What does Windows error code 13006 (ERROR_IPSEC_MM_FILTER_EXISTS) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The requested legacy IPsec Main Mode filter already exists.

Previous	Next
ERROR_IPSEC_MM_POLICY_IN_USE	ERROR_IPSEC_MM_FILTER_NOT_FOUND

ERROR_IPSEC_MM_FILTER_EXISTS

ERROR_IPSEC_MM_FILTER_EXISTS (0x000032CE) A Main Mode filter with the requested identity already exists. The failure is usually caused by a repeated deployment or by creating the same peer selector in both local policy and Group Policy.

What to check

Compare the existing filter selectors with the intended remote addresses, interface constraints, and authentication scope.
Check whether a GPO already supplies the filter before adding a local duplicate.
Make policy deployment idempotent: query first, then update the existing object when its settings must change.

Get-NetIPsecMainModeRule

Microsoft: Get-NetIPsecMainModeRule

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.