Skip to content
2xKit

What a CIDR Subnet Mask Actually Means in Plain English

Why /24 means 256 addresses and /16 means 65,536, and how the slash notation encodes that directly.

Quick answer

CIDR notation like 192.168.1.0/24 means the first 24 bits of the 32-bit IP address are fixed as the network portion, leaving the remaining 8 bits free for host addresses, which gives 2^8 = 256 possible addresses in that block. A smaller number after the slash means a larger network (more available addresses); a bigger number means a smaller, more restricted one. Work through any CIDR block's address range with the CIDR Subnet Calculator.

CIDR (Classless Inter-Domain Routing) notation is the slash-number you see appended to an IP address, like `192.168.1.0/24`. That number after the slash isn't arbitrary, it directly states how many of the address's 32 bits are reserved for identifying the network, with the rest available to identify individual hosts (devices) within that network.

Why the number directly determines the address count

An IPv4 address is 32 bits total. A `/24` means the first 24 bits are the fixed network portion, leaving 32 − 24 = 8 bits for host addresses within that network, and since 8 bits can represent 2^8 = 256 distinct values, a /24 block contains exactly 256 addresses (in practice, two of those, the first and last, are reserved for the network identifier and broadcast address, leaving 254 usable for actual devices). A `/16` leaves 16 bits free (2^16 = 65,536 addresses), and a `/8` leaves 24 bits free (2^24 ≈ 16.7 million addresses), so counter-intuitively, a smaller number after the slash means a much larger network.

This is exactly why /24 is the most common size for a typical home or small-office network (254 usable addresses comfortably covers most networks) while cloud providers carve out enormous /16 or /8 blocks for entire regions or customer bases.

From CIDR back to the traditional subnet mask

Before CIDR became standard, subnet masks were written out in full dotted-decimal form, like `255.255.255.0`, which represents exactly the same idea as /24: each `255` is eight consecutive 1-bits, so three full octets of 1s plus one octet of 0s is 24 ones followed by 8 zeros, exactly matching a /24. A /16 corresponds to `255.255.0.0`, and a /8 corresponds to `255.0.0.0`. CIDR notation is just a more compact way of writing the same binary mask, counting the 1-bits directly instead of spelling out four decimal octets.

Working with CIDR ranges in practice

When configuring firewall rules, VPC subnets, or DNS records, you regularly need to know a CIDR block's actual usable address range, its first address, last address, and total count, and doing that math by hand for anything other than a round number like /24 gets error-prone fast (a /27, for instance, has 32 addresses per block, and figuring out which specific addresses that covers requires binary arithmetic most people don't do casually). The CIDR Subnet Calculator computes the full range, usable host count, and subnet mask instantly from any CIDR notation, and the IP Address Converter helps translate an IP address between decimal, binary, and hex representations when you need to see the underlying bits directly.

Frequently asked questions