Subnet and CIDR basics: how do you read a subnet calculator result?

What CIDR notation actually encodes

Before CIDR (Classless Inter-domain Routing), IPv4 addresses were divided into rigid classes (A, B, C) with fixed-size networks, which wasted huge amounts of address space on organizations that needed something in between. CIDR replaced that with a single, flexible idea: write the prefix length directly after the address, as in 192.168.1.0/24, where the number states exactly how many of the address’s leading bits are fixed as the “network” portion. Every bit after that prefix length is the “host” portion — free to vary across every device on that subnet. A /24 fixes 24 bits and leaves 8 free, giving 2^8 = 256 total addresses; a /28 fixes 28 bits and leaves only 4 free, giving 2^4 = 16 addresses. AdminKit’s subnet calculator does this arithmetic for you, entirely in your browser, for both IPv4 and IPv6.

Reading an IPv4 result

For IPv4, a subnet calculator result has four parts worth understanding:

• Network address — the first address in the range, with every host bit set to zero. This identifies the subnet as a whole; it isn’t assignable to an individual device.
• Broadcast address — the last address in the range, with every host bit set to one, reserved for sending a single message to every host on the subnet simultaneously. Also not assignable to a device.
• Usable host range — every address between the network and broadcast addresses, which is the actual pool of addresses you can assign to devices.
• Host count — how many usable addresses that range contains, always 2 less than the subnet’s total address count (to exclude the network and broadcast addresses), except for the two cases below.

The two standard exceptions are worth knowing: a /31 subnet, defined by RFC 3021 specifically for point-to-point links between two routers, treats both of its two addresses as usable, since a link with exactly two endpoints has no meaningful broadcast domain to reserve an address for. A /32 is a single host route with no subnet structure at all.

Reading an IPv6 result

IPv6 changes two things. First, there’s no broadcast address at all — IPv6 dropped broadcast in favor of multicast for one-to-many traffic, so a calculator doesn’t subtract one from the usable range the way it does for IPv4. Second, subnet sizes in IPv6 are conventionally far larger than IPv4 ever used: a /64 is the standard size for any subnet that devices connect to directly, giving 2^64 addresses — a number large enough that address exhaustion within a single subnet is not a practical concern, ever. That size isn’t arbitrary generosity; it’s a structural requirement of Stateless Address Autoconfiguration (SLAAC), which depends on a 64-bit host portion for a device to generate its own address without a DHCP server. See IPv6 and home devices: why no NAT means a firewall for what that large, directly-routable address space means for securing each device individually, since there’s no NAT boundary hiding them behind a single shared address the way IPv4 commonly does.

Why subnetting matters beyond the math

Subnetting isn’t just an arithmetic exercise — it’s how networks are segmented for both operational and security reasons. Splitting one large address block into smaller subnets lets an organization isolate a guest Wi-Fi network from internal servers, give each office location its own routable segment, or separate IoT devices from the rest of a network so a compromise in one segment doesn’t automatically expose the others. The same CIDR math also determines whether a given address falls inside a reserved range worth recognizing on sight: the private ranges defined by RFC 1918 (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), or the 100.64.0.0/10 block ISPs use for carrier-grade NAT — see what is CGNAT? for why an address in that specific range behaves differently from an ordinary private IP.

Using the calculator in practice

1. Enter an address with a prefix (192.168.1.0/24) or a dotted mask (10.0.0.0/255.255.0.0) for IPv4, or an address with a prefix (2001:db8::/64) for IPv6, in AdminKit’s subnet calculator.
2. Check the usable range before assigning addresses — accidentally assigning the network or broadcast address to a device is a classic, avoidable IPv4 misconfiguration.
3. Remember it’s arithmetic, not a live scan — it tells you which addresses belong to a subnet on paper, not which ones are actually in use; pair it with your router’s connected-device list or a reachability check for that.
4. For IPv6, expect a /64 by default unless you have a specific reason to subdivide it further, since most consumer and enterprise equipment assumes a /64 per subnet for SLAAC to work correctly.