//THE ACADEMY IS GROWING DAILY. CHECK OUT THE FIELD NOTES FROM TECHS HERE AT THE ACADEMY
>_DAEMONCORE // ACADEMY
← FIELD NOTES

Subnetting and CIDR mental math for assessments

2026.09.19//10 MIN READnetworkingpenetration-testingred-teamrules-of-engagement

// Understanding Subnetting and CIDR

Subnetting can often feel like a chore, particularly during engagements when speed and accuracy are paramount. Yet with some practice, you can handle CIDR calculations in your head, allowing you to make quick decisions on IP addressing and network segmentation.

// The Basics of CIDR

Classless Inter-Domain Routing (CIDR) allows for variable-length subnet masking and an efficient allocation of IP addresses. This flexibility helps avoid the wastage of IP addresses that traditional class-based systems often lead to. CIDR notation consists of an IP address followed by a slash and a number (e.g., 192.168.1.0/24). The number indicates how many bits of the address are used for the network part.

// Mental Math for CIDR

Understanding how to quickly determine subnet sizes and available addresses can boost your efficiency. You need to remember a few key calculations:

  • /24 provides 256 addresses (0-255).
  • /23 gives you 512 addresses (0-511).
  • /22 offers 1024 addresses.
  • The formula to calculate available hosts is 2^(32 - subnet bits) - 2. The -2 accounts for the network and broadcast addresses.

Quick Reference Table

| CIDR Notation | Subnet Mask | Number of Hosts | |---------------|-------------------|-----------------| | /30 | 255.255.255.252 | 2 | | /29 | 255.255.255.248 | 6 | | /28 | 255.255.255.240 | 14 | | /27 | 255.255.255.224 | 30 | | /26 | 255.255.255.192 | 62 | | /25 | 255.255.255.128 | 126 | | /24 | 255.255.255.0 | 254 | | /23 | 255.255.254.0 | 510 | | /22 | 255.255.252.0 | 1022 |

Practical Example

Imagine you are assessing a network segment and you need to quickly identify the subnet size for a given CIDR notation. If you encounter 10.0.0.0/16:

1. Count the number of bits used for the network: 16. 2. Calculate available hosts: 2^(32 - 16) - 2 = 65534. 3. You know the subnet mask is 255.255.0.0. 4. You can then confidently create segmented subnets (e.g., 10.0.1.0/24 for one subnet and 10.0.2.0/24 for another).

Common Mistakes to Avoid

  • Forgetting the -2 rule: Many people overlook the two addresses reserved for the network and broadcast.
  • Assuming contiguous subnets: Ensure that when segmenting, you’re using valid and non-overlapping ranges.
  • Miscalculating bits: Knowing your binary can save you time. Remember that each increment in the CIDR notation halves the number of available hosts.

// Tools for Validation

While mental math is useful, sometimes you need validation through command line tools. Here’s how to use ipcalc to verify subnetting calculations:

ipcalc 10.0.0.0/16

This will output:

Address:   10.0.0.0
Netmask:   255.255.0.0 = 16
HostMin:   10.0.0.1
HostMax:   10.0.255.254
Broadcast: 10.0.255.255
Hosts/Net: 65534

Using ipcalc helps reinforce your mental model by giving you a quick confirmation of your calculations.

// Defensive Implications

Understanding CIDR and subnetting not only aids in assessments but also enhances your defensive posture. By properly segmenting networks, you can reduce the attack surface area and contain potential breaches. During an assessment, if you can readily identify and manipulate subnets, you're better equipped to recommend segmentation strategies that minimize risk.

// Workflow Checklist

1. Identify the CIDR notation for the target network. 2. Calculate the subnet mask and number of hosts using mental math. 3. Use a reference table for quick calculations if needed. 4. Validate your calculations with tools like ipcalc or subnetcalc. 5. Document your findings and recommendations on subnetting strategies.

Practicing these calculations will make you more agile in engagements and enable rapid decision-making, particularly when time is of the essence. The more you practice, the quicker the math becomes, and soon you'll be able to make these calculations without a second thought.

--- // FIELDOPS REPORT AUTHORIZED BY: Theodore O. //