Event ID 4654

An IPsec quick mode negotiation failed

An IPsec quick mode negotiation failed.

Local Endpoint:
    Network Address:        %1
    Network Address mask:   %2
    Port:                   %3
    Tunnel Endpoint:        %4

Remote Endpoint:
    Network Address:        %5
    Address Mask:           %6
    Port:                   %7
    Tunnel Endpoint:        %8
    Private Address:        %10

Additional Information:
    Protocol:               %9
    Keying Module Name:     %11
    Virtual Interface Tunnel ID:    %20
    Traffic Selector ID:            %21
    Mode:                   %14
    Role:                   %16
    Quick Mode Filter ID:   %18
    Main Mode SA ID:        %19

Failure Information:
    State:                  %15
    Message ID:             %17
    Failure Point:          %12
    Failure Reason:         %13


Microsoft Documentation

Event ID - 4654



NameFieldInsertion StringOS
Local Endpoint Network AddressLocalAddress%1Any
Local Endpoint Network Address maskLocalAddressMask%2Any
Local Endpoint PortLocalPort%3Any
Local Endpoint Tunnel EndpointLocalTunnelEndpoint%4Any
Remote Endpoint Network AddressRemoteAddress%5Any
Remote Endpoint Address MaskRemoteAddressMask%6Any
Remote Endpoint PortRemotePort%7Any
Remote Endpoint Tunnel EndpointRemoteTunnelEndpoint%8Any
ProtocolProtocol%9Any
Remote Endpoint Private AddressRemotePrivateAddress%10Any
Keying Module NameKeyModName%11Any
Failure PointFailurePoint%12Any
Failure ReasonFailureReason%13Any
ModeMode%14Any
StateState%15Any
RoleRole%16Any
Message IDMessageID%17Any
Quick Mode Filter IDQMFilterID%18Any
Main Mode SA IDMMSAID%19Any
Virtual Interface Tunnel IDTunnelId%20Any
Traffic Selector IDTrafficSelectorId%21Any


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"IPsec Quick Mode"



LEFT/RIGHT arrow keys for navigation

Back to List