Windows error 13802 (ERROR_IPSEC_IKE_ATTRIB

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The peer rejected one or more IKE security attributes proposed for the IPsec connection.

Previous	Next
ERROR_IPSEC_IKE_AUTH_FAIL	ERROR_IPSEC_IKE_NEGOTIATION_PENDING

ERROR_IPSEC_IKE_ATTRIB_FAIL

ERROR_IPSEC_IKE_ATTRIB_FAIL indicates that the peers authenticated but could not accept the negotiated IKE/IPsec attributes. The mismatch can be in identities, proposal parameters, lifetimes, traffic selectors, or another policy value.

What to check

Compare the effective connection-security rules and IPsec proposals on both sides, not just the intended GPO settings.
Check whether a recent policy change introduced different authentication, encryption, integrity, or lifetime requirements.
Capture the negotiation on both peers when the effective policies appear identical.

Get-NetIPsecMainModeSA
Get-NetIPsecQuickModeSA

Microsoft: Connection security rules

Microsoft: Get-NetIPsecMainModeSA

Microsoft: Use Netsh to manage network traces

Looking for a different code? Search another status or error code.