Windows error 13857 (ERROR_IPSEC_IKE

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: IKE could not obtain an inbound Security Parameters Index from the IPsec driver.

Previous	Next
ERROR_IPSEC_IKE_SRVQUERYCRED	ERROR_IPSEC_IKE_INVALID_FILTER

ERROR_IPSEC_IKE_GETSPIFAIL

ERROR_IPSEC_IKE_GETSPIFAIL (0x00003621) The IKE service could not obtain a new inbound SPI from the IPsec driver. The code often points to a missing or incompatible policy filter, as the Windows error description notes.

What to check

Verify that the connection-security rule creates matching traffic selectors and filters for the peer.
Inspect active Main Mode and Quick Mode security associations to see whether negotiation reached the traffic-protection stage.
Check for conflicting firewall, WFP, or IPsec policies that prevent the expected filter from being installed.

Get-NetIPsecMainModeSA; Get-NetIPsecQuickModeSA

Microsoft: Get-NetIPsecMainModeSA

Microsoft: Get-NetIPsecQuickModeSA

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.