Bad network adapter takes down entire network

networkingwindows-server-2003

I came in to my office this morning and the entire network was 'down'; meaning that no computer could establish connectivity to another computer on our network, and no one could get out to the internet.

The network consists of a few unmanaged netgear switches and a sonicwall firewall. I finally tracked the problem down to one specific machine: our Windows 2003 server running as a primary domain controller. When it is plugged into the network no one can ping anyone else, but when it is unplugged, the entire network functions properly. I tried disabling the network adapter in order to use the machine's second network adapter. It wouldn't disable though. I restarted the server and tried the original bad adapter with the same results. I was finally able to disable the first network adapter and enable the second one with the same IP config. Voila, everything is up and running just fine.

My question: has anyone ever run into something like this and what could cause it? What sort of things should I Look for? Unfortunately I can't really troubleshoot with the first adapter more during the work day, so I have time to compile troubleshooting tips and try after hours.

Best Answer

This is the problem with basic switches, if it had been something like a cisco catalyst or an HP procurve it may have detected erratic activity on the port and shut it down, this would of course have meant you'd have no DNS if you only have one DC, and no way for users to log in, but the network would at least be effectively "up". My advice is to invest in a couple of 24 port procurve switches and give them a basic configuration, then team the NICs from your DCs and the like so that, should it happen again, the switch will shut down the faulty port.

With regards to troubleshooting the existing NIC if it's faulty hardware who knows what it's spewing out in to your network, maybe if you download something like wireshark and have it running on a client PC when you plug the other NIC back in you can see what traffic it's creating or where your packets are going. Also to test if it's a hardware or software issue you could try a linux live cd such as Ubuntu 10.10. If you load this in to RAM and test the NIC (live cds do not touch the HD so are safe to run for hardware diagnostics) you'll be able to see if it's software (your installation of windows) or hardware.

Related Topic