Windows error 13808 (ERROR_IPSEC_IKE_SA

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: An incomplete IKE security association was removed before negotiation completed.

Previous	Next
ERROR_IPSEC_IKE_SA_DELETED	ERROR_IPSEC_IKE_MM_ACQUIRE_DROP

ERROR_IPSEC_IKE_SA_REAPED

ERROR_IPSEC_IKE_SA_REAPED means Windows removed an incomplete IKE SA during cleanup. It is normally a symptom of an earlier timeout, peer silence, policy change, or failure to complete authentication.

What to check

Find the earlier negotiation error for the same peer; this code usually records cleanup rather than the original fault.
Check whether the peer was reachable throughout the negotiation window.
Review active Main Mode SAs and repeated negotiation attempts to detect a loop.

Get-NetIPsecMainModeSA
Get-NetIPsecQuickModeSA

Microsoft: Get-NetIPsecMainModeSA

Microsoft: Use Netsh to manage network traces

Microsoft: IPsec IKE system error codes

Looking for a different code? Search another status or error code.