| Previous | Next |
| ERROR_IPSEC_IKE_MM_DELAY_DROP | ERROR_IPSEC_IKE_ERROR |
ERROR_IPSEC_IKE_QM_DELAY_DROP
ERROR_IPSEC_IKE_QM_DELAY_DROP means the Quick Mode phase took too long after peer authentication. The likely area is traffic selectors, IPsec proposals, policy evaluation, or a peer that does not complete the child-SA exchange.
Use the last completed Quick Mode message to locate the delay. If Main Mode is stable, focus on selectors, transforms, lifetimes, and peer response for the child SA rather than restarting certificate troubleshooting.
What to check
- Confirm that Main Mode has already established an SA, then inspect Quick Mode events.
- Compare local and remote traffic selectors, transform proposals and lifetimes.
- Use a trace to determine whether a specific Quick Mode message is retransmitted or ignored.
Microsoft: Audit IPsec Quick Mode
Looking for a different code? Search another status or error code.