What This Page Explains
This page covers:
- What biomed should check before calling IT
- What information IT actually needs
- Device vs infrastructure problems
- IP and MAC addresses
- VLANs
- Switch ports
- Server names
- Application ports
- Timestamps
- Network changes
- Escalation
- Documentation
- Common communication mistakes
- How to troubleshoot collaboratively without turning every problem into “IT vs Biomed”
The Simple Version
Before contacting IT, collect the device model, exact symptom, physical location, IP and MAC addresses, destination server or application, failure time, scope, and the tests that already passed. Wall-jack, switch-port, wireless, software, and configuration details are useful when available, but do not delay an urgent escalation just to fill every blank.
Describe observed evidence instead of announcing an assumed cause. “Monitor 4 stopped sending data at 14:32, still has link, and can reach its gateway” gives both teams a starting boundary; “the network is down” does not. Agree on who owns the next test, preserve patient-data privacy in tickets and screenshots, and document the final cause so the same handoff is faster next time.
Stop Saying “The Network Is Down”
Unless you actually know the network is down.
A device not communicating does not automatically mean:
Network problem.
Possible causes include:
- Device configuration
- Cable
- VLAN
- Firewall
- Server
- Application
- Patient association
Better Description
Instead of:
The network is broken.
Say:
This monitor has physical link and a valid IP, can ping the gateway, but cannot connect to the central monitoring server. Other monitors in the same unit are connected normally.
That gives IT somewhere to start.
Define the Clinical Function
Start with:
What is failing?
Examples:
- Monitor missing from central
- ECG cannot transmit to MUSE
- CT cannot retrieve worklist
- Images not reaching PACS
- Device data not reaching EMR
Local Function vs Network Function
Ask whether the device works locally.
Example:
Monitor displays ECG normally.
Central station does not receive it.
That strongly separates:
Patient acquisition
from:
Network communication.
Check Physical Link First
Look at:
- Ethernet cable
- Port
- Link lights
If there is no physical link:
Tell IT.
Example
No link light on device. Known-good cable tested. Device links normally in another room.
That strongly suggests infrastructure at the original location.
IP Address
Record the actual IP.
Do not say:
It has an IP.
Give the value.
Example:
10.25.14.86.
Subnet and Gateway
If available, record:
- Subnet mask
- Default gateway
These matter when troubleshooting reachability.
MAC Address
The MAC address identifies the network interface.
This is especially useful for IT because they may use it to locate the device on the switch.
Why MAC Matters
IT may be able to determine:
- Which switch port sees the device
- Whether the device moved
- Whether port security recognizes it
Main Board Replacement
If a NIC or main board was replaced:
The MAC address may have changed.
Tell IT.
That can matter for:
- NAC
- Port security
- Device registration
Device Location
Provide exact useful location.
Example:
ED CT Room 2.
Not:
Somewhere in radiology.
Room Matters
A location-specific failure could involve:
- Wall jack
- Switch port
- VLAN assignment
- Wi-Fi coverage
One Device vs Many
This is one of the highest-value pieces of information.
One Device Only
If every other device works:
Think more locally.
Multiple Devices
If several devices fail at once:
Shared infrastructure becomes more likely.
One Room Only
If every device in one room fails:
Think location.
One Model Only
If all devices of one type fail but everything else works:
Think:
- Server
- Application
- Device-specific network path
Ask What Changed
Useful changes include:
- Network outage
- Switch replacement
- VLAN change
- Firewall change
- Server migration
- Software update
Timing Is Useful
If the problem started immediately after a planned outage:
That is relevant.
But it still does not prove the outage caused the problem.
Give an Exact Timestamp
IT logs are time-based.
Instead of:
It failed this morning.
Say:
Failure observed at approximately 08:42.
Why This Helps
IT can search:
- Firewall logs
- Switch logs
- Server logs
around that time.
Ping Results
If allowed and appropriate, tell IT what you tested.
Example:
- Gateway ping succeeds
- Server ping fails
or:
- Both succeed
Do Not Overstate Ping
Say:
Server responds to ping.
Do not say:
Network is definitely good.
Application Port
If you know the required port, include it.
Example:
Device is configured to reach server 10.20.10.50 on TCP 2575.
That is far better than:
It can't connect.
Server Name
Know which system the device is supposed to contact.
Examples:
- PACS server
- Central monitoring server
- MUSE server
- Integration gateway
“The Server” Is Too Vague
Large systems may have:
- Application server
- Database server
- Interface server
Be specific when possible.
Device Configuration Screenshot
When allowed, a screenshot of network configuration can be very useful.
Capture:
- IP
- Gateway
- Server
- Port
- Hostname
before changing anything.
Document Before Changing
This is critical.
Do not start changing:
- IP
- DNS
- Gateway
- Server address
without recording the original values.
Avoid Random Network Changes
If you do not know what a setting does:
Do not guess.
Random changes can create:
- Duplicate IP
- Wrong VLAN behavior
- Lost server access
Work the Boundary
A useful biomed/IT boundary is:
Biomed proves what is happening at the device.
IT proves what is happening in the network.
Example
Biomed:
Device sends traffic to server IP.
IT:
Firewall sees traffic and allows it.
Server team:
Application is not listening.
Now the problem is isolated.
Packet Evidence
IT may capture packets.
You do not need to be a Wireshark expert.
But you should understand what they may ask:
- Source IP
- Destination IP
- Port
- Timestamp
Switch Port
IT may identify the physical switch port associated with the device.
This can help verify:
- Link
- Errors
- VLAN
- MAC learning
Error Counters
A switch may show:
- CRC errors
- Drops
- Link flaps
These can reveal a physical cabling problem.
VLAN
If a device is on the wrong VLAN:
It may have physical link but no access to the required systems.
Ask, Don’t Demand
Instead of:
Put this on VLAN 2651.
Say:
This device is expected to be on VLAN 2651 based on known-good units. Can you confirm the switch port configuration?
That is collaborative and evidence-based.
Firewall
If the device can ping but cannot connect to an application:
A firewall is one possibility.
But not the only one.
Better Request
Can you confirm whether traffic from 10.25.14.86 to 10.30.5.20 TCP 2575 is being allowed?
That is actionable.
Server Service
A server can be online while the application service is down.
Ask IT or the application team to confirm:
- Service running
- Port listening
Do Not Blame IT Too Early
The problem may be:
- Wrong device server address
- Expired certificate
- Device config
IT Should Not Blame the Device Too Early Either
This is why evidence matters.
Known-Good Comparison
Compare a working unit.
Record:
- IP range
- Server address
- Port
- VLAN
- Application settings
Do not blindly copy a unique IP address.
What Matches and What Differs?
That can reveal a misconfiguration quickly.
Failure Follows Device
Device fails in multiple known-good ports.
Think device.
Failure Follows Location
Multiple devices fail in one location.
Think infrastructure.
Failure Follows Application
All devices lose one service but retain other network functions.
Think server/application path.
Wi-Fi Problems
For wireless devices, collect:
- SSID
- Signal strength if available
- Location
- Whether disconnect happens while roaming
- Whether other devices are affected
Strong Signal Is Not Enough
A device can have strong Wi-Fi signal and still fail:
- Authentication
- DHCP
- Server communication
Work With Security Teams
Some network problems involve:
- Certificates
- NAC
- Firewall
- Cybersecurity policy
Do not bypass these controls to get a device working.
Medical Device Cybersecurity
Biomeds and IT increasingly share responsibility for:
- Patching
- Inventory
- Network segmentation
- Vulnerability management
Neither team can do this effectively alone.
Define Ownership
For recurring systems, it helps to know:
Who owns what?
Example:
Biomed:
- Device hardware
- Device configuration
IT:
- Switches
- VLANs
- Firewall
Application team:
- Server/application
Ownership Prevents Confusion
A ticket can be routed much faster when everyone knows the boundary.
Escalate With Evidence
Weak escalation:
Still broken. Please fix.
Strong escalation:
Device has link, correct static IP, and can ping gateway and server. TCP connection to required application port times out. Two other devices on same VLAN work. Failure began after 07:00 network maintenance.
That Is a Useful Ticket
It gives the next team something concrete.
Clinical Impact
Include impact.
Example:
CT cannot retrieve patient worklist, requiring manual entry.
That helps IT understand urgency.
Avoid Inflating Severity
Describe actual clinical impact honestly.
Screenshots
Useful screenshots may include:
- Network error
- IP configuration
- DICOM failure
- Application message
Exact Error Text Matters
“Communication error” is weaker than:
Connection refused: server 10.30.5.20 port 2575.
Save Logs
If device logs are available:
Preserve relevant entries.
Do Not Clear Logs Before Escalation
They may contain the best evidence of what failed.
Use Plain English
You do not need to impress IT with jargon.
Clear evidence is more valuable.
Good Example
The device has link and a static IP but cannot reach the gateway.
That is better than:
Layer 3 routing architecture may be compromised.
Ask Specific Questions
Useful questions include:
- Can you see this MAC on the switch?
- What VLAN is this port assigned to?
- Can you see traffic to this server?
- Is this TCP port allowed?
- Is the server service listening?
Bad Question
Can you check the network?
Too broad.
Be Ready to Stay at the Device
Sometimes IT needs you physically present to:
- Reboot
- Disconnect cable
- Trigger test transmission
- Generate traffic
Coordinate the test.
Trigger the Failure on Demand
If possible:
Tell IT:
I am sending a DICOM Echo now.
Then they can watch traffic in real time.
This Is Extremely Powerful
Real-time collaboration can turn a vague issue into:
Request reaches firewall but server never responds.
That is actual evidence.
Remote Support
OEM remote support may also depend on hospital networking.
If vendor cannot connect:
Separate:
- Device clinical connectivity
- Vendor remote-access path
One Can Work While Other Fails
A monitor may communicate perfectly with central but vendor remote service can be blocked.
Those are different paths.
Work Orders
Document enough network information for the next technician.
Example:
Verified NIC link, IP 10.25.14.86, gateway reachable. Application server 10.30.5.20 reachable by ping, but application connection failed. IT confirmed TCP 2575 blocked at firewall and corrected rule. Device communication restored and verified.
That Note Is Reusable Knowledge
The next technician can understand the failure path.
Common Mistakes
Calling IT Before Checking the Device
Do basic isolation first.
Saying “Network Issue” Without Evidence
Describe the symptom.
Saying Ping Proves Everything
It does not.
Not Giving IP or MAC
Those are basic identifiers.
Not Giving a Timestamp
Logs become harder to correlate.
Changing Settings Without Recording Them
You can create more work.
Blaming Another Team
Troubleshoot the system, not the department.
A Useful Collaboration Framework
Before contacting IT, collect:
Device
Location
IP
MAC
Symptom
Timestamp
Server
Port
What works
What fails
Then ask:
Can you see the same failure from the network side?
Another Useful Question
Ask:
Where is the last point we can prove communication works?
Maybe:
Device NIC.
Maybe:
Gateway.
Maybe:
Firewall.
Maybe:
Server.
That is how the teams meet in the middle.
What Did You Actually Prove?
If IT says:
Switch port is up.
You proved:
The switch sees a physical link.
You did not prove:
The medical application works.
If biomed says:
Device can ping the server.
You proved:
Some network reachability exists.
You did not prove:
Required service is available.
If the device completes the real clinical transaction:
Now you have strong end-to-end evidence.
Final Thoughts for Biomeds
Working with IT gets much easier when both teams stop arguing about ownership and start sharing evidence.
Biomed should understand enough networking to say:
Here is what the device is doing.
IT should be able to say:
Here is what the network is doing.
Then compare the two.
The best collaboration sounds like:
I can prove the device gets this far.
and:
I can prove the traffic gets this far.
Eventually those two lines meet.
That is where the problem is.
And as always:
What did you actually prove?
— Jake
Important Note
Network ownership, security policy, authorized troubleshooting tools, VLAN configuration, firewall access, and medical-device responsibilities vary by healthcare organization. Coordinate network and cybersecurity changes with authorized IT/security personnel, preserve device configuration before making changes, and follow facility policy for connected medical systems.
