Skip to tool
ecech.
🌐 Network & IP

The Summary Route Covers More Than the Networks You Listed

192.168.1.0/24 and 192.168.2.0/24 summarize to 192.168.0.0/22 — which also claims two networks you never mentioned.

Summary

Routes saved

Addresses covered

Not yours

claimed anyway

Where the prefixes diverge

Result

Advertisement

How the calculation works

Two networks in, four networks claimed you advertise 192.168.0.0/24 192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 the /22 covers 192.168.0.0/22 — 1024 addresses 1 = 00000001 2 = 00000010            ^ first differing bit The summary follows the common bits, not the list you typed.

How to Use This Tool

Paste the networks you want to advertise as one route. You get the summary prefix, and — more usefully — the ranges that summary claims which you did not list.

The summary follows the bits, not your list

A summary route is the shortest prefix whose network address matches all of your networks. Which means it is decided entirely by how many leading bits they have in common, and the router has no way to express "these two but not the ones between".

Take 192.168.1.0/24 and 192.168.2.0/24. In binary the third octet is 00000001 and 00000010: they first differ at the seventh bit, so the common prefix is 22 bits long. The summary is 192.168.0.0/22, and a /22 spans four /24s — .0, .1, .2 and .3.

You listed two. You are now advertising four. If another router owns 192.168.0.0/24 and your summary is more specific than whatever it has, traffic for that network arrives at you and gets dropped. This is the classic summarization outage, and it looks like an intermittent problem because it only affects the prefixes nobody was thinking about.

Three conditions for an exact summary

A set of networks summarizes exactly — no extra addresses — only when all three hold:

  • Contiguous. No gaps. A missing /24 in the middle is still covered by the summary.
  • Power-of-two count. Three /24s cannot become one prefix; the smallest prefix covering three covers four.
  • Aligned to its own size. A block of four /24s must start on a multiple of four: .0, .4, .8. Starting at .1 or .2 forces a shorter prefix that reaches backwards.

Alignment is the one that surprises people, and it is the same rule as in subnetting: a block must begin at a multiple of its own size. 192.168.1.0 through 192.168.4.0 is four contiguous /24s and still does not summarize to a /22, because it does not start on a /22 boundary.

Same four networks, different starting point .0 .1 .2 .3 /22 exact — starts on a multiple of 4 .1 .2 .3 .4 needs /21 Four contiguous /24s, and the second set spans a boundary, so the shortest prefix covering all four is a /21 — eight /24s, four of them not yours.
A block must start at a multiple of its own size. Contiguity alone is not enough.

When over-claiming is fine, and when it is not

Advertising more than you own is safe in exactly one situation: you own the extra space too, or nobody does. That is common inside one organisation, where 10.4.0.0/14 covering all of 10.4–10.7 is fine because the whole range is yours whether or not it is in use yet.

It is not safe at a boundary you do not control — to an ISP, to a peer, or across a merger where two networks both use RFC 1918 space. There, switch this tool to the exact-summaries mode: it returns the smallest set of prefixes that covers your networks and nothing else. Two or three routes that are correct beat one route that black-holes a neighbour.

Why summarize at all

Every route consumes memory on every router that carries it, and every route is something to recompute when a link flaps. Summarizing also hides instability: if one /24 inside a summarized block goes up and down, neighbours outside never see the change, because the summary is still valid. That containment is usually worth more than the table size saving.

Advertisement

Frequently Asked Questions

What is route summarization?
Replacing several specific prefixes with one shorter prefix that covers them all, so neighbouring routers carry one route instead of many. It shrinks routing tables and, more importantly, hides instability — a link flapping inside the summarized block is invisible outside it.
Why does my summary route cover networks I did not list?
Because the summary is the shortest prefix matching the common leading bits of your networks, and there is no way to express 'these but not the ones between'. 192.168.1.0/24 and 192.168.2.0/24 first differ at bit 23, so the summary is a /22 — which also covers .0 and .3.
When does a set of networks summarize exactly?
When it is contiguous, contains a power-of-two number of equal-sized blocks, and starts on a multiple of the combined size. Miss any one and the shortest covering prefix reaches beyond what you own.
Can I summarize three networks into one route?
Not exactly. The smallest prefix covering three equal blocks covers four, so one of them will be claimed without being yours. Either advertise two routes — one covering a pair, one for the odd network — or accept the over-claim if you own the fourth block anyway.
Is it a problem to advertise more addresses than I own?
Only where someone else might own the extra space. Inside one organisation it is normal and harmless. At an ISP boundary, a peering, or after a merger where both sides use private addressing, an over-claiming summary black-holes the other party's traffic — and it looks intermittent, because it only affects prefixes nobody is thinking about.
What is the difference between a supernet and a subnet?
Direction. Subnetting lengthens the prefix to split one network into smaller ones; supernetting shortens it to merge several into one. Same arithmetic, opposite intent — and the alignment rule applies to both.

Related tools in Network & IP

Browse all Network & IP tools
The person who builds ecech., at the desk where the tools are written.

Made by one person

ecech. is not a content farm. Every tool here is written and checked by hand, one at a time, by someone who wanted the tool to exist and could not find a version that showed its working.

No accounts and no sign-in, and nothing you type reaches a server — every calculation on this page runs inside your browser. The ads are served by Google and do set their own cookies, which is set out in full on the privacy page. More about the site.