Networking | MSP Toolkit

What This Category Covers

Networking tickets should separate physical/link state, IP assignment, DNS, routing, firewall policy, VLAN tagging, and application reachability. Test by IP and hostname before changing infrastructure.

First Layer to Isolate

IP layer first, then DNS, route, firewall/VLAN, and application port.

Useful Tools, Logs, and Portals

ipconfig /all
nslookup
ping/tracert
route print
Firewall logs
Switch/AP controller
DHCP scopes

Before You Escalate

Source/destination identified
IP and hostname tests compared
VLAN/firewall path checked
Recent network changes reviewed

Articles in This Path

Pick the closest symptom and work from there.

802.1X wired authentication fails after switch firmware update Always On VPN device tunnel connects but user tunnel fails Always-on VPN profile deploys but tunnel does not start before logon Application publish rule works by IP not FQDN Client receives APIPA address even though DHCP scope has free leases Conditional forwarder works from domain controllers but not DNS management test tool Conditional forwarder works on one server only Conference room SSID works until more than twenty devices connect DHCP failover pair healthy but one scope stops issuing leases DHCP lease updates fail after credential account lockout DHCP option for VoIP phones applies at headquarters but not branch scope DHCP reservations present but wrong scope hands out addresses DHCP scope has leases available but clients self-assign DNS & DHCP alerts indicate success while end-user experience never changes DNS & DHCP configuration survives testing but resets after restart or sync DNS & DHCP credential or certificate rotation breaks an existing integration DNS & DHCP feature works in web app but fails in desktop client DNS & DHCP healthy dashboard status masks a failing production workflow DNS & DHCP logging shows delivery yet the target workflow never completes DNS & DHCP new deployment works for pilot group but not for production rollout DNS & DHCP policy change applies in admin console but target users never receive it DNS & DHCP quarantine or protection action triggers but recovery workflow fails DNS & DHCP workflow succeeds for one account but fails for shared or delegated access DNS scavenging removes active record for appliance with static IP reservation DNSSEC validation breaks only one third-party SaaS domain lookup Edge firewall firmware upgrade resets one custom application rule Firewall geo-block policy stops vendor access from approved country range Firewall HA pair stays synchronized but secondary fails takeover test Firewall HA pair syncs config but not session state Firewall rules present but traffic still blocked Firewalls & Routing alerts indicate success while end-user experience never changes Firewalls & Routing configuration survives testing but resets after restart or sync Firewalls & Routing connector health looks normal but data stops syncing Firewalls & Routing credential or certificate rotation breaks an existing integration Firewalls & Routing feature works in web app but fails in desktop client Firewalls & Routing healthy dashboard status masks a failing production workflow Firewalls & Routing logging shows delivery yet the target workflow never completes Firewalls & Routing new deployment works for pilot group but not for production rollout Firewalls & Routing policy change applies in admin console but target users never receive it Firewalls & Routing quarantine or protection action triggers but recovery workflow fails Firewalls & Routing workflow succeeds for one account but fails for shared or delegated access Geo block enabled but approved vendor traffic also blocked Guest VLAN clients receive lease but no DNS servers Guest Wi-Fi portal loads slowly only on Apple devices Home user VPN drops every hour on the dot Inter-VLAN routing works for ping but not for HTTPS sessions Internal DNS record resolves correctly on servers but not on Wi-Fi clients Internal DNS zone replicates but one domain controller serves stale records Internal website resolves to old server for one subnet only L2TP or SSTP VPN broken after ISP modem swap Loop detected warnings after moving conference room switch Managed switch port flaps when docking station connects multiple monitors New ISP circuit installed but outbound policy still uses old WAN New switch stack forms but VLAN tagging is inconsistent Office guest Wi-Fi captive portal loops forever Outbound SMTP relay blocked because egress policy matches wrong object group PoE switch powers phones but access points reboot under peak load Port forward works externally but internal hairpin access fails Printers renew DHCP but keep old DNS hostname PTR records missing and backup software fails verification

SSL VPN portal loads but launches no client

Field Summary

SSL VPN portal loads but launches no client is a VPN & Remote Access ticket where the visible symptom can be misleading. Network tickets should be split into link, IP assignment, DNS, route, VLAN/firewall policy, and application reachability. Green status on one layer does not prove the path works. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Read more about SSL VPN portal loads but launches no client
Log in to post comments

Always On VPN device tunnel connects but user tunnel fails

Field Summary

Always On VPN device tunnel connects but user tunnel fails is a VPN & Remote Access ticket where the visible symptom can be misleading. Network tickets should be split into link, IP assignment, DNS, route, VLAN/firewall policy, and application reachability. Green status on one layer does not prove the path works. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Read more about Always On VPN device tunnel connects but user tunnel fails
Log in to post comments

Router rebooted and static routes disappeared

Field Summary

Router rebooted and static routes disappeared is a Firewalls & Routing ticket where the visible symptom can be misleading. Network tickets should be split into link, IP assignment, DNS, route, VLAN/firewall policy, and application reachability. Green status on one layer does not prove the path works. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Read more about Router rebooted and static routes disappeared
Log in to post comments

SaaS outage suspected but root cause is local DNS filter

Field Summary

SaaS outage suspected but root cause is local DNS filter is a DNS & DHCP ticket where the visible symptom can be misleading. Network tickets should be split into link, IP assignment, DNS, route, VLAN/firewall policy, and application reachability. Green status on one layer does not prove the path works. Test by IP and by name so DNS is not confused with raw connectivity.

Read more about SaaS outage suspected but root cause is local DNS filter
Log in to post comments

DHCP scope has leases available but clients self-assign

Field Summary

DHCP scope has leases available but clients self-assign is a DNS & DHCP ticket where the visible symptom can be misleading. Network tickets should be split into link, IP assignment, DNS, route, VLAN/firewall policy, and application reachability. Green status on one layer does not prove the path works. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Read more about DHCP scope has leases available but clients self-assign
Log in to post comments

L2TP or SSTP VPN broken after ISP modem swap

Field Summary

L2TP or SSTP VPN broken after ISP modem swap is a VPN & Remote Access ticket where the visible symptom can be misleading. Network tickets should be split into link, IP assignment, DNS, route, VLAN/firewall policy, and application reachability. Green status on one layer does not prove the path works. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Read more about L2TP or SSTP VPN broken after ISP modem swap
Log in to post comments

Firewall rules present but traffic still blocked

Field Summary

Firewall rules present but traffic still blocked is a Firewalls & Routing ticket where the visible symptom can be misleading. Network tickets should be split into link, IP assignment, DNS, route, VLAN/firewall policy, and application reachability. Green status on one layer does not prove the path works. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Read more about Firewall rules present but traffic still blocked
Log in to post comments

Wi-Fi connected but no internet on only one laptop

Field Summary

Wi-Fi connected but no internet on only one laptop is a Wi-Fi & Switching ticket where the visible symptom can be misleading. Network tickets should be split into link, IP assignment, DNS, route, VLAN/firewall policy, and application reachability. Green status on one layer does not prove the path works. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Read more about Wi-Fi connected but no internet on only one laptop
Log in to post comments

RDP session black screen after login

Field Summary

RDP session black screen after login is a VPN & Remote Access ticket where the visible symptom can be misleading. Network tickets should be split into link, IP assignment, DNS, route, VLAN/firewall policy, and application reachability. Green status on one layer does not prove the path works. The fastest path is to identify which layer changed and prove it with logs or a repeatable test.

Read more about RDP session black screen after login
Log in to post comments

VPN connects but cannot reach internal file shares

Field Summary

A VPN client showing connected only proves authentication and tunnel setup. File shares still need routes, DNS suffixes, firewall rules, SMB reachability, and user/share permissions to line up across the VPN path.

Read more about VPN connects but cannot reach internal file shares
Log in to post comments

Subscribe to Networking