Article ID: 121155, created on Apr 17, 2014, last review on May 8, 2014

  • Applies to:
  • Virtuozzo containers for Windows


  1. The hardware node is a Windows 2003 server.
  2. There is no network connectivity with the hardware node: no ping, no RDP connetion and no traffic with the node's IP address can be captured on the network interface.
  3. All ping requests get "Destination host unreachable" replies.
  4. During the boot process, the following event gets into the System log:

    The IPSec driver has entered Block mode. IPSec will discard all inbound and outbound TCP/IP network traffic that is not permitted by boot-time IPSec Policy exemptions. User Action: To restore full unsecured TCP/IP connectivity, disable the IPSec services, and then restart the computer.
  5. Network connectivity is working fine for containers on the node.


IPSec driver is broken on the hardware node.


  1. Delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local if it exists.
  2. Run regsvr32 polstore.dll to recreate IPSec policies from scratch.

965b49118115a610e93635d21c5694a8 2897d76d56d2010f4e3a28f864d69223 d02f9caf3e11b191a38179103495106f

Email subscription for changes to this article
Save as PDF