Skip to tool
ecech.
🌐 Network & IP

Free IPv4 Subnet Calculator: Usable Host Range, Netmask and Wildcard

Network, broadcast, first and last usable address, mask, wildcard and host count — from any CIDR or dotted mask, with the binary boundary shown so it makes sense.

Usable host range

Where the mask cuts the address

Useful when carving a VPC or an office range into VLANs.

Advertisement

How the calculation works

A /26 means "the first 26 bits are the network" 26 network bits — fixed 6 host bits — free the boundary All zeros in the host bits 192.168.10.0  → network address, not assignable All ones in the host bits 192.168.10.63 → broadcast address, not assignable Everything between 192.168.10.1 – .62  → 62 usable hosts (2⁶ − 2)

How to Use This Tool

Subnetting is arithmetic that looks like magic because it happens in binary while you are reading decimal. The whole subject reduces to one question: where does the mask cut the 32-bit address? Everything else — network address, broadcast, usable range, host count — falls out of that single boundary. This tool shows you the boundary as well as the answers.

Entering an address

Type anything that identifies a block and the tool will parse it: 10.0.0.0/8, 192.168.1.55/24, or an address and dotted mask like 172.16.5.1 255.255.240.0. If you enter a host address rather than the network address, that is fine and often more useful — the tool works out which subnet that host belongs to, which is exactly what you need when you are staring at a device's configuration and trying to work out its range.

Why two addresses are always unusable

In every IPv4 subnet, the address with all host bits set to zero is the network identifier and the address with all host bits set to one is the broadcast address. Neither can be assigned to a device. That is why a /24 gives 254 usable hosts rather than 256, and it is why the formula is 2^(32−prefix) − 2. The two exceptions are /31, which by RFC 3021 gives two usable addresses for point-to-point links, and /32, a single host route.

Usable hosts per prefix — each step down doubles the block /30 2   point-to-point link /29 6   tiny DMZ /28 14  server rack /26 62  small office floor /24 254
Every bit borrowed from the host portion halves the usable hosts. Going from /24 to /25 turns 254 addresses into two blocks of 126 — you lose two addresses per split, which adds up fast when carving many small subnets.

The wildcard mask

Cisco access lists, OSPF network statements and several firewall syntaxes use a wildcard mask, which is the bitwise inverse of the subnet mask. A /26 has mask 255.255.255.192 and wildcard 0.0.0.63. Typing the subnet mask where a wildcard is expected is one of the most common configuration errors in networking, and it usually fails silently by matching the wrong range rather than throwing an error.

Splitting a block

The splitter at the bottom divides your block into equal subnets of a chosen prefix and lists each one's range. This is the everyday task when you are handed a /20 for a new site and need to allocate VLANs, or carving an AWS VPC across availability zones. Plan the largest subnet first: allocating small blocks early fragments the space and leaves you unable to fit a large one later.

Advertisement

Frequently Asked Questions

Why does a /24 have 254 usable hosts and not 256?
Because two addresses in every subnet are reserved. The lowest, with all host bits zero, identifies the network itself; the highest, with all host bits one, is the broadcast address. Neither can be assigned to a device, so the usable count is 2^(32−prefix) minus 2.
What is a wildcard mask and when do I need one?
It is the bitwise inverse of the subnet mask, used by Cisco access lists, OSPF network statements and some firewall syntaxes. A /26 subnet mask of 255.255.255.192 becomes a wildcard of 0.0.0.63. Entering a subnet mask where a wildcard is expected usually does not error — it silently matches the wrong range, which makes it a painful bug to find.
Can I enter a host address instead of the network address?
Yes, and it is often more useful. Given 192.168.10.37/26 the tool determines that this host sits in the 192.168.10.0/26 subnet and shows that block's details. That is exactly what you need when reading a device configuration and working out which range it belongs to.
What is special about /31 and /32?
A /32 is a single host route with no usable range in the normal sense. A /31 would normally have zero usable hosts, but RFC 3021 permits both addresses to be used on point-to-point links, where no broadcast is needed. Most modern routers support this and it halves the address waste on router-to-router links.
Which ranges are private and safe to use internally?
RFC 1918 defines 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16 as private. The tool flags which one your block falls into, and also identifies loopback, link-local and the 100.64.0.0/10 carrier-grade NAT range, which is easy to mistake for public space and causes real problems when it overlaps with an ISP.
How should I plan subnets for a new site?
Allocate the largest subnet first and work downward. If you assign small blocks early, the remaining space becomes fragmented and you will not be able to fit a large contiguous block later. Also leave room to grow: doubling a subnet later means renumbering every device in it.
Does this work for IPv6?
No, this tool is IPv4 only. IPv6 subnetting follows different conventions — there is no broadcast address, /64 is the standard subnet size for almost every network segment, and the address space is large enough that host-count arithmetic stops being the point.

What people usually need next

Picked by hand, not by algorithm.

Related tools in Network & IP

Browse all Network & IP tools
A handwritten note reading ecech.com resting on the keyboard used to build the site.

Made by one person

ecech. is not a content farm. Every tool here is written and checked by hand, one at a time, by someone who wanted the tool to exist and could not find a version that showed its working.

No accounts and no sign-in, and nothing you type reaches a server — every calculation on this page runs inside your browser. The ads are served by Google and do set their own cookies, which is set out in full on the privacy page. More about the site.