Network Troubleshooting: A Step-by-Step Guide to Fix Connectivity Issues

Learn everything about network troubleshooting including common problems, practical steps, real-world examples, and tools like ping, tracert, Wireshark, and more. Perfect for IT professionals and beginners.

Jul 02, 2025 - 12:24
Updated: 1 month ago
105.8k
Network Troubleshooting: A Step-by-Step Guide to Fix Connectivity Issues

Quick answer: Troubleshoot networks from the bottom up. Check the physical link and Wi-Fi, confirm the device has an IP address, ping the default gateway, ping an external IP address, test DNS by pinging a name, then check the application or firewall. The first step that fails shows which layer holds the fault.

Key takeaways

  • Work in order: link, IP address, gateway, internet by IP, DNS, application.
  • The first failing test tells you where the fault is. Do not skip ahead.
  • Change one thing at a time and note the result.
  • Know the commands: ipconfig or ip addr, ping, traceroute or tracert, nslookup or dig.

What is the method?

Networks are layered, so faults are too. Test from the bottom up and stop at the first failure.

StepQuestionWindowsLinux
1Is the link up?Check Wi-Fi or cable statusip link
2Do I have an IP address?ipconfig /allip addr
3Can I reach my gateway?ping <gateway>ping <gateway>
4Can I reach the internet by IP?ping 8.8.8.8ping 8.8.8.8
5Does DNS work?nslookup example.comdig example.com
6Where does the path break?tracert example.comtraceroute example.com
7Is the app or a firewall the problem?Test the portss -tulpn, nc -vz host port

Step 1: physical and wireless link

Check cables, switch lights and Wi-Fi connection. On Linux, ip link shows each interface as UP or DOWN. A Wi-Fi device showing "connected" with no internet often points to the next steps, not the radio.

Step 2: IP address

ipconfig /all # Windows
ip addr # Linux

You want a valid address, mask and default gateway. An address starting with 169.254 on Windows means the device could not get an address from DHCP. Fix DHCP or check the cable and switch port.

Step 3: gateway

ping 192.168.1.1

Example output (illustrative):

64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=1.8 ms

Replies mean the local network works. "Request timed out" or "Destination host unreachable" points to the local link, the wrong gateway or a switch problem.

Step 4: internet by IP

ping 8.8.8.8

If the gateway works but this fails, the fault is beyond your LAN: router, ISP or a blocking rule. If it works, your internet connection is fine.

Step 5: DNS

ping example.com
nslookup example.com

If pinging the IP works but the name does not resolve, DNS is the problem. The guide on fixing DNS issues covers cache flushing, resolver changes and DoH.

Step 6: path with traceroute

traceroute example.com # Linux
tracert example.com # Windows

It lists each router on the path with response times. A sudden run of timeouts or a jump in delay shows roughly where the problem lies. Some routers do not reply to traceroute, so asterisks alone do not prove a fault.

Step 7: application and firewall

If the network is fine but one service fails, check whether the service is listening and whether a firewall blocks it.

ss -tulpn # what is listening on this Linux host
nc -vz 192.168.1.20 443 # can I reach that port?

On Windows, Test-NetConnection host -Port 443 in PowerShell does the same check. See essential Linux networking commands for more.

Worked scenario

A laptop shows Wi-Fi connected but no websites load.

  1. Interface is up.
  2. ipconfig /all shows an address in the right range and a gateway.
  3. Ping to the gateway works.
  4. ping 8.8.8.8 works.
  5. ping example.com fails to resolve.

Conclusion: connectivity is fine, DNS is failing. Switch the resolver or restart the router's DNS service, and the problem is solved at layer 5 of the checklist, not the radio.

Habits that save time

  • Ask what changed recently.
  • Compare with a working device on the same network.
  • Change one thing at a time and write it down.
  • Restart as a last resort, after you have collected evidence.

Next steps

For deeper practice, see CCNA troubleshooting scenarios and the CCNA 200-301 course or the Computer Network course. Packet capture with the Wireshark documentation is the next tool to learn.

Related reading

Frequently Asked Questions

Check the physical link, confirm an IP address, ping the gateway, ping an external IP, test DNS, then check the path and the application or firewall. Stop at the first step that fails.

Ping sends test packets to a host and shows whether replies come back and how long they take. Replies from the gateway show the local network works; failures help locate the broken layer.

If you can ping an IP address such as 8.8.8.8 but pinging a domain name fails to resolve, DNS is the likely cause. Try nslookup or dig and another resolver.

Traceroute lists the routers between you and a destination with response times, so you can see roughly where delay or loss occurs. Some routers do not respond, so asterisks do not always mean a fault.

On Windows, a 169.254 address means the device failed to get an address from DHCP and assigned itself one. Check the cable, Wi-Fi connection, switch port and the DHCP server.

Use nc -vz host port on Linux, or Test-NetConnection host -Port number in Windows PowerShell. If it fails, check the service, the host firewall and any network firewall between you and the host.

What's Your Reaction?

Like Like 0
Dislike Dislike 0
Love Love 0
Funny Funny 0
Wow Wow 0
Sad Sad 0
Angry Angry 0
Vaishnavi

Vaishnavi is a skilled tech professional at the Ethical Hacking Training Institute in Pune, responsible for managing and optimizing the technical infrastructure that supports advanced cybersecurity education. With deep expertise in network security, backend operations, and system performance, she ensures that practical labs, online modules, and assessments run smoothly and securely. Her behind-the-scenes contributions play a vital role in delivering a seamless and secure learning experience for aspiring ethical hackers.