| Previous | Next |
| ERROR_IPSEC_IKE_QM_LIMIT | ERROR_IPSEC_IKE_PEER_MM_ASSUMED_INVALID |
ERROR_IPSEC_IKE_MM_EXPIRED
The authenticated peer association has ended
A Main Mode SA is the authenticated secure-channel state between peers. This status is used when its lifetime expires or when the peer sends a delete for that Main Mode association. Both are normal lifecycle mechanisms; the code alone does not prove a protocol failure.
The important follow-up is whether protected traffic causes a fresh negotiation and whether associated Quick Mode SAs are recreated normally. Frequent premature expiry can point to lifetime mismatch or policy churn, while an explicit peer delete can reflect peer restart, administrative removal, or reliable-delete behavior.
What to inspect
- Correlate SA end events with configured lifetimes and peer restart or policy changes.
- Check whether a new Main Mode SA is established when protected traffic resumes.
- Distinguish local lifetime expiry from a received delete in packet traces when repeated teardown is unexplained.
Get-NetIPsecMainModeSA
Get-NetIPsecQuickModeSAReferences
- Microsoft: Get-NetIPsecMainModeSA
- IETF RFC 2409: Internet Key Exchange v1
- Microsoft Open Specifications: MS-IKEE product behavior
Looking for a different code? Search another status or error code.