Windows error 13898 (ERROR_IPSEC_IKE_KILL_DUMMY_NAP

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: NAP reauthentication completed and the dummy tunnel must end.

Previous	Next
ERROR_IPSEC_IKE_NEG_STATUS_END	ERROR_IPSEC_IKE_INNER_IP_ASSIGNMENT_FAILURE

ERROR_IPSEC_IKE_KILL_DUMMY_NAP_TUNNEL

A temporary Network Access Protection tunnel is being removed

This is a legacy NAP lifecycle status. The text describes successful reauthentication followed by deletion of a dummy IKEv2 tunnel that existed only to support the Network Access Protection flow. It should not be diagnosed as failure of the production protected tunnel without evidence that user traffic used the same SA.

Because NAP is a historical Windows health-policy mechanism, this code is most relevant when analyzing older systems, compatibility paths, or preserved event data. The useful distinction is between the dummy tunnel and the security association that protects application traffic after health reauthentication succeeds.

What to inspect

Confirm the event belongs to a NAP reauthentication flow and not an ordinary site-to-site or remote-access tunnel.
Check whether the protected traffic SA remains or is re-established after dummy-tunnel deletion.
On modern systems without NAP deployment, treat the code as legacy compatibility context and verify the actual component emitting it.

Get-NetIPsecMainModeSA
Get-NetIPsecQuickModeSA

References

Looking for a different code? Search another status or error code.