Link to home
Start Free TrialLog in
Avatar of AdvNetSol
AdvNetSolFlag for United States of America

asked on

What happens to local braodcasts when default gateway fails

Senario:  Windows XP machines on a LAN (10.25.20.x/16) with gateway 10.25.20.1.  The gateway recently failed causing severe delays in local network communication.  I am trying to determine how WinXP sends traffic when the default gateway is offline.  I was under the impression that a system will automatically broadcast LAN traffic without sending it to the default gateway.  Will WinXP always send data to the default gateway even if it is intended for a device on the same subnet (10.25.20.10 sends data to 10.25.20.11 for example).  If this is the case, is there a way to have XP know to broadcast or send the data to the device directly without involving the default gateway?
SOLUTION
Avatar of Patmac951
Patmac951
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Your assumitions are correct.  If the IPs are in the same subnetwork (in this case anything on 10.25.x.x) then it should not go to the default gateway for routing as long as there is a direct path (which there should be unless your network design is screwy).

on the pc that is having issues type

route print

and see if it is routing anything via the gateway
How many machines do you actually have on that /16, it's not normal to have a mask of that kind of size. If it's a lot you might find that you were rather a lot of ARP requests broadcasting over the network when the local caches timed out and that might have been enough to swamp a switch or link.

It's also possible that your default gateway device dying triggered some spanning tree issues which again could have impacted the local network badly. It depends on what that device was and on your design.
Avatar of AdvNetSol

ASKER

thank you for the responses, they gave me some ideas on what could be causing the problem.  I do have active directory setup and it communicates across a VPN.  That means any DNS lookups have to route via the VPN.  I will play with these setting and update the post when i have confirmed that is the problem.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Nayyar HH (CCIE RS)
Just to add to the above comments

Local communication should not be affected if the Gateway is lost however WINS and DNS resolution could be impacted causing delays in local communication

Have a read of this link and related it to you setup; i.e. placement of WINS/DNS servers? resources affected did they need WINS resolution? etc etc

http://www.tech-faq.com/netbios-node-types.html

..... how are your clients resolving Names? are they p,h,n or m nodes ? etc etc


Firstly, broadcast messages are not carried from one network to another, they are meant for the same collision domain. So for your case, the broadcast message will be sent to all the machines in the domain as well as the default gateway. Whether default gateway is down or not is not a matter of concern for the sender.
Now if the packet is meant for a specific IP Address, then things are a bit different.
Supposing the sender and the receiver are in the same collision domain, the packet goes directly from the sender to the receiver without having to go through the default gateway. This communication is looked after by the intermediate switch that keeps a MAC table, wherein the switch is aware of the two PC's being connected to it. If there is no presence of the Receiver in the MAC Table, it looks for the update of the MAC Table and if it still does not find the Receiver, it sends the packet to the default gateway.
The problem if the default gateway is down is that you won't have access to the internet. So if you say you receive DNS via VPN, it makes internet connection essential for DNS Queries.

Hope it helps.
I still have not been able to test any of the offered solutions.  I am writing to keep the case open until i can get something scheduled.  the difficulty is that is problem is with a 24/7 environment that never has a window for downtime.