has changed.
Looking for a different code? Search another status or error code.