What's changed: Initial version
1.4IPv4 addressing and subnet design
Covers the structure of IPv4 addresses, the private/public distinction, the subnet mask and CIDR, and VLSM, which splits space into variable-length blocks sized to the required host count—learned as the design judgment of "allocating a limited address space without waste," with manual verification.
Subnet design is not a plug-into-a-formula calculation—it is genuine practical judgment: distributing a limited address space without waste, sized to each department's or floor's device count. CCNA strongly expects you to hand-calculate subnets quickly on paper. This section builds an understanding of how CIDR/VLSM work, then practices deriving a subnet layout from real requirements (per-department device counts) and verifying it by hand.
1.4.1IPv4 structure and private/public
- An IPv4 address is 32 bits, written in decimal as four 8-bit octets (e.g.,
192.168.1.10). It comprises a network portion plus a host portion, with the boundary shown by the subnet mask (255.255.255.0=/24). The historical Classes A/B/C are now superseded by CIDR (classless), which cuts the boundary freely via prefix length. - Private addresses are internal-use ranges not routed directly on the internet:
10.0.0.0/8,172.16.0.0/12, and192.168.0.0/16. When communicating externally, NAT translates them to a public address. Public addresses are globally unique on the internet and assigned by registries.
1.4.2Subnet masks and host counts
- The number of addresses assignable to hosts in a subnet is
2^(host bits) - 2. Subtract 2 because the all-0 network address and the all-1 broadcast address cannot be assigned. Example: a/24has 8 host bits, so2^8 - 2 = 254hosts. - Extending the prefix by one bit (e.g.,
/24->/25) halves the subnet and its host count each time. The basic procedure is: from the required count, find the smallest n (host bits) satisfying2^n - 2 >= required hosts, then derive the prefix length32 - n.
1.4.3Variable-length splitting with VLSM
- VLSM (Variable Length Subnet Mask) splits a single address block into subnets of different lengths sized to each one's required host count. Unlike fixed-length splitting that gives every subnet the same size, it minimizes wasted addresses. The procedural tip is to carve out subnets starting from the largest requirement first.
Most-tested: private ranges = 10/8, 172.16/12, 192.168/16; assignable count = 2^(host bits) - 2 (excluding all-0/all-1); VLSM uses variable lengths sized to need, carved largest-first. Always verify subnet math by hand rather than relying on memorized formulas. In IOS, show ip interface brief shows each interface's address/status.
Suppose that, as a network designer, you are given the requirement to distribute the 192.168.10.0/24 (256 addresses) allocated to a site across Sales (100 hosts needed), Development (50), and General Affairs (20) using VLSM without waste. The tip is largest-first. Sales' 100 hosts need the smallest n satisfying 2^n - 2 >= 100, which is n=7 (2^7 - 2 = 126 >= 100; n=6 gives only 62), so a 7-bit host portion = /25 (255.255.255.128). Reserve 192.168.10.0/25 (.0 to .127, assignable .1 to .126, 126 addresses) for Sales; 126 >= 100 satisfies it. From the remaining 192.168.10.128/25, carve Development's 50: the smallest n for 2^n - 2 >= 50 is n=6 (2^6 - 2 = 62 >= 50), so /26 (255.255.255.192): 192.168.10.128/26 (.128 to .191, 62 assignable). Finally, carve General Affairs' 20 from the remaining 192.168.10.192/26: the smallest n for 2^n - 2 >= 20 is n=5 (2^5 - 2 = 30 >= 20), so /27 (255.255.255.224): 192.168.10.192/27 (.192 to .223, 30 assignable). This satisfies the requirement while preserving the remaining 192.168.10.224/27 (30 addresses) for future expansion. A fixed-length /26 (62 hosts) for every department would break because Sales' 100 hosts do not fit; conversely, giving every department Sales-sized /25 would hand General Affairs 126 addresses, a huge waste. Cutting the smallest sufficient size per requirement, largest-first—that is the essence of VLSM, an address-resource allocation judgment rather than mere arithmetic.
| Department | Hosts needed | Assigned prefix | Assignable count |
|---|---|---|---|
| Sales | 100 | /25 (192.168.10.0/25) | 126 |
| Development | 50 | /26 (192.168.10.128/26) | 62 |
| General Affairs | 20 | /27 (192.168.10.192/27) | 30 |
Trap: "A /24 can accommodate 256 hosts" is wrong—of the 2^8 = 256 addresses, 2 (the all-0 network address and the all-1 broadcast address) cannot be assigned, so the host capacity is 256 - 2 = 254. Also wrong: "VLSM assigns the same size to every subnet"—the essence of VLSM is assigning different lengths sized to need to reduce waste; equal-size splitting is fixed-length subnetting.
1.4.4Section summary
- Private ranges are
10.0.0.0/8,172.16.0.0/12, and192.168.0.0/16; external communication is translated to public via NAT - Assignable host count is 2^(host bits) - 2 (excluding all-0/all-1); derive the prefix from the smallest n with
2^n - 2 >= need - VLSM carves variable lengths largest-first to minimize waste; always verify subnet math by hand
Sign in to track progress — Log in.
Quick check
(just a quick review)Q1. A network designer wants to split `192.168.20.0/24` between department A (60 hosts) and department B (25 hosts), minimizing waste. Which prefix is most appropriate for department A?
Q2. For allocating `192.168.30.0/24` across three departments (Sales 50, Development 20, General Affairs 10) using VLSM, which policy is most rational?
Q3. A site wants to use internal addresses that are not routed directly on the internet. Which combination is the correct set of private IPv4 address ranges?

