Destination Host Unreachable error
I came in to a maddening issue this morning.
The server in question wasn’t available over the network. Troubleshooting:
- The server could ping the loopback and static IP it was assigned.
- The server could not ping the gateway or any other computers on the network, returning the error “Destination Host Unreachable”.
- The network connection said “Connected” and the network cable was switched just in case.
- The switch and router were both power-cycled.
Looking at the System event log, I saw this:
Event 4292 (IPSec): The IPSec driver has entered Block mode. IPSec will discard all inbound and outbound TCP/IP network traffic that is not permitted by boot-time IPSec Policy exemptions.
User Action: To restore full unsecured TCP/IP connectivity, disable the IPSec services, and then restart the computer. For detailed troubleshooting information, review the events in the Security event log.
The security log wasn’t helpful at all.
I found this MSKB that fixed the issue of IPSec being corrupted. Repairing IPSec and restarting restored network connectivity. I’m not sure that this had anything to do with the original problem, but it showed up after installing Blackberry Enterprise Server 4.1 and rebooting for that installation.

Posted by Wes in
Matt Burningham says:
You are a Godsend. We have been having this problem on a backup domain controller for a few months now. 5 minute fix. Woo hoo!
Jouhn Borja says:
I wish I found this post 2 hours ago!! I had the same problem, but with my primary domain controller. I had to shut all my servers down due to a planned power outage. I can’t thank you enough.