What does Windows error code 13808 (ERROR_IPSEC_IKE_SA_REAPED) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: An incomplete IKE security association was removed before negotiation completed.

Previous	Next
ERROR_IPSEC_IKE_SA_DELETED	ERROR_IPSEC_IKE_MM_ACQUIRE_DROP

ERROR_IPSEC_IKE_SA_REAPED

ERROR_IPSEC_IKE_SA_REAPED means Windows removed an incomplete IKE SA during cleanup. It is normally a symptom of an earlier timeout, peer silence, policy change, or failure to complete authentication.

Treat the cleanup event as a pointer to an earlier failure. Preserve the negotiation history immediately before the reap so the timeout, peer disappearance, policy change, or authentication problem that prevented completion remains visible.

What to check

Find the earlier negotiation error for the same peer; this code usually records cleanup rather than the original fault.
Check whether the peer was reachable throughout the negotiation window.
Review active Main Mode SAs and repeated negotiation attempts to detect a loop.

Get-NetIPsecMainModeSA
Get-NetIPsecQuickModeSA

Microsoft: Get-NetIPsecMainModeSA

Microsoft: Use Netsh to manage network traces

Microsoft: IPsec IKE system error codes

Looking for a different code? Search another status or error code.