Local Connectivity: Interfaces, IP Configuration & the Default Gateway

Network Troubleshooting

Chapter 3 · Local Connectivity: Interfaces, IP Configuration & the Default Gateway

Chapter 2 named local connectivity as the practical starting rung of the ladder — the one closest to physical, but the first one you can actually check remotely. This chapter is entirely about that one rung: reading a machine's own IP configuration, recognizing the signature of a machine that never got a proper address at all, and understanding exactly what the default gateway is and why so many "nothing works" complaints trace back to it.

What "Local Connectivity" Actually Confirms

This rung isn't about the cable or the Wi-Fi signal itself — as Chapter 2 noted, that's rarely something you can check remotely. It's about everything the operating system's own network stack can report: whether the interface is up, whether it has a valid IP address and subnet mask, and whether it has a default gateway configured at all. Three commands cover almost every case you'll see:

PlatformCommandWhat it shows
Windowsipconfig /allEvery adapter, its IP, subnet mask, default gateway, and DNS servers
Linuxip addr and ip routeInterface addresses (ip addr) and the default gateway (ip route) separately
macOSifconfig and netstat -nrSame information, older BSD-style tooling

Reading a Healthy Configuration

C:\> ipconfig /all Ethernet adapter Ethernet: Connection-specific DNS Suffix . : corp.example.com IPv4 Address. . . . . . . . . . . : 192.168.1.42 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1

Three fields matter most here: a real IP address in the range the local network actually uses, a subnet mask consistent with that network, and — critically — a default gateway that's actually populated. All three present and sensible-looking is a good sign, but "sensible-looking" isn't the same as "confirmed working" — the next section covers the one extra step that turns this from a good sign into an actual confirmation.

The Telltale Sign of a Broken Configuration: Link-Local Addresses

When a machine can't reach a DHCP server to be assigned a real address, most operating systems fall back to self-assigning one from the 169.254.0.0/16 range — commonly called a link-local or APIPA (Automatic Private IP Addressing) address. It's designed to let machines on the same broken segment still talk to each other, but it means the machine has no real address, no gateway, and no way to reach anything outside its own local segment:

Ethernet adapter Ethernet: IPv4 Address. . . . . . . . . . . : 169.254.23.107 Subnet Mask . . . . . . . . . . . : 255.255.0.0 Default Gateway . . . . . . . . . : (none)

Seeing a 169.254.x.x address is one of the most immediately conclusive pieces of evidence you'll find at this rung: it means DHCP failed, full stop — the cause could be a disconnected cable, a misconfigured switch port, a DHCP server outage, or a wireless authentication failure, but the fix is squarely at this layer, and there's no point testing DNS, ping, or anything further up the ladder until it's resolved.

The Default Gateway: The Machine's Only Way Out

The default gateway is the router a machine sends every packet through when the destination isn't on its own local subnet — which, for almost any real complaint ("I can't reach the app," "the internet's down"), is nearly everything. If the gateway itself can't be reached, nothing beyond the local network can be either, regardless of how healthy DNS or the destination server are. That makes the gateway worth testing directly, separately from testing the actual destination:

$ ping 192.168.1.1 64 bytes from 192.168.1.1: icmp_seq=0 ttl=64 time=0.412 ms 64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.398 ms

A gateway that responds to a ping like this is a genuinely useful data point: it separates "something is wrong with my own local segment" from "something is wrong further out." If the gateway responds fine but the actual destination in Chapter 5's tests doesn't, the problem is somewhere beyond this machine's own local network — a routing issue further upstream, the destination itself, or DNS. If the gateway doesn't respond at all, the problem is much more likely to be local: a cable, a switch port, a VLAN misconfiguration, or the gateway device itself being down.

A gateway that doesn't answer a ping isn't automatically down
Plenty of routers are deliberately configured to ignore ICMP ping requests as a security measure, even while routing traffic perfectly normally. A silent gateway is a real data point worth noting, but on its own it's not fully conclusive — the same "refused vs. timed out" ambiguity from Chapter 2 applies here too. If the gateway stays silent, the next real test is whether traffic actually routed through it succeeds or fails (Chapter 5), not just whether it answers ping.
What you seeWhat it means
Real IP, gateway set, gateway pingsLocal connectivity confirmed — move to Chapter 4 (DNS)
169.254.x.x address, no gatewayDHCP failure — a genuinely local problem, stop here and investigate the cause
Real IP, gateway set, gateway silentInconclusive on its own — check whether traffic actually routes through it before assuming the gateway is down
No IP address, interface reports "down"Physical/link-layer problem — often needs someone with physical access to the machine
You often can't run these commands yourself
Unlike checking a server you have shell access to, a user's own laptop usually means asking them to run ipconfig /all (or ip addr/ifconfig) themselves and read the output back to you, or send a screenshot. Give them the exact command rather than a vague "check your network settings" — it's the difference between getting the three fields that actually matter and getting a description of whatever the user's operating system happened to show them.

Working Example: Continuing the Ticket

Back to the running ticket from Chapters 1 and 2. Before even reaching for ping against the app itself, the user reads back their own ipconfig /all output over the phone: a real-looking 192.168.1.42 address, subnet mask 255.255.255.0, gateway 192.168.1.1 — no 169.254.x.x address in sight. A quick ping to that gateway from their machine gets replies. Local connectivity confirmed, in well under a minute, with no need to touch the application at all — exactly the kind of fast, evidence-based elimination this course is built around. The ladder moves up to Chapter 4: does the app's name actually resolve to the right address?

Hands-On Exercises

Exercise 1

A user reads you their IP configuration: address 169.254.87.12, subnet mask 255.255.0.0, no default gateway listed. Explain what this specific pattern means, and why it would be a waste of time to test DNS or ping the app at this point.

📄 View solution
Exercise 2

Explain why this chapter treats "the default gateway doesn't respond to a ping" as inconclusive rather than as proof the gateway is down, and what the next step should be when that happens.

📄 View solution
Exercise 3

Explain why this chapter recommends testing the default gateway separately from testing the actual destination (e.g. the app server), rather than only testing the destination directly.

📄 View solution

Chapter 3 Quick Reference

  • Check with ipconfig /all (Windows) or ip addr + ip route (Linux) — interface state, IP address, subnet mask, default gateway
  • A 169.254.x.x (link-local/APIPA) address means DHCP failed — a genuinely local problem, no point testing further up the ladder yet
  • The default gateway is the only way out of the local subnet — if it's unreachable, nothing beyond the local network is reachable either
  • Ping the gateway separately from the actual destination — it distinguishes "problem is local" from "problem is further out"
  • A silent gateway isn't automatically down — many routers deliberately ignore ICMP; treat it as inconclusive, not proof
  • You usually can't run these commands yourself on a user's machine — give them the exact command to run and read back
  • Next chapter: DNS Resolution Troubleshooting: nslookup, dig & Common Failure Patterns