Full Wi-Fi signal, but no route to the internet

Start by defining the actual boundary

A report of “Wi-Fi not working” can describe several different failures. One device may be affected while another device on the same SSID works. Local services may remain reachable while only the internet path is unavailable. A crew network may work while a guest VLAN fails in one area.

Record the client, SSID, access point or area, time, intended destination and whether the symptom is continuous or intermittent. This prevents a broad network change from being made in response to a narrow endpoint or service problem.

Test from the client outward

The most efficient order follows the path the affected traffic must take. Confirm that the client has an address, prefix, gateway and DNS servers appropriate for the intended network. Then test the local gateway. If the gateway is unreachable, the useful investigation remains onboard and local to the client, wireless association, VLAN or switching path.

If the gateway responds, test a known IP destination before testing a hostname. An IP test that succeeds while a hostname fails points toward DNS rather than general upstream loss. If both fail, continue through firewall policy, route selection, NAT and the active WAN path.

• Client lease and expected network parameters
• Reachability of the assigned gateway
• Reachability of a known IP destination
• DNS resolution using the configured resolver
• Firewall, route and current WAN state

Use comparison before configuration changes

A known-good client on the same SSID and in the same area is often more useful than a reset. Compare its address, VLAN, gateway, DNS and route behaviour with the affected client. If both clients fail, compare the access point uplink and switch-port state with a working area.

Where multiple WAN services are available, confirm which path policy intends to use and which path is actually active. A green WAN status does not by itself prove that the relevant VLAN is permitted to use it or that return traffic is following the expected route.

Check what changed before resetting equipment

Before changing a VLAN, restarting a gateway or forcing failover, note enough about the fault to avoid losing the clue. For an involved network problem, useful details include the client settings, access point, switch path, active route and relevant timestamps.

Check the connection on the affected device and in the place where people use it. A healthy status on the equipment alone does not show that the connection works for the crew.