IPv4 Subnet Calculator

How subnet calculation works

Every IPv4 address is 32 bits long. A subnet mask defines how many of those bits belong to the network portion and how many belong to the host portion. The CIDR notation — a forward slash followed by a number — tells you the prefix length, which is the number of leading bits that are fixed for the network. For example, 192.168.1.0/24 means the first 24 bits identify the network and the remaining 8 bits are available for hosts.

The subnet calculator performs three fundamental operations. First, it computes the subnet mask by setting the first N bits to 1 and the remaining bits to 0. For a /24, the mask in binary is 24 ones followed by 8 zeros, which in decimal is 255.255.255.0. Second, it computes the network address by performing a bitwise AND between the IP address and the subnet mask. This zeros out all host bits, leaving only the network portion. Third, it computes the broadcast address by taking the network address and setting all host bits to 1.

The usable host range starts at network address plus 1 and ends at broadcast address minus 1. The total number of usable hosts is 2^(32 - prefix) - 2, because the network and broadcast addresses are reserved. For a /24, that is 2^8 - 2 = 254 usable addresses. The wildcard mask is the bitwise inverse of the subnet mask and is used in ACLs (access control lists) and routing protocols like OSPF.

The formulas behind the calculator

Why subnetting matters

Subnetting is one of the most fundamental concepts in network design. Without subnetting, every device on a network would compete for bandwidth and receive every broadcast packet, leading to congestion and security vulnerabilities. By dividing a large network into smaller subnets, administrators can isolate traffic, contain broadcast domains, apply access control policies, and allocate addresses more efficiently.

In enterprise environments, subnetting enables network segmentation for security purposes. A finance department might be on a separate subnet from engineering, with firewall rules controlling traffic between them. This limits the blast radius of a security breach and simplifies compliance with data protection regulations such as PCI DSS and HIPAA.

Variable Length Subnet Masking (VLSM), defined in RFC 1009, allows subnets of different sizes within the same network. This avoids wasting IP addresses by matching subnet sizes to actual host counts. For example, a point-to-point link between two routers only needs a /30 subnet (2 usable addresses), while a busy office might need a /23 (510 usable addresses). VLSM is a core feature of modern routing protocols including OSPF, EIGRP, and ISIS.

Subnet calculation is also essential for troubleshooting connectivity issues. If two devices cannot communicate despite being on the same physical network, the most common cause is incorrect subnet mask configuration. One device may believe the other is on a different subnet and try to route traffic through a default gateway that does not exist or is misconfigured. The ping and traceroute commands together with subnet knowledge form the foundation of network diagnostics.

Classful addressing vs. CIDR

Before CIDR was standardized in 1993 (RFC 1519, later updated by RFC 4632), IP addresses were allocated using classful addressing. Class A networks used a /8 prefix with 16 million addresses, Class B used /16 with 65,536 addresses, and Class C used /24 with 256 addresses. This rigid structure wasted enormous numbers of IP addresses — a company needing 300 addresses had to be allocated a Class B /16, wasting 65,236 addresses.

CIDR (Classless Inter-Domain Routing) eliminated these fixed boundaries and allowed any prefix length from /0 to /32. This enabled much finer-grained address allocation and dramatically slowed the depletion of the IPv4 address pool. CIDR also introduced route aggregation (supernetting), where a single routing table entry could represent many contiguous smaller networks, reducing the size of global routing tables. Today, all internet routing is based on CIDR principles, and classful addressing is considered obsolete.

Limitations and considerations

This calculator works with standard IPv4 CIDR notation. It does not handle IPv6 subnets (which use a different address format and /64 as the typical subnet boundary). The calculation assumes a flat subnet without considering secondary IPs, VLAN interfaces, or overlapping address spaces common in complex network topologies. For networks using NAT, PAT, or carrier-grade NAT, the usable address count at the WAN interface differs from what the subnet math suggests.

Subnet calculators help with design and verification but cannot replace a proper IP address management (IPAM) system for large-scale deployments. In production networks with thousands of subnets, manual calculation is error-prone and IPAM tools should be used to track allocations, detect overlaps, and manage DHCP scopes. The calculator is best used for quick ad-hoc checks, studying for networking certifications (CompTIA Network+, CCNA), and learning the underlying binary arithmetic.

Frequently asked questions