Skip to content
CCNA 200-301 v1.1 reference — Network Fundamentals

IPv4 subnetting

Convert prefix lengths and masks, find network, broadcast and usable ranges, and handle /31 and /32 boundary cases correctly.

Objective 1.6v1.1 exam target

The subnetting method

Block size
256 − mask octet

The interesting octet's step size, e.g. mask .192 → block of 64.

Usable hosts
2^hostbits − 2

Subtract network and broadcast — except /31 links and /32 hosts.

Network address
Address AND mask

First address of the block; not assignable on normal subnets.

Broadcast address
Network + block − 1

Last address of the block; not assignable.

Subnetting needs three numbers: the block size in the interesting octet, the network address (nearest multiple of the block size at or below the host octet), and the broadcast (network + block − 1). Everything else — first host, last host, host count — falls out of those three.

Prefix lengths, masks, wildcards and block sizes

Binary arithmetic, not globally allocatable host counts — reserved ranges and addressing policy still apply. /0 is normally the default route, /31 is point-to-point only (RFC 3021), /32 is a single host route.
PrefixDotted maskWildcardAddresses per blockTheoretical host slots*
/00.0.0.0255.255.255.25542949672964294967294
/1128.0.0.0127.255.255.25521474836482147483646
/2192.0.0.063.255.255.25510737418241073741822
/3224.0.0.031.255.255.255536870912536870910
/4240.0.0.015.255.255.255268435456268435454
/5248.0.0.07.255.255.255134217728134217726
/6252.0.0.03.255.255.2556710886467108862
/7254.0.0.01.255.255.2553355443233554430
/8255.0.0.00.255.255.2551677721616777214
/9255.128.0.00.127.255.25583886088388606
/10255.192.0.00.63.255.25541943044194302
/11255.224.0.00.31.255.25520971522097150
/12255.240.0.00.15.255.25510485761048574
/13255.248.0.00.7.255.255524288524286
/14255.252.0.00.3.255.255262144262142
/15255.254.0.00.1.255.255131072131070
/16255.255.0.00.0.255.2556553665534
/17255.255.128.00.0.127.2553276832766
/18255.255.192.00.0.63.2551638416382
/19255.255.224.00.0.31.25581928190
/20255.255.240.00.0.15.25540964094
/21255.255.248.00.0.7.25520482046
/22255.255.252.00.0.3.25510241022
/23255.255.254.00.0.1.255512510
/24255.255.255.00.0.0.255256254
/25255.255.255.1280.0.0.127128126
/26255.255.255.1920.0.0.636462
/27255.255.255.2240.0.0.313230
/28255.255.255.2400.0.0.151614
/29255.255.255.2480.0.0.786
/30255.255.255.2520.0.0.342
/31255.255.255.2540.0.0.122 (point-to-point only)
/32255.255.255.2550.0.0.011 (host route)

Binary arithmetic, not globally allocatable host counts — reserved ranges and addressing policy still apply. /0 is normally the default route, /31 is point-to-point only (RFC 3021), /32 is a single host route.

Subnet 192.168.1.77/26
Address
192.168.1.77
Prefix
/26
  1. Mask: /26 → 255.255.255.192. Interesting octet is the 4th.
  2. Block size: 256 − 192 = 64 → subnet boundaries at .0, .64, .128, .192.
  3. 77 falls in the .64–.127 block → network 192.168.1.64, broadcast 192.168.1.127.
  4. Usable range: 192.168.1.65 – 192.168.1.126 → 62 usable hosts.

192.168.1.77/26 lives in 192.168.1.64/26, usable .65–.126, broadcast .127.

/31, /32 and wildcards

/31 is a special case defined by RFC 3021 for point-to-point links: with only two addresses, both are usable endpoints and there is no network/broadcast reservation — it saves space on router-to-router links. /32 identifies exactly one host; it appears as host routes and loopbacks. Applying 'minus 2' blindly to these prefixes gives −1 or wrong answers.

Wildcard masks are the bitwise inverse of a subnet mask: subtract each mask octet from 255. A /26 network uses mask 255.255.255.192 and wildcard 0.0.0.63; /24 uses wildcard 0.0.0.255; a single host is wildcard 0.0.0.0. Zero wildcard bits must match exactly; one bits are ignored — the same logic ACLs and OSPF network statements use.

Verification and mistakes

Verify subnetting on a device

Confirm interface addresses land on the intended subnet — Privileged EXEC

Cisco IOS / IOS XE

Verify
show ip interface brief
show ip interface gi0/1
ping <neighbor-ip>
  • Configured mask matches the intended prefix.
  • Neighbors in the same subnet ping; neighbors outside it route via a gateway.

Read-only verification commands.

Common mistakes

  • Subtracting 2 from every prefix — /31 and /32 have different rules.
  • Mixing up mask and wildcard — a /26 is 255.255.255.192 but wildcard 0.0.0.63.
  • Counting the network or broadcast address as usable host IPs on normal subnets.
  • Computing the network by rounding to the nearest .0 boundary of the wrong block size — always derive block size from the mask first.
Two hosts that 'should' reach each other cannot

Observation: Host A 10.1.1.70/26 and Host B 10.1.1.140/26 cannot ping each other directly.

Hypotheses
  • They are in different subnets despite similar addresses
  • Missing gateway configuration
  • ACL blocking traffic
CheckIndicates
Recompute each subnet/26 blocks are .0/.64/.128/.192 — .70 is in .64–.127, .140 is in .128–.191: different subnets.
Gateway addresses on each hostEach needs a gateway inside its own block to route between subnets.

Correction: Put both hosts in the same subnet or route between them via a router interface in each subnet.

Traffic flows — via the gateway when subnets differ, directly when they match.

On this page

Related resources

Sources

Targets CCNA 200-301 v1.1 objectives. Supplemental blocks are labeled beyond exam scope.

Search guided lessons, transcript chapters, flashcards, CLI drills and cheat sheets

IPv4 subnetting | CCNA Study