IPAM glossary

What is a default gateway?

A default gateway is a routing configuration that tells a host where to send packets bound for addresses outside its local subnet. It is usually the IP address of a router interface on that subnet, and the host uses it whenever no more specific route matches the destination.

Let's simplify your DDI
Abstract isometric UI showing network ranges, usage bars, region names (EMEA/APAC), and a purple "Deploy" button
Key takeawaysKey takeaways are generated with AI assistance. Because automated summaries can occasionally contain errors or miss important context, always refer to the full blog post for complete information.

A default gateway is a routing configuration that directs host traffic destined for addresses outside the local subnet to a router interface, typically learned through DHCP or static configuration. In large enterprise environments with thousands of subnets, misconfigured gateways—such as typos in DHCP scopes, overlapping addresses, or incorrect subnet masks—cause hosts to lose off-subnet connectivity while maintaining local communication, often misreported as application outages. Implementing redundancy protocols like VRRP and maintaining accurate IPAM records with security controls such as DHCP snooping and dynamic ARP inspection help prevent gateway failures and detect spoofing attacks that could redirect traffic to malicious devices.

  • The default gateway operates at OSI Layer 3 and must reside on the host’s own subnet to be reachable via ARP or Neighbor Discovery for address resolution before packet forwarding.
  • Common gateway misconfigurations include DHCP scope typos, gateway addresses that fall outside the subnet mask boundaries, and static host reservations that conflict with router interface addresses.
  • First-hop redundancy protocols such as VRRP allow multiple routers to share a single virtual gateway address, preventing host isolation when a primary router interface fails without waiting for DHCP lease renewal.

Default gateway at a glance

AttributeValue
Full nameDefault gateway
CategoryRouting configuration
OSI layerLayer 3 (network layer)
Primary useForwarding traffic from a local subnet to other networks
Related termsSubnet, Router, DHCP, Static route, Subnet mask, ARP, IPAM

How default gateway works

A host compares each destination IP address with its own address and subnet mask to decide whether the destination is local. If it is not local, the host hands the packet to the default gateway.

  1. Check the destination: The host applies its subnet mask to the destination address and compares the result with its own network prefix.
  2. Select the gateway route: If the destination is off-subnet and no more specific route exists, the host uses its default route, which points to the default gateway address.
  3. Resolve the gateway link-layer address: On Ethernet, the host uses ARP for IPv4 or Neighbor Discovery for IPv6 to learn the gateway's MAC address, unless it is already cached.
  4. Send the frame: The host sends the packet in a frame addressed to the gateway's MAC address, while the destination IP address stays unchanged.
  5. Forward onward: The gateway router looks up the destination in its own routing table and forwards the packet toward the next hop.

Hosts typically receive the gateway address from DHCP, though it can be set statically. In IPv6, hosts can learn a default router from router advertisements. The gateway must be on the host's own subnet to be reachable.

Why default gateway matters in enterprise networks

Every host that communicates beyond its subnet depends on a correct default gateway. In a large enterprise this means thousands of subnets, each with a gateway address that must be recorded, assigned and kept consistent between router configuration, DHCP scopes and static host settings.

When the gateway is wrong, hosts can still reach neighbors on the same subnet but lose access to everything else. Common causes include a typo in a DHCP scope option, a gateway address that overlaps with a host address, or a gateway that sits outside the subnet defined by the mask. These faults are often reported as an application outage, which delays diagnosis. Redundancy protocols such as VRRP, defined in RFC 5798, let two routers share one virtual gateway address so a router failure does not strand hosts.

The gateway is also a security control point, because all off-subnet traffic passes through it. A rogue DHCP server or ARP spoofing can point hosts at an attacker's device and enable interception. Features such as DHCP snooping and dynamic ARP inspection, and accurate IPAM records of intended gateway addresses, help detect and prevent this.

Default gateway vs Subnet mask

A default gateway is the address of the router a host uses for off-subnet traffic, while a subnet mask defines which addresses count as local on the host's own subnet. What is Subnet mask?

AttributeDefault gatewaySubnet mask
PurposeIdentifies the next hop for remote destinationsDefines the boundary between network and host bits
FormAn IP address of a router interfaceA mask or prefix length, such as 255.255.255.0 or /24
Role in forwardingUsed after the host decides a destination is remoteUsed to decide whether a destination is local or remote
Effect of a wrong valueLocal traffic works but remote traffic failsHosts may misjudge which destinations are local and send traffic to the wrong place

Default gateway vs Virtual IP Address (VIP)

A default gateway is a role that a router address plays for hosts, while a virtual IP address is an address shared by redundant devices and is often used to provide a highly available gateway. What is VIP?

Common default gateway issues

A typo in the router option of a scope gives every client on that subnet an unreachable gateway. Clients reach local neighbors but nothing beyond, and the fault persists until leases are renewed with the corrected option.

If the gateway address does not fall inside the host's subnet under its mask, the host cannot resolve it directly and off-subnet traffic fails. This often follows a mask change on the host or a copied configuration from a different subnet.

When a static host or reservation takes the address configured on the router interface, an address conflict follows. Gateway ARP entries flip between two MAC addresses and users see intermittent loss of remote connectivity.

Hosts with several network adapters that each define a default gateway may choose an unexpected route. Traffic can leave through the wrong interface, which causes asymmetric paths or blocked flows at firewalls.

If a single router interface is the gateway and it fails, every host on the subnet loses off-subnet access even though the network has another path. A first-hop redundancy setup with a shared address avoids this, but hosts must be configured with the shared address rather than a physical one.

See how unified DDI simplifies network operations

Manage DNS, DHCP and IP addresses from one platform with automation, visibility and control built in.

Talk to us

Default gateway FAQ

Related terms

Article

Subnet mask

A subnet mask is a 32-bit number that divides an IP address into network address and host address portions.

Learn more
Article

DHCP (Dynamic Host Configuration Protocol)

DHCP (Dynamic Host Configuration Protocol) is the standard mechanism to dynamically assign IP addresses within a network.

Learn more
Article

DHCP Scope

A DHCP scope defines the range of IP addresses and related configuration settings that a DHCP server can assign to devices on a network segment.

Learn more
Article

DHCP Relay Agent

A DHCP relay agent forwards DHCP messages between clients and servers on different network subnets, enabling centralized DHCP services.

Learn more
Article

IPv4 (Internet Protocol version 4)

Internet Protocol version 4 (IPv4) is the fourth version of Internet Protocol using 32-bit addresses to route most current internet traffic; its global supply is exhausted.

Learn more
Article

IPv6 (Internet Protocol version 6)

Internet Protocol version 6 (IPv6) is the most recent version of Internet Protocol, using 128-bit address space with approximately 340 undecillion available addresses.

Learn more
Article

Address Resolution Protocol (ARP)

Address Resolution Protocol (ARP) maps IPv4 addresses to physical MAC addresses within a local network, allowing devices to identify and communicate with one another.

Learn more
Article

Virtual IP Address (VIP)

A VIP (virtual IP address) is an IP address that doesn’t correspond to an actual physical network interface, used for network address translation, fault-tolerance, and mobility.

Learn more
Browse the full glossary