What does NTSTATUS 0xC0220030 (STATUS_FWP_INCOMPATIBLE_AUTH_METHOD) mean?

STATUS_FWP_INCOMPATIBLE_AUTH_METHOD

The authentication method does not fit the IPsec policy type

This status means the policy accepts the object syntactically but rejects the authentication method for that policy category. Typical examples are mixing machine, user, certificate, preshared-key, or Kerberos methods with a policy type that does not allow them.

Compare the authentication methods on both peers and the methods installed in the applicable IPsec rule. Certificate, preshared-key, and machine or user authentication choices must agree with the negotiated mode.

What to inspect

• Compare configured authentication methods with the target IKE/AuthIP policy type.
• Check whether user authentication was placed where only machine authentication is valid.
• Do not diagnose this as a bad password until the policy shape is confirmed.

References for STATUS_FWP_INCOMPATIBLE_AUTH_METHOD

• Microsoft Open Specifications: NTSTATUS values
• Microsoft: WFP error codes
• Microsoft: IPsec configuration through WFP