Windows error 13862 (ERROR_IPSEC_IKE_UNKNOWN

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The peer sent an unsupported Domain of Interpretation value during legacy IKE negotiation.

Previous	Next
ERROR_IPSEC_IKE_INVALID_POLICY	ERROR_IPSEC_IKE_INVALID_SITUATION

ERROR_IPSEC_IKE_UNKNOWN_DOI

ERROR_IPSEC_IKE_UNKNOWN_DOI (0x00003626) This is a legacy IKEv1 protocol-compatibility error. The Domain of Interpretation (DOI) tells the peer how to interpret security-association data; Windows could not accept the value it received.

What to check

Confirm that both endpoints are configured for compatible IKE/IPsec modes and supported protocol versions.
Update or reconfigure an older third-party VPN gateway if it emits obsolete or non-Windows-compatible IKEv1 parameters.
Use a packet trace to identify the peer proposal rather than changing unrelated certificate settings.

netsh trace start capture=yes scenario=InternetClient

Microsoft: Netsh network tracing

Microsoft: Audit IPsec Main Mode

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.