myIP

NETWORK KNOWLEDGE

Read CIDR, subnet masks and address boundaries

The /24 after an address is a network prefix length, not a port number. A small change to that number can change the allowed range dramatically. Use 192.168.1.37 as a worked example to check calculator output and distinguish a device address from a network rule before saving a configuration.

By myIP · Standards-based explanations and original worked examples ·

1. A longer prefix describes a smaller block

IPv4 has 32 bits. A /24 leaves 8 bits for addresses within the block: 2 to the power of 8, or 256 addresses. A /26 leaves 6 bits and contains 64. Reducing the prefix to /16 expands the block to 65,536 addresses; it is a broader rule, not a stricter one. This distinction matters when choosing an allowlist.

A subnet mask expresses the same prefix in dotted form: /24 is 255.255.255.0 and /26 is 255.255.255.192. A normal CIDR mask has consecutive one-bits followed by zero-bits. A discontinuous mask such as 255.0.255.0 is not a single CIDR prefix. The calculator accepts a prefix, not an arbitrary mask string.

2. Check the boundaries of .37/26

A /26 groups the final octet in blocks of 64, starting at 0, 64, 128 and 192. Address 192.168.1.37 falls in the first block, so the network is 192.168.1.0/26 and the last address is 192.168.1.63. Conventional hosts run from .1 to .62. Address .64 is the start of the next block, not another host in this one.

Keep the full address block separate from the conventional host range. The first and last addresses normally identify the network and broadcast. Applying the same two-address subtraction to a supported /31 point-to-point link or a /32 host route produces a misleading result. Equipment support still needs checking independently.

192.168.1.37/26
Network:   192.168.1.0/26
Mask:      255.255.255.192
Range:     192.168.1.0 - 192.168.1.63
Hosts:     192.168.1.1 - 192.168.1.62

3. Choose the value that matches the setting

A static device setting needs an unused host address, not the network identifier. A network allow rule may need the normalized CIDR. If the purpose is to allow just one external IPv4 endpoint, consider /32 rather than the entire /24. A changing public address can also make a previously correct allow rule stale. Verify the field purpose before copying a result.

0.0.0.0/0 includes every IPv4 address. A mathematically valid block is not necessarily a safe allow range. The calculator does not determine authorization or security policy. For remote administration ports, check administrator policy and preserve the original values before making a change. Do not use a valid result as a reason to remove access restrictions.

4. Check your understanding with the calculator

  1. Calculate 192.168.1.37/24 and check 256 total addresses and 254 conventional hosts.
  2. Change the same address to /26 and verify that the last address becomes .63.
  3. For 192.168.1.37/32, check that the network identifies that single address.
  4. Do not copy example settings into a real network; verify its actual address, mask and possible conflicts first.

Technical sources and references

Content and correction principles

myIP provides practical information for understanding IP observations and network settings. Guides refer to the technical sources below, while examples use private or documentation addresses. We do not reproduce external articles or invent interviews, expert credentials or visitor experiences. Standard definitions are distinguished from this service behavior, with limitations stated. See the contact page for correction channels.

Contact | myIP