Reliable IPv4 subnetting is not a memorization contest. Start with the number of required addresses, choose the smallest prefix that fits, then use its block size to find each aligned boundary. The same method works for an exam question, a firewall rule, and a real allocation plan.
The four-step subnetting method
- Count addresses, not only devices. A conventional IPv4 subnet reserves one network address and one directed broadcast address.
- Round up to a power of two. For 60 hosts, 62 usable addresses are needed, so choose a 64-address block.
- Convert the block size to a prefix. A 64-address IPv4 block leaves six host bits:
26 = 64, so the prefix is/26. - Check the aligned boundaries. A
/26increments by 64 in the last octet: 0, 64, 128, and 192.
A /26 has mask 255.255.255.192. Its first address is the network identifier; its last address is the directed broadcast; the addresses strictly between them are the conventional host range. The method describes ordinary multi-access IPv4 LANs; the point-to-point /31 exception is covered in the /31 and /32 guide.
Worked exercise: split a /24 for four teams
A training lab owns documentation prefix 192.0.2.0/24 and needs four equal team networks. Dividing 256 addresses into four equal parts produces 64 addresses each, therefore four /26 networks. The boundaries are exact; there are no gaps and no overlap.
| Team | Network | Usable host range | Broadcast |
|---|---|---|---|
| Platform | 192.0.2.0/26 | 192.0.2.1–192.0.2.62 | 192.0.2.63 |
| Operations | 192.0.2.64/26 | 192.0.2.65–192.0.2.126 | 192.0.2.127 |
| Security | 192.0.2.128/26 | 192.0.2.129–192.0.2.190 | 192.0.2.191 |
| Growth | 192.0.2.192/26 | 192.0.2.193–192.0.2.254 | 192.0.2.255 |
The fourth block is deliberately unassigned. Keeping it as one aligned /26 lets the organization later give a team up to 62 conventional hosts without renumbering the first three teams. If the requirement changes, use the VLSM Planner rather than forcing unequal teams into an equal-size design.
Avoid the common boundary mistakes
- Starting a /26 at
192.0.2.32: 32 is not a /26 boundary. It belongs to192.0.2.0/26, whose broadcast is192.0.2.63. - Calling 64 the host count: a conventional /26 has 64 total addresses and 62 usable host addresses.
- Using the next subnet's network address as a host:
192.0.2.64begins the second /26; it is not part of the first usable range. - Changing the prefix without rechecking capacity: a /27 has only 30 conventional usable hosts. It cannot fit a team that needs 60 hosts.
Check your answer before you deploy
- Confirm the prefix has enough addresses for current devices, gateways, and deliberate growth.
- Use the CIDR Calculator to verify each network, broadcast, mask, and usable range.
- Run the planned blocks through the Subnet Overlap Detector before adding routes, VPN selectors, or cloud peering.
- Keep contiguous allocations together when future route aggregation matters; do not summarize across a gap.
- Record provider-reserved addresses separately for cloud subnets, because their usable count can be lower than the conventional IPv4 calculation.