| Previous | Next |
| ERROR_IPSEC_IKE_GENERAL_PROCESSING_ERROR | ERROR_IPSEC_IKE_NO_CERT |
ERROR_IPSEC_IKE_TIMED_OUT
ERROR_IPSEC_IKE_TIMED_OUT means the IKE negotiation exceeded its allowed time. It can be caused by packet loss, blocked UDP 500/4500 traffic, an unresponsive peer, a policy mismatch that prevents a reply, or heavy load delaying the keying service.
What to check
- Verify reachability of the peer and any firewall/NAT path for IKE and IPsec traffic.
- Compare traces from both endpoints to determine whether the peer received the proposal and whether it sent a response.
- Check for queue or rate-limit errors near the same time, especially during many simultaneous tunnel connections.
netsh trace start scenario=NetConnection capture=yes tracefile=C:\Temp\ipsec.etl
... reproduce the failure ...
netsh trace stopMicrosoft: Use Netsh to manage network traces
Microsoft: Get-NetIPsecMainModeSA
Microsoft: IPsec IKE system error codes
Looking for a different code? Search another status or error code.