NTSTATUS 0xC0220030 (STATUS_FWP_INCOMPATIBLE_AUTH

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

An IPsec authentication method is incompatible with the policy type.

Previous	Next
STATUS_FWP_CONTEXT_INCOMPATIBLE_WITH_CALLOUT	STATUS_FWP_INCOMPATIBLE_DH_GROUP

STATUS_FWP_INCOMPATIBLE_AUTH_METHOD

The authentication method does not fit the IPsec policy type

These status values come from the Windows Filtering Platform path. For STATUS_FWP_INCOMPATIBLE_AUTH_METHOD, wFP classifies traffic through layers, filters, provider contexts, sublayers, and callouts; IPsec policy is also configured through WFP at IKE/AuthIP-related layers.

This status means the policy accepts the object syntactically but rejects the authentication method for that policy category. Typical examples are mixing machine, user, certificate, preshared-key, or Kerberos methods with a policy type that does not allow them.

For STATUS_FWP_INCOMPATIBLE_AUTH_METHOD, when this appears during IPsec or AuthIP negotiation, compare the Main Mode, Quick Mode, Extended Mode, transform, tunnel endpoint, DNS name, and authentication-method policy actually installed in WFP.

What to inspect

Compare configured authentication methods with the target IKE/AuthIP policy type.
Check whether user authentication was placed where only machine authentication is valid.
Do not diagnose this as a bad password until the policy shape is confirmed.

References for STATUS_FWP_INCOMPATIBLE_AUTH_METHOD

Looking for a different code? Search another status or error code.