What is a Subnet Mask?

An IP address has two components, the network address and the host address. A subnet mask separates the IP address into the network and host addresses (<network><host>). Subnetting further divides the host part of an IP address into a subnet and host address (<network><subnet><host>) if additional subnetwork is needed. Use the Subnet Calculator to retrieve subnetwork information from the IP address and Subnet Mask. It is called a subnet mask because it is used to identify the network address of an IP address by performing a bitwise AND operation on the netmask.

A Subnet mask is a 32-bit number that masks an IP address and divides the IP address into a network address and a host address. Subnet Mask is made by setting network bits to all "1"s and setting host bits to all "0"s. Within a given network, two host addresses are reserved for a special purpose, and cannot be assigned to hosts. The "0" address is assigned to a network address and "255" is assigned to a broadcast address, and they cannot be assigned to hosts.

Examples of commonly used netmasks for classed networks are 8-bits (Class A), 16-bits (Class B), and 24-bits (Class C), and classless networks are as follows:

Subnetting an IP network is to separate a big network into smaller multiple networks for reorganization and security purposes. All nodes (hosts) in a subnetwork see all packets transmitted by any node in a network. The performance of a network is adversely affected under heavy traffic load due to collisions and retransmissions.

Applying a subnet mask to an IP address separates the network address from the host address. The network bits are represented by the 1's in the mask, and the host bits are represented by 0's. Performing a bitwise logical AND operation on the IP address with the subnet mask produces the network address. For example, applying the Class C subnet mask to our IP address 216.3.128.12 produces the following network address:

IP:   1101 1000 . 0000 0011 . 1000 0000 . 0000 1100  (216.003.128.012)

Mask: 1111 1111 . 1111 1111 . 1111 1111 . 0000 0000  (255.255.255.000)

      ---------------------------------------------

      1101 1000 . 0000 0011 . 1000 0000 . 0000 0000  (216.003.128.000)

Here is another scenario where subnetting is needed. Pretend that a web host with a Class C network needs to divide the network so that parts of the network can be leased to its customers. Let's assume that a host has a network address of 216.3.128.0 (as shown in the example above). Let's say that we're going to divide the network into 2 and dedicate the first half to itself, and the other half to its customers.

   216 .   3 . 128 . (0000 0000)  (1st half assigned to the web host)

   216 .   3 . 128 . (1000 0000)  (2nd half assigned to the customers)

The web host will have the subnet mask of 216.3.128.128 (/25). Now, we'll further divide the 2nd half into eight block of 16 IP addresses.

   216 .   3 . 128 . (1000 0000)  Customer 1 -- Gets 16 IPs (14 usable)

   216 .   3 . 128 . (1001 0000)  Customer 2 -- Gets 16 IPs (14 usable)

   216 .   3 . 128 . (1010 0000)  Customer 3 -- Gets 16 IPs (14 usable)

   216 .   3 . 128 . (1011 0000)  Customer 4 -- Gets 16 IPs (14 usable)

   216 .   3 . 128 . (1100 0000)  Customer 5 -- Gets 16 IPs (14 usable)

   216 .   3 . 128 . (1101 0000)  Customer 6 -- Gets 16 IPs (14 usable)

   216 .   3 . 128 . (1110 0000)  Customer 7 -- Gets 16 IPs (14 usable)

   216 .   3 . 128 . (1111 0000)  Customer 8 -- Gets 16 IPs (14 usable)

   -----------------------------

   255 . 255 . 255 . (1111 0000)  (Subnet mask of 255.255.255.240)

You may use Subnet Calculator to ease your calculation.

Classless InterDomain Routing (CIDR) was invented to keep the Internet from running out of IP Addresses. The IPv4, a 32-bit, addresses have a limit of 4,294,967,296 (2³²) unique IP addresses. The classful address scheme (Class A, B, and C) of allocating IP addresses in 8-bit increments can be very wasteful. With a classful addressing scheme, the minimum number of IP addresses allocated to an organization is 256 (Class C). Giving 256 IP addresses to an organization that only requires 15 IP addresses is wasteful. Also, an organization requiring more than 256 IP addresses (let's say 1,000 IP addresses) is assigned a Class B, which allocates 65,536 IP addresses. Similarly, an organization requiring more than 65,636 (65,634 usable IPs) is assigned a Class A network, which allocates 16,777,216 (16.7 Million) IP addresses. This type of address allocation is very wasteful.

With CIDR, a network of IP addresses is allocated in 1-bit increments as opposed to 8-bits in the classful network. The use of a CIDR notated address can easily represent classful addresses (Class A = /8, Class B = /16, and Class C = /24). The number next to the slash (i.e. /8) represents the number of bits assigned to the network address. The example shown above can be illustrated with CIDR as follows:

   216.3.128.12, with subnet mask of 255.255.255.128 is written as

   216.3.128.12/25



   Similarly, the 8 customers with the block of 16 IP addresses can be

   written as:



   216.3.128.129/28, 216.3.128.130/28, and etc.

With the introduction of the CIDR addressing scheme, IP addresses are more efficiently allocated to ISPs and customers; hence there is less risk of IP addresses running out anytime soon. For detailed specifications on CIDR, please review RFC 1519. With the introduction of additional gaming, medical, appliance, and telecom devices requiring static IP addresses in addition to the more than 6.5 billion (July 2006 est.) world population, the IPv4 addresses with CIDR addressing scheme will eventually run out. To solve the shortage of IPv4 addresses, the IPv6 (128-bit) address scheme was introduced in 1993.