| Previous | Next |
| STATUS_FWP_INCOMPATIBLE_AUTH_METHOD | STATUS_FWP_EM_NOT_SUPPORTED |
STATUS_FWP_INCOMPATIBLE_DH_GROUP
The Diffie-Hellman group cannot be used with this policy
Diffie-Hellman group selection belongs to key negotiation. This status means the group is not compatible with the policy type or negotiated transform set, rather than merely being unknown text.
Record the Diffie-Hellman groups configured on both peers and the group selected for the failing negotiation. Correct the proposal intersection rather than retrying an unchanged policy.
What to inspect
- Inspect Main Mode proposal settings and DH group.
- Compare local and peer IPsec policy capabilities.
- Check whether legacy and modern cryptographic suites were mixed.
References for STATUS_FWP_INCOMPATIBLE_DH_GROUP
Looking for a different code? Search another status or error code.