| Previous | Next |
| STATUS_WRONG_COMPARTMENT | STATUS_DS_OID_MAPPED_GROUP_CANT_HAVE_MEMBERS |
STATUS_AUTHIP_FAILURE
AuthIP negotiation failed for the remote connection
These status values come from the Windows Filtering Platform path. For STATUS_AUTHIP_FAILURE, wFP classifies traffic through layers, filters, provider contexts, sublayers, and callouts; IPsec policy is also configured through WFP at IKE/AuthIP-related layers.
AuthIP is used by Windows IPsec for authenticated key negotiation. This status indicates that the connection failed in the AuthIP/IPsec negotiation path rather than in ordinary TCP connection establishment.
For STATUS_AUTHIP_FAILURE, when this appears during IPsec or AuthIP negotiation, compare the Main Mode, Quick Mode, Extended Mode, transform, tunnel endpoint, DNS name, and authentication-method policy actually installed in WFP.
What to inspect
- Check IPsec and AuthIP event logs.
- Compare authentication methods, certificates, and crypto proposals on both peers.
- Confirm IKEEXT is running and IPsec policy is applied.
References for STATUS_AUTHIP_FAILURE
- Microsoft Open Specifications: NTSTATUS values
- Microsoft: IPsec configuration through WFP
- Microsoft: WFP error codes
Looking for a different code? Search another status or error code.