What does Windows error code 13850 (ERROR_IPSEC_IKE_NO_MM_POLICY) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: No compatible Main Mode IKE policy was available.

Previous	Next
ERROR_IPSEC_IKE_POLICY_CHANGE	ERROR_IPSEC_IKE_NOTCBPRIV

ERROR_IPSEC_IKE_NO_MM_POLICY

ERROR_IPSEC_IKE_NO_MM_POLICY (0x0000361A) Windows could not find a Main Mode policy that matches the peer and authentication request. The failure is normally caused by unmatched connection-security rules, incompatible IKE proposals, or policy scope that does not include this endpoint.

What to check

List the active Main Mode rules and compare their authentication and crypto proposals with the peer configuration.
Confirm that the peer address, interface, profile, and identity fall within the rule scope.
Check whether Group Policy or local policy is overriding the intended connection-security rule.

Get-NetIPsecMainModeRule

Microsoft: Get-NetIPsecMainModeRule

Microsoft: Get-NetIPsecMainModeSA

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.