Land Rover Network Map
Land Rover adopted a dual-bus CAN architecture in the mid-2000s, with the Discovery 3/LR3 (MY2005) and Range Rover Sport L320 introducing the layout most later models followed. The network uses a high-speed powertrain/chassis CAN and a medium-speed comfort/body CAN, coordinated through a central gateway. From 2017 forward, Jaguar Land Rover introduced a security gateway requiring dealer-level authentication for many programming and configuration tasks. The network is fragile to water intrusion at module and junction-box locations.
Testing values and scope patterns are universal — they live on the main CAN playbook. This page is what's specific to Land Rover: the buses, where the terminators live, and what breaks. Tap any era to explore it — network map, testing guide, failure patterns.
2005-2016
Discovery 3/LR3, Range Rover Sport L320, Freelander 2/LR2, Discovery 4/LR4
Discovery 3/LR3 and Range Rover Sport share similar network layouts; this architecture became the standard across the range.
| Bus | Speed | Carries | DLC access | Terminators live in |
|---|
| Powertrain CAN | 500 kb/s | Engine control module, transmission control module, ABS/DSC, terrain response, transfer case, instrument cluster | DLC pins 6/14 | not independently confirmed |
| Medium-speed CAN (name unresolved) | 125 kb/s | Body control, HVAC, lighting, seats, door modules, audio | — | not independently confirmed |
GatewayCentral Junction Box (CJB), or Body Control Module on some platforms, under driver's side dashboard or behind glove box
Explore this era ⤢2017-present
Security Gateway era
Security gateway requires online authentication for many coding, programming, and configuration tasks. DoIP (Diagnostics over IP) implemented on some platforms.
| Bus | Speed | Carries | DLC access | Terminators live in |
|---|
| High Speed CAN | 500 kb/s | Powertrain, chassis, driver-assistance/active safety systems | DLC pins 6/14 | not independently confirmed |
| Medium-speed CAN (name unresolved) | 125 kb/s | Body, comfort modules, infotainment | — | not independently confirmed |
GatewayGateway module with integrated security gateway function, in the dashboard area
Explore this era ⤢What breaks on Land Rovers
Footwell / Central Junction Box water intrusion
Blocked sunroof drains, HVAC drain backup, or door/windshield leaks allow water to accumulate at the CJB, body control, and gateway modules in the footwell area. Causes corrosion, intermittent network dropouts, random faults across multiple systems, and no-start conditions.
Aftermarket alarm/remote-start conflicts
Aftermarket security or remote-start systems tapped into the CAN network cause phantom faults, instrument cluster faults, no-start, and bus communication errors. Verify and disconnect aftermarket devices when diagnosing network faults.
The bench — what to test with
Quality DVOM with manual 200-ohm range$40-120, and the cheap one genuinely works for all resistance/voltage tests
A $40 meter fully covers terminator resistance (~60 vs ~120 ohms), idle bias (~2.5V), shorts to power/ground, and the entire split-half hunt — most Land Rover CAN faults are corrosion/breaks found here, not signal-quality subtleties.
2-channel automotive oscilloscope$150-400 for a capable 2-channel USB/handheld unit
The only tool that shows the differential waveform — reflections from a missing terminator, corrosion-induced weak swing, phantom traffic from aftermarket devices, and a babbling node all look normal on a DVOM but obvious on a scope.
Backprobe pin set / fine probe tips$15-30
Essential for reaching the gateway-hidden medium-speed bus at a module without disconnecting it, and for non-destructive checks at corroded footwell connectors — backprobe, never pierce, to avoid creating the next water-intrusion path.
OBD breakout box or DLC breakout leads$30-90
Clean, repeatable access to pins 6/14/4/5 without stabbing the connector, which matters for the repeated resistance and bias measurements during split-half testing.
Manufacturer-capable / DoIP-capable scan interface with online authenticationDealer/authorized subscription tooling; no honest cheap substitute for gateway programming
For 2017+ security-gateway cars, generic tools read codes but cannot program or configure, and DoIP platforms need an Ethernet-capable interface with authenticated access — this is a hard requirement, not a nicety.
Scan-tool access
The factory diagnostic tool for the 2005-2016 era is SDD (Symptom Driven Diagnostics). Pre-2005 vehicles use legacy protocols (e.g., ISO 9141) requiring manufacturer-specific or multi-protocol tooling. From 2017+ with the security gateway, module programming and many configuration functions require online dealer authentication. DoIP (Ethernet diagnostics) is used on some 2017+ platforms and requires compatible tooling.