Subnetting is the practice of dividing one large IP network into smaller, self-contained networks called subnets. In short, it is how you take a single block of addresses and carve it into organized pieces that are easier to manage, secure, and route.
If you want the math done for you, the Subnet Calculator returns ranges and host counts instantly. This guide builds the mental model so those results make sense.
Why Subnetting Exists
Imagine an office with one flat network of thousands of devices. Traffic from every machine reaches every other machine, broadcasts flood everywhere, and a single misconfiguration can affect everyone.
Subnetting fixes this by grouping devices logically — one subnet for staff laptops, another for printers, another for servers. The benefits are concrete:
- Less broadcast traffic on each segment
- Clearer security boundaries between groups
- More efficient use of a limited address pool
Core Terms to Know
A few terms unlock everything else:
- IP address. A device's address, written as four numbers like 192.168.1.10.
- Network portion. The leading bits that identify which network an address belongs to.
- Host portion. The trailing bits that identify a specific device within that network.
- Subnet mask. A pattern that marks where the network portion ends and the host portion begins.
The whole game is deciding how many bits belong to the network versus the hosts. Move that boundary and you trade off the number of subnets against the number of devices each can hold.
CIDR Basics
Modern networking uses CIDR notation — a slash followed by a number, like 192.168.1.0/24. That number is how many bits form the network portion.
- A larger number (/28) means more network bits and fewer hosts per subnet.
- A smaller number (/16) means fewer network bits and many more hosts.
Common values are easy to memorize once you see the pattern:
- /24 = mask 255.255.255.0 = 256 addresses, 254 usable
- /25 = mask 255.255.255.128 = 128 addresses, 126 usable
- /26 = mask 255.255.255.192 = 64 addresses, 62 usable
The CIDR Calculator converts any prefix into its mask and address range so you do not have to memorize the whole table.
Worked Examples
Example 1: How many hosts in a /24?
A /24 leaves 8 bits for hosts. The formula is 2 to the power of host bits, minus 2:
2^8 = 256, then 256 - 2 = 254 usable hosts.
You subtract 2 because the first address is the network identifier and the last is the broadcast address.
Example 2: Splitting a /24 into smaller subnets
Suppose you need four subnets from 192.168.1.0/24. Borrowing 2 host bits creates four subnets of /26 each:
- 192.168.1.0/26 (hosts .1 to .62)
- 192.168.1.64/26 (hosts .65 to .126)
- 192.168.1.128/26 (hosts .129 to .190)
- 192.168.1.192/26 (hosts .193 to .254)
Each holds 62 usable hosts. If you ever want to see the binary behind the boundary, the Binary Calculator makes the bit pattern visible, and the IP Address Calculator breaks an address into its network and host parts.
Common Mistakes
Forgetting the network and broadcast addresses
New learners count 2^8 as 256 usable hosts. Two addresses are always reserved, so the real number is 254.
Confusing the mask direction
A higher CIDR number means fewer hosts, not more. /28 is smaller than /24 in host capacity even though 28 is the bigger number.
Mixing up subnets and IP ranges
Each subnet has a fixed starting address that aligns to its block size. You cannot start a /26 at an arbitrary address; it must land on a multiple of 64.
Over-subnetting
Creating tiny subnets everywhere wastes addresses on reserved network and broadcast entries. Size subnets to realistic device counts plus room to grow.
Putting It Together
Subnetting comes down to one decision repeated at different scales: where to draw the line between network bits and host bits. Once that clicks, CIDR notation, masks, and host counts all follow from the same logic.
A practical workflow:
- Plan ranges with the Subnet Calculator.
- Convert prefixes and masks with the CIDR Calculator.
- Inspect individual addresses with the IP Address Calculator.
- Explore the Tech hub for related networking tools.
Once your networking basics are solid, How Generated Passwords Improve Account Security is a useful next read on another tech fundamental: keeping accounts hard to compromise.