| Previous | Next |
| ERROR_IPSEC_IKE_DH_FAIL | ERROR_IPSEC_IKE_INVALID_HEADER |
ERROR_IPSEC_IKE_CRITICAL_PAYLOAD_NOT_RECOGNIZED
ERROR_IPSEC_IKE_CRITICAL_PAYLOAD_NOT_RECOGNIZED means an IKE peer marked an unsupported payload as critical. A critical payload cannot be safely ignored, so negotiation stops.
Treat the payload type and sender implementation as primary evidence. If the peer recently changed firmware, IKE version, or optional extensions, compare that change with the first negotiation where Windows begins rejecting the critical payload.
What to check
- Capture the exchange and identify the payload type and IKE version in use.
- Check for incompatible peer firmware, nonstandard extensions, or a configuration that requires unsupported functionality.
- Compare the peer product documentation and its enabled IKE extensions with Windows capabilities.
Microsoft: Use Netsh to manage network traces
Looking for a different code? Search another status or error code.