If the host can reach the Internet but the VM can’t, trace the path: ping gateway, arp -a, traceroute 8.8.8.8. Look for missing ARP entries or a gateway that drops packets. Also check for duplicate MAC addresses or VLAN misconfiguration on the vSwitch.