What does Windows error code 13833 (ERROR_IPSEC_IKE_PROCESS_ERR_KE) mean?

 
Previous Next
ERROR_IPSEC_IKE_PROCESS_ERR_TRANS ERROR_IPSEC_IKE_PROCESS_ERR_ID

ERROR_IPSEC_IKE_PROCESS_ERR_KE

ERROR_IPSEC_IKE_PROCESS_ERR_KE means the Diffie-Hellman key-exchange payload could not be parsed or accepted. It often accompanies an incompatible group, malformed public value, or a mismatched proposal.

Record the group and key-exchange value from the failing packet. If proposal negotiation selected a supported group first, the investigation should move from policy lists to peer payload construction and implementation compatibility.

What to check for ERROR_IPSEC_IKE_PROCESS_ERR_KE

  • Check the Diffie-Hellman group configured by each peer.
  • Look for a related ERROR_IPSEC_IKE_DH_FAIL or invalid-group error.
  • Capture both directions of the exchange to determine which peer generated the bad payload.

Microsoft: Use Netsh to manage network traces

Microsoft: IPsec IKE system error codes

Microsoft: Get-NetIPsecMainModeSA

Where the result is returned

This result is Win32 system error 13833 (0x00003609) from winerror.h. AllStat describes it as “Error processing KE payload”.

Looking for a different code? Search another status or error code.