Subnetting is one of those topics that sounds harder than it is. The core idea: take a single IP range and split it into smaller logical networks. Here's why anyone bothers, and how the math actually works.

Why subnet at all

• Performance: Broadcast traffic stays within a subnet. A flat network of 1000 devices would drown in broadcasts.
• Security: Subnets are natural firewall boundaries. Guests on one subnet, IoT on another, work devices on a third.
• Organization: Different departments, floors, or device types each get their own range — easier to manage and troubleshoot.

What a subnet mask does

A subnet mask separates the network portion of an IP from the host portion. Mask 255.255.255.0 (which is /24 in CIDR) says "the first 24 bits identify the network, the last 8 identify the device."

So 192.168.1.50/24 means: device #50 on the network 192.168.1.0.

A worked example

You have 192.168.1.0/24 (256 addresses). You want to split it in half — one for staff, one for guests.

• Staff: 192.168.1.0/25 — addresses 0–127
• Guests: 192.168.1.128/25 — addresses 128–255

Each /25 has 128 total addresses, 126 usable. Two router interfaces (one per subnet), and a firewall rule to deny guest → staff traffic.

Reserved addresses in every subnet

Two addresses are always unusable for hosts:

• Network address: the first IP (e.g. 192.168.1.0) — identifies the subnet itself
• Broadcast address: the last IP (e.g. 192.168.1.255) — addresses all hosts on the subnet

So /24 has 256 total addresses but only 254 usable for devices.

When you'll actually subnet

Most home users never need to. Setting up a guest Wi-Fi, building a small office network, or configuring a VLAN at home? That's where this knowledge pays off.

Try it now

Curious what your IP is showing the world right now? Check your IP address & location instantly with our free tool — no signup, nothing stored. Or trace any other IP to see its geolocation, ISP, and network details.