What does Windows error code 13810 (ERROR_IPSEC_IKE_QM_ACQUIRE_DROP) mean?

 
Previous Next
ERROR_IPSEC_IKE_MM_ACQUIRE_DROP ERROR_IPSEC_IKE_QUEUE_DROP_MM

ERROR_IPSEC_IKE_QM_ACQUIRE_DROP

ERROR_IPSEC_IKE_QM_ACQUIRE_DROP means the request to create the traffic-protection SA waited too long after the authenticated channel phase. This points to a delayed or overloaded Quick Mode negotiation, not necessarily a credential problem.

What to check

  • Check whether Main Mode succeeds but Quick Mode never establishes an SA.
  • Compare traffic selectors, IPsec transform sets and lifetimes on both peers.
  • Look for many concurrent traffic-triggered negotiations or repeated Quick Mode retries.
Get-NetIPsecMainModeSA
Get-NetIPsecQuickModeSA

Microsoft: Get-NetIPsecQuickModeSA

Microsoft: Audit IPsec Quick Mode

Microsoft: IPsec IKE system error codes


Looking for a different code? Search another status or error code.