Collect symptoms: affected VLANs, DNS vs. IP tests, recent changes, and whether issues follow users or devices.
Simple checks: link lights, switch port errors, DHCP scope exhaustion, and DNS forwarders.
Escalate when outages are intermittent, security incidents are suspected, or performance needs formal baselines.