Goal
Find which network layer is failing before you start changing settings.
Safe sequence
- Test name resolution.
- Test basic reachability to the target.
- Check the route and interface state if reachability fails.
- Check whether the service is listening on the expected port.
- Only then look at firewall or policy changes.
What each check tells you
- If the name does not resolve, stay in DNS first.
- If the name resolves but the host is unreachable, look at route, interface, VPN, or gateway state.
- If the host answers but the service still fails, focus on the listening port, firewall policy, or application state.
Move on when
- You can name the failing layer.
- You can explain whether the issue is DNS, path, or service state.
- You know the right next action without broad network guessing.