Sub Netting
Sub Netting
Sub Netting
IP Addressing
An IP (Internet Protocol) address is a unique identifier for a node or host connection on
an IP network. An IP address is a 32 bit binary number usually represented as 4 decimal
values, each representing 8 bits, in the range 0 to 255 (known as octets) separated by
decimal points. This is known as "dotted decimal" notation.
Example: 140.179.220.200
Every IP address consists of two parts, one identifying the network and one identifying
the node. The Class of the address and the subnet mask determine which part belongs to
the network address and which part belongs to the node address.
Address Classes
There are 5 different address classes. You can determine which class any IP address is in
by examining the first 4 bits of the IP address.
Addresses beginning with 01111111, or 127 decimal, are reserved for loopback and for
internal testing on a local machine; [You can test this: you should always be able to ping
127.0.0.1, which points to yourself] Class D addresses are reserved for multicasting;
Class E addresses are reserved for future use. They should not be used for host addresses.
Now we can see how the Class determines, by default, which part of the IP address
belongs to the network (N, in blue) and which part belongs to the node (n, in red).
• Class A -- NNNNNNNN.nnnnnnnn.nnnnnnnn.nnnnnnnn
• Class B -- NNNNNNNN.NNNNNNNN.nnnnnnnn.nnnnnnnn
• Class C -- NNNNNNNN.NNNNNNNN.NNNNNNNN.nnnnnnnn
In the example, 140.179.220.200 is a Class B address so by default the Network part of
the address (also known as the Network Address) is defined by the first two octets
(140.179.x.x) and the node part is defined by the last 2 octets (x.x.220.200).
In order to specify the network address for a given IP address, the node section is set to
all "0"s. In our example, 140.179.0.0 specifies the network address for 140.179.220.200.
When the node section is set to all "1"s, it specifies a broadcast that is sent to all hosts on
the network. 140.179.255.255 specifies the example broadcast address. Note that this is
true regardless of the length of the node section.
Private Subnets
There are three IP network addresses reserved for private networks. The addresses are
10.0.0.0, Subnet Mask 255.0.0.0, 172.16.0.0, Subnet Mask 255.240.0.0, and
192.168.0.0, Subnet Mask 255.255.0.0. These addresses are also notated 10.0.0.0/8,
172.16.0.0/12, and 192.168.0.0/16; this notation will be explained later in this tutorial.
They can be used by anyone setting up internal IP networks, such as a lab or home LAN
behind a NAT or proxy server or a router. It is always safe to use these because routers on
the Internet by default will never forward packets coming from these addresses. These
addresses are defined in RFC 1918.
Subnetting
Subnet Masking
Applying a subnet mask to an IP address allows you to identify the network and node
parts of the address. The network bits are represented by the 1s in the mask, and the node
bits are represented by the 0s. Performing a bitwise logical AND operation between the
IP address and the subnet mask results in the Network Address or Number.
For example, using our test IP address and the default Class B subnet mask, we get:
Additional bits can be added to the default subnet mask for a given Class to further
subnet, or break down, a network. When a bitwise logical AND operation is performed
between the subnet mask and IP address, the result defines the Subnet Address (also
called the Network Address or Network Number). There are some restrictions on the
subnet address. Node addresses of all "0"s and all "1"s are reserved for specifying the
local network (when a host does not know its network address) and all hosts on the
network (broadcast address), respectively. This also applies to subnets. A subnet address
cannot be all "0"s or all "1"s. This also implies that a 1 bit subnet mask is not allowed.
This restriction is required because older standards enforced this restriction. Recent
standards that allow use of these subnets have superseded these standards, but many
"legacy" devices do not support the newer standards. If you are operating in a controlled
environment, such as a lab, you can safely use these restricted subnets.
To calculate the number of subnets or nodes, use the formula (2n-2) where n = number of
bits in either field, and 2n represents 2 raised to the nth power. Multiplying the number of
subnets by the number of nodes available per subnet gives you the total number of nodes
available for your class and subnet mask. Also, note that although subnet masks with non-
contiguous mask bits are allowed, they are not recommended.
Example:
In this example a 3 bit subnet mask was used. There are 6 (23-2) subnets available with
this size mask (remember that subnets with all 0's and all 1's are not allowed). Each
subnet has 8190 (213-2) nodes. Each subnet can have nodes assigned to any address
between the Subnet address and the Broadcast address. This gives a total of 49,140 nodes
for the entire class B address subnetted this way. Notice that this is less than the 65,534
nodes an unsubnetted class B address would have.
You can calculate the Subnet Address by performing a bitwise logical AND operation
between the IP address and the subnet mask, then setting all the host bits to 0s. Similarly,
you can calculate the Broadcast Address for a subnet by performing the same logical
AND between the IP address and the subnet mask, then setting all the host bits to 1s. That
is how these numbers are derived in the example above.
Subnetting always reduces the number of possible nodes for a given network. There are
complete subnet tables available here for Class A, Class B and Class C. These tables list
all the possible subnet masks for each class, along with calculations of the number of
networks, nodes and total hosts for each subnet.
An Example
Here is another, more detailed, example. Say you are assigned a Class C network number
of 200.133.175.0 (apologies to anyone who may actually own this domain address). You
want to utilize this network across multiple small groups within an organization. You can
do this by subnetting that network with a subnet address.
We will break this network into 14 subnets of 14 nodes each. This will limit us to 196
nodes on the network instead of the 254 we would have without subnetting, but gives us
the advantages of traffic isolation and security. To accomplish this, we need to use a
subnet mask 4 bits long.
Recall that the default Class C subnet mask is
Now that you understand "classful" IP Subnetting principals, you can forget them ;). The
reason is CIDR -- Classless InterDomain Routing. CIDR was invented several years ago
to keep the internet from running out of IP addresses. The "classful" system of allocating
IP addresses can be very wasteful; anyone who could reasonably show a need for more
that 254 host addresses was given a Class B address block of 65533 host addresses. Even
more wasteful were companies and organizations that were allocated Class A address
blocks, which contain over 16 Million host addresses! Only a tiny percentage of the
allocated Class A and Class B address space has ever been actually assigned to a host
computer on the Internet.
People realized that addresses could be conserved if the class system was eliminated. By
accurately allocating only the amount of address space that was actually needed, the
address space crisis could be avoided for many years. This was first proposed in 1992 as
a scheme called Supernetting. Under supernetting, the classful subnet masks are
extended so that a network address and subnet mask could, for example, specify multiple
Class C subnets with one address. For example, If I needed about 1000 addresses, I could
supernet 4 Class C networks together:
192.60.128.0 (11000000.00111100.10000000.00000000) Class C subnet
address
192.60.129.0 (11000000.00111100.10000001.00000000) Class C subnet
address
192.60.130.0 (11000000.00111100.10000010.00000000) Class C subnet
address
192.60.131.0 (11000000.00111100.10000011.00000000) Class C subnet
address
--------------------------------------------------------
192.60.128.0 (11000000.00111100.10000000.00000000) Supernetted
Subnet address
255.255.252.0 (11111111.11111111.11111100.00000000) Subnet Mask
192.60.131.255 (11000000.00111100.10000011.11111111) Broadcast address
In this example, the subnet 192.60.128.0 includes all the addresses from 192.60.128.0 to
192.60.131.255. As you can see in the binary representation of the subnet mask, the
Network portion of the address is 22 bits long, and the host portion is 10 bits long.
Under CIDR, the subnet mask notation is reduced to a simplified shorthand. Instead of
spelling out the bits of the subnet mask, it is simply listed as the number of 1s bits that
start the mask. In the above example, instead of writing the address and subnet mask as
The use of a CIDR notated address is the same as for a Classful address. Classful
addresses can easily be written in CIDR notation (Class A = /8, Class B = /16, and Class
C = /24)
It is expected that CIDR will keep the Internet happily in IP addresses for the next few
years at least. After that, IPv6, with 128 bit addresses, will be needed. Under IPv6, even
sloppy address allocation would comfortably allow a billion unique IP addresses for
every person on earth! The complete and gory details of CIDR are documented in
RFC1519, which was released in September of 1993