0:00:01.550,0:00:03.260 when you're troubleshooting complex 0:00:03.260,0:00:05.330 network problems you may find that the 0:00:05.330,0:00:07.460 resolution is not as obvious as you 0:00:07.460,0:00:09.440 might hope in this video we're gonna 0:00:09.440,0:00:11.750 step through a methodology that should 0:00:11.750,0:00:13.610 help you troubleshoot any problem you 0:00:13.610,0:00:16.609 run into this is the flow chart of that 0:00:16.609,0:00:18.650 network troubleshooting methodology and 0:00:18.650,0:00:20.660 we're going to step through each section 0:00:20.660,0:00:23.120 of this flow and describe how it can 0:00:23.120,0:00:24.980 help you solve those really difficult 0:00:24.980,0:00:27.619 problems the first thing you want to do 0:00:27.619,0:00:29.930 is identify the problem this may not be 0:00:29.930,0:00:32.270 as straightforward as you might think we 0:00:32.270,0:00:33.890 first need to collect as much 0:00:33.890,0:00:36.170 information as possible about the issue 0:00:36.170,0:00:38.270 that's occurring in the best possible 0:00:38.270,0:00:39.920 scenario you'll be able to duplicate 0:00:39.920,0:00:42.260 this problem on demand this will help 0:00:42.260,0:00:43.760 later as we go through a number of 0:00:43.760,0:00:45.950 testing phases to make sure that we're 0:00:45.950,0:00:48.290 able to resolve this issue when a 0:00:48.290,0:00:50.149 problem happens on the network it 0:00:50.149,0:00:52.610 usually affects more than one device and 0:00:52.610,0:00:55.130 sometimes it affects those devices in 0:00:55.130,0:00:57.020 different ways you want to be sure to 0:00:57.020,0:00:59.149 document all of the symptoms that may be 0:00:59.149,0:01:01.219 occurring even if they are very 0:01:01.219,0:01:03.440 different between different devices you 0:01:03.440,0:01:05.180 may find that a single problem is 0:01:05.180,0:01:07.009 causing all of these different systems 0:01:07.009,0:01:09.799 across these different devices many 0:01:09.799,0:01:11.719 times these issues will be identified by 0:01:11.719,0:01:13.609 the end users so they may be able to 0:01:13.609,0:01:15.979 provide you with a lot more detail of 0:01:15.979,0:01:17.539 what's really happening you should 0:01:17.539,0:01:19.310 question your users to find out what 0:01:19.310,0:01:21.049 they're seeing and if any error messages 0:01:21.049,0:01:23.240 are appearing in this course we've 0:01:23.240,0:01:24.979 already discussed the importance of the 0:01:24.979,0:01:27.020 change control process and knowing 0:01:27.020,0:01:28.670 exactly what is changing in your 0:01:28.670,0:01:31.279 environment without some type of formal 0:01:31.279,0:01:33.259 change control process someone may be 0:01:33.259,0:01:35.450 able to make an unscheduled change that 0:01:35.450,0:01:37.310 would affect many different people so 0:01:37.310,0:01:39.289 when an error or network problem occurs 0:01:39.289,0:01:41.539 you may want to find out what was the 0:01:41.539,0:01:43.609 last thing that changed on this network 0:01:43.609,0:01:45.229 that could have affected all of these 0:01:45.229,0:01:47.659 users there's also going to be times 0:01:47.659,0:01:49.729 when you're examining a number of 0:01:49.729,0:01:52.039 different problems that may not actually 0:01:52.039,0:01:54.439 be related to each other it's always 0:01:54.439,0:01:56.149 best to separate all of these different 0:01:56.149,0:01:58.399 issues out so that you can approach and 0:01:58.399,0:02:01.179 try to resolve each issue individually 0:02:01.179,0:02:03.409 now that you've collected as much 0:02:03.409,0:02:04.939 information as possible 0:02:04.939,0:02:07.310 you can examine all of these details to 0:02:07.310,0:02:09.680 begin establishing a theory of what you 0:02:09.680,0:02:11.810 think might be going wrong since the 0:02:11.810,0:02:14.030 simpler explanation is often the most 0:02:14.030,0:02:15.110 likely reason 0:02:15.110,0:02:17.540 for the issue that may be a good place 0:02:17.540,0:02:19.580 to start but of course you'll want to 0:02:19.580,0:02:21.890 consider every possible thing that might 0:02:21.890,0:02:24.080 be causing this issue maybe start with 0:02:24.080,0:02:26.000 things that aren't completely obvious 0:02:26.000,0:02:28.400 you could start from the top of the OSI 0:02:28.400,0:02:30.350 model with the way the application is 0:02:30.350,0:02:32.390 working and work your way to the bottom 0:02:32.390,0:02:34.280 or you may want to start with the bottom 0:02:34.280,0:02:36.260 with the cabling and wiring in your 0:02:36.260,0:02:38.330 infrastructure and work your way up from 0:02:38.330,0:02:40.600 there you'll want to list out every 0:02:40.600,0:02:43.490 possible cause for this problem your 0:02:43.490,0:02:45.170 list might start with the easy theories 0:02:45.170,0:02:47.240 at the top but of course include all of 0:02:47.240,0:02:49.160 the more complex theories in this list 0:02:49.160,0:02:51.800 as well now that we have a list of 0:02:51.800,0:02:54.110 theories on how to resolve this issue we 0:02:54.110,0:02:56.209 can now test those theories we may want 0:02:56.209,0:02:58.489 to go into a lab and if we are able to 0:02:58.489,0:03:00.920 recreate this problem in the lab then we 0:03:00.920,0:03:03.800 can apply each theory until we find the 0:03:03.800,0:03:05.840 one that happens to resolve the issue if 0:03:05.840,0:03:08.150 you tried the first theory you may want 0:03:08.150,0:03:10.070 to reset everything and try the second 0:03:10.070,0:03:12.050 theory or the third and if you run out 0:03:12.050,0:03:13.790 of theories you may want to go back and 0:03:13.790,0:03:15.500 think of other things that might be 0:03:15.500,0:03:17.540 causing this problem this might be a 0:03:17.540,0:03:19.340 good time to bring in an expert who 0:03:19.340,0:03:20.840 knows about the application or the 0:03:20.840,0:03:22.700 infrastructure and they can give some 0:03:22.700,0:03:24.890 theories and possible resolutions to 0:03:24.890,0:03:27.590 test in the lab once you've tested a 0:03:27.590,0:03:29.299 theory and found that the theory is 0:03:29.299,0:03:31.489 going to resolve this issue you can then 0:03:31.489,0:03:33.380 begin putting together a plan of action 0:03:33.380,0:03:35.600 this is how you would implement this fix 0:03:35.600,0:03:38.060 into a production network you want to be 0:03:38.060,0:03:39.920 sure that you're able to do this with a 0:03:39.920,0:03:41.780 minimum amount of impact to the 0:03:41.780,0:03:43.880 production network and sometimes you 0:03:43.880,0:03:45.860 have to do this after-hours when nobody 0:03:45.860,0:03:48.260 else is working on the network you want 0:03:48.260,0:03:49.640 to be able to implement this with a 0:03:49.640,0:03:52.250 minimum amount of impact to production 0:03:52.250,0:03:54.380 traffic so often you'll have to do this 0:03:54.380,0:03:57.410 after hours my best practice is to 0:03:57.410,0:03:59.510 document the exact steps that will be 0:03:59.510,0:04:00.830 required to solve this particular 0:04:00.830,0:04:03.560 problem if it's replacing a cable then 0:04:03.560,0:04:04.970 the process will be relatively 0:04:04.970,0:04:06.680 straightforward but if you're upgrading 0:04:06.680,0:04:08.989 software in a switch a router or a 0:04:08.989,0:04:11.750 firewall there may be additional tasks 0:04:11.750,0:04:13.579 involved in performing this plan of 0:04:13.579,0:04:15.500 action you'll also want some 0:04:15.500,0:04:17.540 alternatives if your plan doesn't go as 0:04:17.540,0:04:19.700 designed for example you may run into 0:04:19.700,0:04:21.590 problems when upgrading the software in 0:04:21.590,0:04:23.599 a firewall so you may need an additional 0:04:23.599,0:04:26.150 firewall or a way to roll back to the 0:04:26.150,0:04:27.250 previous version 0:04:27.250,0:04:28.580 now that you 0:04:28.580,0:04:30.229 documented your plan of action you can 0:04:30.229,0:04:31.729 take that to your change control team 0:04:31.729,0:04:33.770 and they can give you a window when you 0:04:33.770,0:04:35.900 can implement that change the actual 0:04:35.900,0:04:38.240 fixing of the issue is probably going to 0:04:38.240,0:04:39.979 be during off-hours during non 0:04:39.979,0:04:41.990 production times and you may need to 0:04:41.990,0:04:43.729 bring in other people to assist 0:04:43.729,0:04:46.539 especially if your window is very small 0:04:46.539,0:04:48.860 once you have executed on your plan of 0:04:48.860,0:04:50.719 action your job isn't done yet 0:04:50.719,0:04:52.520 we need to make sure that all of these 0:04:52.520,0:04:55.460 changes actually resolve the problem so 0:04:55.460,0:04:56.750 now that the changes have been 0:04:56.750,0:04:59.000 implemented we now need to perform some 0:04:59.000,0:05:01.190 tests we may want to bring in the end 0:05:01.190,0:05:03.139 users who first experienced this problem 0:05:03.139,0:05:05.719 so that they can run through exactly the 0:05:05.719,0:05:07.789 same scenario to tell you if the problem 0:05:07.789,0:05:09.620 is resolved or if the problem still 0:05:09.620,0:05:12.379 exists this might also be a good time to 0:05:12.379,0:05:14.240 implement some preventive measures that 0:05:14.240,0:05:16.460 way we can either be informed that the 0:05:16.460,0:05:18.430 problem is occurring or we can provide 0:05:18.430,0:05:20.569 alternatives that we can implement if 0:05:20.569,0:05:23.719 that problem happens again after the 0:05:23.719,0:05:25.430 problem has been resolved this is a 0:05:25.430,0:05:27.439 perfect time to document the entire 0:05:27.439,0:05:29.750 process from the very beginning to the 0:05:29.750,0:05:31.639 very end you'll of course want to 0:05:31.639,0:05:33.379 provide as much information as possible 0:05:33.379,0:05:35.779 so if somebody runs into this issue 0:05:35.779,0:05:37.940 again they can simply search your 0:05:37.940,0:05:40.159 knowledgebase find that particular error 0:05:40.159,0:05:42.050 that popped up and know exactly the 0:05:42.050,0:05:44.529 process you use to solve this last time 0:05:44.529,0:05:47.539 many organizations have a help desk with 0:05:47.539,0:05:49.250 case notes that they can reference or 0:05:49.250,0:05:50.930 you might have a separate knowledgebase 0:05:50.930,0:05:53.000 or wiki that you create where you're 0:05:53.000,0:05:54.440 storing all of this important 0:05:54.440,0:05:57.349 information for the future a document 0:05:57.349,0:05:58.969 that was created a number of years ago 0:05:58.969,0:06:00.919 but still shows the importance of 0:06:00.919,0:06:02.900 keeping this documentation over time is 0:06:02.900,0:06:04.430 from Google research where they 0:06:04.430,0:06:06.830 documented the failure trends in a large 0:06:06.830,0:06:09.229 disk drive population and because they 0:06:09.229,0:06:11.449 were keeping extensive data over a long 0:06:11.449,0:06:13.789 period of time they were able to tell 0:06:13.789,0:06:16.250 when a drive was starting to fail based 0:06:16.250,0:06:17.990 on the types of errors that they were 0:06:17.990,0:06:20.360 receiving being able to store all of 0:06:20.360,0:06:22.039 this important information and being 0:06:22.039,0:06:23.990 able to go back in time to see what 0:06:23.990,0:06:26.270 happened becomes a very important part 0:06:26.270,0:06:28.629 of maintaining a network for the future 0:06:28.629,0:06:31.159 let's summarize this troubleshooting 0:06:31.159,0:06:33.050 methodology we start with gathering as 0:06:33.050,0:06:35.449 much information as possible asking 0:06:35.449,0:06:37.190 users about what they're seeing and 0:06:37.190,0:06:39.500 documenting any specific error messages 0:06:39.500,0:06:41.330 then we want to be able to create a 0:06:41.330,0:06:42.050 number of 0:06:42.050,0:06:43.789 series that might solve this particular 0:06:43.789,0:06:46.759 problem and once we have this list we 0:06:46.759,0:06:48.379 want to be able to put it in the lab and 0:06:48.379,0:06:50.389 try testing each one of these theories 0:06:50.389,0:06:52.340 until we find the one that actually 0:06:52.340,0:06:55.009 resolves the issue from there we can 0:06:55.009,0:06:57.169 create a plan of action and document any 0:06:57.169,0:06:59.599 possible problems that might occur we 0:06:59.599,0:07:01.280 can then get a time to implement the 0:07:01.280,0:07:03.530 issue and put it into our production 0:07:03.530,0:07:05.659 environment and then we can verify and 0:07:05.659,0:07:07.789 test and make sure that the entire 0:07:07.789,0:07:10.729 system is now working as expected and of 0:07:10.729,0:07:12.199 course finally we want to document 0:07:12.199,0:07:14.780 everything that we did from the very 0:07:14.780,0:07:16.729 beginning of our troubleshooting process 0:07:16.729,0:07:20.889 all the way through to the end 0:07:26.670,0:07:28.730 you